About Password Manager
Getting Started
Different Site for Different Roles
Password Manager Components
Licensing
Checklist: Installing Password Manager
Installing Password Manager
Password Manager Architecture
Configuring Password Manager Service Account and Application Pool Identity
Enabling HTTPS
Steps to Install Password Manager
Instance Initialization
Installing Self-Service and Helpdesk Sites on a Standalone Server
Installing Multiple Instances of Password Manager
Specifying Custom Certificates for Authentication and Traffic Encryption Between Password Manager Service and Web Sites
Step 1: Obtain and Install Custom Certificates From a TrustedWindows-Based Certification Authority
Step 2: Provide Certificate Issued for Server Computer to Password Manager Service
Step 3: Provide Certificate Issued for Client Computers to Self-Service and Helpdesk Sites
Configuring Management Policy
Configuring User Scope
Configuring Permissions for Domain Management Account
Adding Domain Connection
Specifying Advanced Options for Domain Connection
Changing Domain Management Account
Removing a Domain Connection
Adding Secret Questions
Password Manager Components and Third-Party Solutions
Management Policies
Password Manager Service and Administration Site
Self-Service Site
Helpdesk Site
Password Policy Manager
Secure Password Extension
Offline Password Reset
Migration Wizard
Telesign
SQL Server Database and SQL Server Reporting Services
One Identity Quick Connect Sync Engine
Defender
Starling Two-Factor Authentication
RADIUS Two-Factor Authentication
Quest Enterprise Single Sign-On
Typical Deployment Scenarios
Simple Deployment
Deployment of the Self-Service and Helpdesk Sites on Standalone Servers
Realm Deployment
Multiple Realm Deployment
Password Manager in Perimeter Network
Installing Password Manager in Perimeter Network with Read-Only Domain Controllers
Installing Password Manager in Perimeter Network with Reverse Proxy
Installing Password Manager in Perimeter Networ kwithout AD DS
Management Policy Overview
Password Policy Overview
Using One Identity Password Policies
Using Fine-Grained Password Policies
Applying Multiple Password Policies
Using Password Policy Manager
Secure Password Extension Overview
Locating Self-Service Site
reCAPTCHA Overview
Obtaining Self-Service Site URL from Service Connection Point
Changing Self-Service Site URL on the Administration Site
Launching User Notification
How It Works
How to Use reCAPTCHA on Password Manager Sites
System Requirements for Using reCAPTCHA
References
User Enrollment Process Overview
Questions and Answers Policy Overview
Password Change and Reset Process Overview
Resetting and Changing Password in Connected Systems
Enforcing Password History When Resetting Password
Replicating Password Changes
Data Replication
Phone-Based Authentication Service Overview
Checklist: Configuring Password Manager
Understanding Management Policies
Configuring Access to the Administration Site
Configuring Access to the Self-Service Site
Configuring Access to the Helpdesk Site
General Settings
Specifying Advanced Options for Domain Connection
Changing Domain Management Account
Removing a Domain Connection
Configuring Questions and Answers Policy
Workflow Overview
Custom Workflows
Custom Activities
Custom Activity Settings
Creating Custom Activities
Importing and Exporting Custom Activities
Removing Custom Activities
Self-Service Workflows
My Questions and Answers Profile
Forgot My Password
Manage My Passwords
Unlock My Account
My Notifications
I Have a Passcode
Self-Service Activities Overview
Helpdesk Workflows
Authentication Activities
Display CAPTCHA
Display reCAPTCHA
Authenticate with Password
Authenticate with Q&A Profile (Random Questions)
Authenticate with Q&A Profile (Specific Questions)
Authenticate with Defender
Authenticate with Starling Two-Factor Authentication
Authenticate with RADIUS Two-Factor Authentication
Authenticate via Phone
Authenticate with Passcode
Action Activities
Edit Q&A Profile
Reset Password in Active Directory
Change Password in Active Directory
Reset Password in Active Directory and Connected Systems
Change Password in Active Directory and Connected Systems
Unlock Account
Enable Account
Force User to Change Password at Next Logon
Subscribe to Notifications
Lock Q&A Profile
Display User Agreement
Restart Workflow if Error Occurs
Issue BitLocker Recovery Key
Notification Activities
Verify User Identity
Assign Passcode
Reset Password
Unlock Account
Unlock Q&A Profile
Enforce Update of Q&A Profile
Helpdesk Activities Overview
Notification Activities
Customizing Notifications
Email User if Workflow Succeeds
Email User if Workflow Fails
Email Administrator if Workflow Succeeds
Email Administrator if Workflow Fails
User Enforcement Rules
General Settings Overview
Search and Logon Options
Import/Export Configuration Settings
Outgoing Mail Servers
Diagnostic Logging
Scheduled Tasks
Upgrading Password Manager
Invitation to Create/Update Q&A Profile Task
Reminder to Create/Update Q&A Profile Task
Reminder to Change Password Task
Maximum Password Age Policy Task
User Status Statistics Task
Environment Health Checker Task
Web Interface Customization
Instance Reinitialization
Realm Instances
Domain Connections
Using Domain Connections
Specifying Access Account for Domain Connections
Changing Access Account for Domain Connections
Specifying Advanced Options for Domain Connection
Removing a Domain Connection
Extensibility Features
Starling Two-Factor Authentication
RADIUS Two-Factor Authentication
Email Templates
Upgrading from Password Manager 4.x
Secure Password Extension
Upgrading from Password Manager from 4.x to 5.6.3
Side-by-Side Upgrade
Upgrading from Password Manager 5.5.3 or later versions
Enabling Secure Password Extension Connection to Self-Service Site 4.x
Upgrading Secure Password Extension
Upgrading Password Policy Manager
Exporting Configuration Settings from Password Manager 4.x
Installing Password Manager 5.x.x
Importing Configuration Settings to Password Manager 5.6.3
Configuring Password Manager 5.6.3
Verifying Password Manager 5.6.3 Configuration
Upgrading Multiple Instances of Password Manager 5.6.3
Converting Q&A Profiles
Disabling Secure Password Extension Connection to Self-Service Site 4.x
Uninstalling Password Manager 4.x
In-Place Upgrade
Upgrading Password Manager to 5.7.1
Upgrading from Password Manager 5.6.2 (if security patch is not installed)
Upgrading Secure Password Extension
Upgrading Password Policy Manager
Important notes for upgrading to Password Manager 5.7.1
Running the Migration Wizard
Modifying the service account
Upgrading from Password Manager 5.6.3 (if security patch is not installed)
Configuring Access to Self-Service Site from Windows Logon Screen
Deploying and Configuring Secure Password Extension
Password Policies
Deploying Secure Password Extension
Configuring Secure Password Extension
Uninstalling Secure Password Extension
Overriding Automatic Self-Service Site Location
Password Manager Realm Affinity
Customizing the Logo for Secure Password Extension
Customizing Position of the Secure Password Extension Window
Managing Secure Password Extension UsingAdministrative Templates
About Password Policies
Installing Password Policy Manager
Uninstalling Password Policy Manager
Creating and Configuring a Password Policy
Managing Password Policy Scope
Deleting a Password Policy
Reporting
Reporting and User Action History Overview
Password Manager Integration
Setting Up Reporting Environment
Using Reports
User Action History
Managing Connections to SQL Server and Report Server
Best Practices for Configuring Reporting Services
Active Roles Web Interface
Appendixes
Basic Integration Requirements
Customizing Active Roles Home Page
Password Manager Self-Service Site Integration
Password Manager Helpdesk Site Integration
Quest Enterprise Single Sign-On (QESSO)
Appendix A: Accounts Used in Password Manager
Glossary
About us
Password Manager Service Account
Application Pool Identity
Domain Management Account
Password Policy Account
Account for Using One Identity Quick Connect
Appendix B: Open Communication Ports for Password Manager
Appendix C: Customization Options Overview
Customization of Steps in Self-Service and Helpdesk Tasks
Email Notification Customization
User Agreement Customization
Account Search Options Customization
Web Interface Customization
Customization of URLs to Self-Service Site from Other Applications
Customization of Password Policies List
Customization of Password Strength Meter
Customization of User Name
Email Templates
Password Manager provides option to set the default template for confirmation e-mail. To send an auto generated email to user if workflow succeeds or fails, configure the email template from the General Settings tab for authentication.
To configure default e-mail template:
-
On the home page of the Administration site, click General Settings, and then click the Email Template tab.
-
Select the desired language from the Select language to customize template drop down menu, to customize the email template.
-
Click the + sign before the desired workflow to edit the template. Edit the subject and body of the notification template in the default language as required. When editing the notification template, you can use the parameters available in the notification editor, for example #USER_ACCOUNT_NAME#, #WORKFLOW_RESULT#, and others.
-
In the Message format box, select the format to use for the notifications. You can select from two options: either HTML or Plain text.
-
Select the default language from the Select default language for email drop down menu, to select the default email template to send to the user.
-
In the User notification settings, select one of the following options for user notification subscription:
- Subscribe users to this notification. Allow users to unsubscribe.
- Subscribe users to this notification. Do not allow users to unsubscribe.
- Do not subscribe users to this notification. Allow users to subscribe to this notification.
- Click Save, to save the settings
Upgrading Password Manager
Upgrading Password Manager
Upgrading from Password Manager 4.x
Upgrading from Password Manager 4.x
To upgrade Password Manager from 4.x to 5.7.1, you have to first upgrade 4.x to 5.6.3 and then upgrade 5.6.3 to 5.7.1.
To upgrade from Password Manager from 4.x to 5.6.3, see Upgrading from Password Manager from 4.x to 5.6.3.
To upgrade from Password Manager from Password Manager from 5.6.3 to 5.7.1, see Upgrading from Password Manager 5.5.3 or later versions.
Upgrading from Password Manager from 4.x to 5.6.3
Upgrading Password Manager > Upgrading from Password Manager 4.x > Upgrading from Password Manager from 4.x to 5.6.3
There are two methods to upgrade Password Manager from version 4.x to 5.6.3:
- Side-by-side upgrade. Using this method, you install Password Manager 5.6.3 on a computer alongside the computer where Password Manager 4.x is installed. Export all settings from Password Manager 4.x, import them to Password Manager 5.6.3, and then uninstall 4.x version.
- In-place upgrade. Using this method, you install Password Manager 5.6.3 on the same computer where Password Manager 4.x was installed. First, you export settings from Password Manager 4.x, uninstall it, install 5.6.3 and import the settings.
IMPORTANT: You can perform a direct upgrade to 5.6.3 only from versions 4.6, 4.6.1 and 4.7. To upgrade from earlier versions, you need to install an intermediate version first (4.7), and only then upgrade to 5.6.3.
It is recommended to perform a side-by-side upgrade rather than an in-place upgrade. If you want to perform an in-place upgrade, it is recommended to use a test environment before upgrading Password Manager in the production environment of your enterprise.
|
|
IMPORTANT: Not all configuration settings can be migrated from Password Manager 4.x. The following settings will not be migrated and have to be configured manually:
|