Password Policy Manager ensures that all passwords in the organization comply with the password policies established by the Password Manager administrator. Password Policy Manager is necessary to enforce password policies configured in Password Manager in such cases, when users change their passwords using tools other than Password Manager. For example, when a user presses Ctrl+Alt+Delete to change password, the password policies configured in Password Manager will not be enforced, unless Password Policy Manager is installed. Skip this section if you do not use domain password policies assigned in Password Manager.
Both removal and installation of Password Policy Manager (PPM) requires computer restart. Upgrade PPM on all domain controllers in sequential order. Perform the upgrade during off-peak hours to cause minimal impact to your organization’s operations.
To guarantee that all the passwords in your organization comply with the established policies, Password Policy Manager must be deployed on all domain controllers in the managed domain.
To upgrade from Password Policy Manager version 4.x
If the previous version of Password Policy Manager has been deployed through Group Policy, it should be uninstalled by removing the previously assigned MSI package from the Software installation list. For more information, see Uninstalling Password Policy Manager. After the previous version is removed from the domain controllers, the new version may be deployed to those DCs through Group Policy.
Password policy settings are not deleted when you uninstall Password Policy Manager version 4.x and picked up by newer versions of PPM.
To export configuration settings from Password Manager 4.x, you must use the One Identity Password Manager Migration wizard 5.6.3.
|IMPORTANT: The Migration wizard 5.6.3 can be used to export configuration settings from Password Manager 4.6, 4.6.1 and 4.7 only. To upgrade from earlier versions, you need to install an intermediate version first (4.7), and only then upgrade to Password Manager 5.6.3.|
The Migration wizard 5.6.3 can be used to perform the following tasks when performing an upgrade:
When exporting configuration settings, the Migration wizard 5.6.3 creates a configuration file that must be used to import the settings to Password Manager 5.6.3. You can export and import the configuration settings several times using the Migration wizard 5.6.3. This allows you to review the results of the configuration settings import in Password Manager 5.6.3, change export settings if necessary and repeat the procedure of importing configuration settings.
Note, that not all configuration settings can be exported. The following settings cannot be exported from Password Manager 4.x and have to be manually configured in Password Manager 5.6.3:
Integration with QESSO is available in Password Manager starting from version 5.0.2
To export configuration settings from Password Manager 4.x
|IMPORTANT: Remember the password that is generated while exporting the configuration file. You should enter this password when importing the configuration file to 5.6.3 instance.|
You can perform the Export configuration settings task multiple times, by adjusting the export options you can receive different configuration files.
On a computer other than the computer where Password Manager 4.7 is installed, install Password Manager 5.6.3. When installing Password Manager 5.6.3, you can specify whether you want to install all Password Manager components on a single server or install the Self-Service and Helpdesk sites on separate servers.
For more information on installing Password Manager, see Steps to Install Password Manager.
|IMPORTANT: By default, Secure Password Extension uses the URL of the Self-Service site installed on the computer where Password Manager Service runs. You can modify the URL on the General Settings|Realm Instances page of the Administration site.|
To import configuration settings to Password Manager 5.6.3, you must use the One Identity Password Manager Migration wizard 5.6.3.
|IMPORTANT: Note, when importing configuration settings to Password Manager 5.6.3, all existing settings will be replaced.|