Chat now with support
Chat with Support

Password Manager 5.7.1 - Administration Guide

About Password Manager Getting Started Password Manager Architecture
Password Manager Components and Third-Party Solutions Typical Deployment Scenarios Password Manager in Perimeter Network Management Policy Overview Password Policy Overview Secure Password Extension Overview reCAPTCHA Overview User Enrollment Process Overview Questions and Answers Policy Overview Password Change and Reset Process Overview Data Replication Phone-Based Authentication Service Overview
Management Policies
Checklist: Configuring Password Manager Understanding Management Policies Configuring Access to the Administration Site Configuring Access to the Self-Service Site Configuring Access to the Helpdesk Site Configuring Questions and Answers Policy Workflow Overview Custom Workflows Custom Activities Self-Service Workflows Helpdesk Workflows Notification Activities User Enforcement Rules
General Settings Upgrading Password Manager Secure Password Extension Password Policies Reporting Password Manager Integration Appendixes Glossary About us

Upgrading from Password Manager 5.5.3 or later versions

Upgrading from Password Manager 5.5.3 or later versions

Password Manager 5.7.1 supports direct in-place upgrade from Password Manager 5.5.3 or later versions including Password Manager 5.6.2 and 5.6.3 (installed with security hotfix, PasswordManager-5.6.2-SOL213268.exe). For more information see, Upgrading Password Manager to 5.7.1.

If the security hotfix, PasswordManager-5.6.2-SOL213268.exe, is not installed, to upgrade from Password Manager 5.6.2, see Upgrading from Password Manager 5.6.2 (if security patch is not installed)

If the security hotfix, PasswordManager-5.6.3-SOL213268.exe, is not installed, to upgrade from Password Manager 5.6.3, see Upgrading from Password Manager 5.6.3 (if security patch is not installed)

Upgrading Password Manager to 5.7.1

To upgrade Password Manager from 5.5.3 or later versions to 5.7.1 perform the following steps:

  1. It is recommended to back up the current configuration by exporting the settings from 5.5.3 or later versions. For more information see, To export configuration settings from Password Manager 5.5.3 or later versions.
  2. Uninstall Password Manager 5.5.3 or later versions and install Password Manager 5.7.1 on the computer where Password Manager 5.5.3 or later versions was installed. For more information see, To uninstall Password Manager 5.5.3 or later versions.
  3. Run the Migration Wizard 5.7.1. For more information, see Running the Migration Wizard.

    NOTE: Do not run Migration Wizard, if you are upgrading from Password Manager 5.6.2 or 5.6.3 with the security patch. For more information, see Password Manager Security Enhancements - Public Hotfix (213268).

To export configuration settings from Password Manager 5.5.3 or later versions

  1. Connect to the Administration site by typing the Administration site URL in the address bar of your Web browser. By default, the URL is http://<ComputerName>/PMAdmin/.
  2. On the menu bar, click General Settings, then click the Import/Export tab and select the Export configuration settings option and click Export.

After you have exported configuration settings from Password Manager 5.5.3 or later versions, you can uninstall it.

To uninstall Password Manager 5.5.3 or later versions

  1. Click Start, click Run, type appwiz.cpl, and then press ENTER.
  2. Select Quest One Password Manager x86/x64 or One Identity Password Manager x86/x64 in the list, and then click Uninstall.

After you uninstall Password Manager 5.5.3 or later versions, install Password Manager 5.7.1 on the same computer. All configuration settings will be automatically detected by the new version. For more information on how to install Password Manager, see Installing Password Manager.

If you have multiple Password Manager instances installed, when upgrading them, you may experience the following issue: the Realm Instances page of the Administration site displays an incorrect list of installed instances. After you upgrade all instances, the page will display the correct list.

Upgrading from Password Manager 5.6.2 (if security patch is not installed)

If the hotfix PasswordManager-5.6.2-SOL213268.exe is not installed, to upgrade Password Manager 5.6.2 to 5.7.1, install Password Manager 5.7.1 and follow the general upgrade instructions.

Prerequisites to upgrade to Password Manager 5.7.1:

  • If there are two or more instances of Password Manager in a realm, ensure that replication works between primary and secondary instances of Password Manager. In case of a stand-alone server, it is recommended to enable the replication to avoid any replication issues when new Password Manager instances are added later.
  • If there are two or more instances of Password Manager in a realm, ensure that one of the instances is set as primary and the remaining instances as secondary. Verify it in the Local.storage file present at C:\ProgramData\One Identity\Password Manager. In the file, search for <setting name=”role” value= and ensure that the value parameter for one of the servers or instances is set to Primary and all others are set to Secondary. If all servers display the value as Secondary, then select one as the main server and set it to Primary. For more information see the Knowledge article.

    NOTE: After upgrade, the storage version of all the storage files are updated to a newer version. Hence it is not possible to rollback.

 

NOTE: If you have installed Password Policy Manager on all domain controllers in the domain or in future if you want to install Password Policy Manager, run the Password Policy Manager msi file that comes with Password Manager 5.7.1, on all the domain controllers, following the instructions in the Upgrading Password Policy Manager section in the Administrator Guide. The Password Policy Manager in 5.7.1 supports different sets of special characters for Required and Disallowed rules (Feature ID: 598475).

To upgrade to Password Manager 5.7.1

  1. In the primary instance of Password Manager, on the Administration site click General Settings, click the Import/Export tab and export the configuration file from Password Manager to create a backup of the current configuration.
  2. Install Password Manager 5.7.1. For more information on installing Password Manager, see Steps to Install Password Manager.
  3. On the Administration site, click General Settings, click Import/Export tab and export the configuration file from Password Manager.

    NOTE: Due to security enhancements, a complex password is generated while exporting the configuration. You must remember the password or store it in a secure place, to use while importing the configuration.
  4. In all the secondary instances, install Password Manager 5.7.1 and import the configuration file exported in step 3. This will update the corresponding host information in Shared.storage file with the current configuration and the status of importing the new configuration file. If the new configuration file is imported, the value of AESEncryption in Shared.storage is set to true in all the primary and secondary instances.
  5. Run the Migration wizard 5.7.1 to update the user profiles. For more information, see Running the Migration Wizard.

Important notes for upgrading to Password Manager 5.7.1

  1. Replication must be enabled for the successful installation of Password Manager 5.7.1.
  2. To update storage files with new encryption mechanism, all realm instances must be updated with the Password Manager 5.7.1 configuration and must have the same encryption key.
  3. If the secondary instances are not updated with new configuration, a notification will be displayed in Administration site as 'Import configuration settings from primary instance”.
  4. Shared.storage file will be encrypted and copied to Active Directory only when all the instances are updated with Password Manager 5.7.1 configuration and encryption key.
  5. When all the realm instances are updated with Password Manager 5.7.1, Q&A profiles of users will be updated with new encryption key when one of the following is performed:
    • User updates Q&A profile
    • Run Migration wizard 5.7.1 to update all the user profiles automatically.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating