Upgrading from Password Manager from 4.x to 5.6.3
Upgrading from Password Manager from 4.x to 5.6.3
There are two methods to upgrade Password Manager from version 4.x to 5.6.3:
- Side-by-side upgrade. Using this method, you install Password Manager 5.6.3 on a computer alongside the computer where Password Manager 4.x is installed. Export all settings from Password Manager 4.x, import them to Password Manager 5.6.3, and then uninstall 4.x version.
- In-place upgrade. Using this method, you install Password Manager 5.6.3 on the same computer where Password Manager 4.x was installed. First, you export settings from Password Manager 4.x, uninstall it, install 5.6.3 and import the settings.
|NOTE: You can perform a direct upgrade to 5.6.3 only from versions 4.6, 4.6.1 and 4.7. To upgrade from earlier versions, you need to install an intermediate version first (4.7), and only then upgrade to 5.6.3.|
It is recommended to perform a side-by-side upgrade rather than an in-place upgrade. If you want to perform an in-place upgrade, it is recommended to use a test environment before upgrading Password Manager in the production environment of your enterprise
Not all configuration settings can be migrated from Password Manager 4.x. The following settings will not be migrated and have to be configured manually:
- User email notifications
- Administrator email notifications
- Email notification templates
- Profile update policy
- User enforcement settings
- Password expiration notifications
- SQL Server and Report Server settings
- Integration with One Identity Quick Connect Sync Engine, Defender, QESSO
Before you start the upgrade process, follow this checklist to ensure you have made the necessary preparations and met the essential upgrade requirements.
- Back up the current configuration by doing one of the following:
- Export the configuration file using the Import/Export option in General Settings and Import he same file after the upgrade.
- Create a copy of the ProgramData folder in C:\ProgramData\Dell\Password Manager.
- Ensure that you installed or upgraded the third-party redistributables package required for the latest version of Password Manager.
- Ensure that you know the name and password for the domain management accounts.
- Ensure that Password Manager Service account is a member of the Administrators group on the Web server where Password Manager is installed.
- Ensure that in IIS 7.0, application pool identity account is a member of the IIS_IUSRS local group. This account must also have permissions to create files in the <Password Manager installation folder>\App_Data folder.
- Ensure that you know the user name and password for SQL database account.
- Ensure that the account, that is used to upgrade Password Manager, is a member of the local Administrators group on the server where you upgrade the product.
- Ensure that the account, that is used to upgrade Password Manager, is a member of the database creators (db_creator) fixed role on the SQL server hosting the Password Manager configuration database.
Depending on your environment, refer to one of the sections below: "Side-by-Side Upgrade" or "In-Place Upgrade".
When upgrading to Password Manager 5.6.3, it is recommended to perform a side-by-side upgrade. When performing a side-by-side upgrade, you install Password Manager 5.6.3 on a computer alongside the computer running an earlier version of Password Manager.
Thus, you have two versions of Password Manager and can export and import configuration settings several times using the Migration wizard 5.6.3. This allows you to review the results of the configuration settings import in Password Manager 5.6.3, change export settings if necessary and repeat the procedure of importing configuration settings.
|NOTE: It is recommended to perform a side-by-side upgrade from Password Manager version 4.7.|
Side-by-side upgrade should be performed in the following order:
- Use the administrative template to force SPE to connect to the Self-Service site 4.x.
- Upgrade Secure Password Extension (SPE).
- Upgrade Password Policy Manager (PPM).
- Export configuration settings from Password Manager 4.x.
- Install Password Manager 5.6.3.
- Import configuration settings to Password Manager 5.6.3.
- Configure settings in Password Manager 5.6.3 that were not migrated from Password Manager 4.x.
- Verify the configuration by creating a test user.
- Export configuration settings from Password Manager 5.6.3 and import them to all other instances of Password Manager 5.6.3. This step is optional and should be performed if you have multiple instances of Password Manager.
- Convert Q&A profiles of users belonging to the user scope of created Management Policies. If you upgrade Password Manager from version 4.6.x, before converting users' Q&A profiles make sure you stop the scheduled tasks ("Quest Password Manager" and "Quest Password Manager Publisher") and stop the QPM application pool in IIS console on a computer running Password Manager 4.6.x.
- Use the administrative template to disable the setting that forces SPE to connect to the Self-Service site 4.x.
- Uninstall Password Manager 4.x.
Once Password Manager 4.7 is upgraded to 5.6.3, proceed with the upgrade to 5.7.1.
Upgrading from Password Manager 5.5.3 or later versions
Upgrading > Upgrading from Password Manager 5.5.3 or later versions
- Navigate to the old Password Manager 5.x.x. Admin site and Export the Configuration from the 5.x.x instance. Navigate to General Settings > Import/Export. Click on Export Configuration Settings from the dropdown option. Enter a password, and click Export.
- Uninstall the exiting installation of Password Manager from Programs and Features in Control Panel.
- Install Password Manager 5.7.1 on the server by launching Autorun within the installation media and walking through the installation wizard.
- In the Password Manager Admin site, navigate to General Settings | Import/Export.
- Click on the Export Configuration Settings option and choose Import Configuration Settings.
- Click Upload and select the Export settings from Step 1.
- Verify that the settings have been successfully imported to the new installation.
- A reboot of the server is recommended.
- If Reporting was configured in 5.5.x, navigate to Reporting in the Admin site.
- Click Disconnect Servers and click Ok.
- Click Edit Connections.
- Follow the wizard to create a new database and enter the SQL Reporting information.
Reason: The database structure has changed as of 5.5.1 and as such, any previous database structure (i.e. 5.0.3, 4.7) cannot be used.
Once the configuration is confirmed, run the include Migration Wizard located in the installation source under \Password Manager\Setup\Migration Wizard. The file is QPM.MigrationWizard.exe.
|NOTE: The Migration Wizard must be run as the account running Password Manager service as only that account will have the ability to update and re-encrypt the user profiles.|