Safeguard Authentication Services 4.1.5 - Management Console for Unix Administration Guide

Summary Dialog

To complete the Management Console for Unix Setup wizard

1. On the Summary dialog, click Finish.

   The Management Console for Unix log-in screen opens.

Management Console for Unix Log On Page

Whenever you launch the mangement console, you must enter an authorized account to proceed. The Management Console for Unix features that are available depend on the account with which you log in.

To use the core version of the mangement console to manage local Unix users and groups and to access system settings, you must use the supervisor account (that is, you must log on with the supervisor user name). However, to use the Active Directory features of Management Console for Unix, you must log on with an Active Directory account that has been granted access to the mangement console. That is, defined during the post-installation configuration. (See Setup Console Access by Role for details.) To add additional accounts to this access list, see Add (or Remove) Role Members.

To log on to the mangement console

1. Enter the user name and password and click Sign In.

   Enter:

   • the supervisor account name
   • a sAMAccountName, which uses the default domain
   • a User Principal Name in the form, username@domain

   The mangement console opens and displays the user name you specified in the upper right-hand corner of the screen.

2. To log on using a different account, click the authenticated user's login name and click Sign Out. Then sign back on using a different account.

   The Log-on page redisplays, allowing you to enter a different account.

Getting Started Tab

The first time you start Management Console for Unix, it opens the Getting Started tab which describes the new features in mangement console and provides you with a self-directed introduction to the basics of managing your hosts within the mangement console.

It's simple. Just follow the tasks on the left, in order. As you complete each task your progress is tracked. The right panel explains the procedures that you would do on the mangement console. Click Next to go to the next step within a task. Click the help icon in the upper right-hand corner of the mangement console to access context-sensitive help. For more information, open the help drop-down menu to access the user documentation.

There are three main tasks: General, Authentication Services, and Privilege Manager.

The General task introduces you to the new features of the mangement console since the last release, shows you an overview of the basic console functions, and then directs you to perform these tasks:

1. Add a Host.
2. Profile a Host.
3. Configure Active Directory for Authentication Services; that is, prepare Active Directory to store the configuration settings that it uses.

The Authentication Services task introduces you to Authentication Services, and then directs you to perform these tasks:

1. Verify the path to the Authentication Services software on your server.
2. Install the Authentication Services software on the host you set up in the General task.

The Privilege Manager task introduces you to Privilege Manager for Unix, and then directs you to perform these tasks:

1. Verify the path to the Privilege Manager software on your server.
2. Install the Privilege Manager Policy Server software on the host you set up in the General task.
3. Configure the host as a primary policy server.
4. Join a PM Agent or Sudo Plugin host to the policy group,

We hope this experience gives you a quick start to using Management Console for Unix.

Upgrade Quest Identity Manager for Unix

The process for upgrading Identity Manager for Unix to Management Console for Unix is similar to installing it for the first time. The installer detects an older version of the console and automatically upgrades the components.

Before you begin the upgrade procedure,

• Delete your browser's cached Temporary Internet Files and Cookies.
• Close the console and make a backup of your database, as explained in step 1.

To upgrade Identity Manager for Unix to Management Console for Unix

1. Backup the 1.0.x database files:
   1. Shutdown the service. (See Start/Stop/Restart Management Console for Unix Service for details.)

      Note: The mcu_service was called the imu_service in the Identity Manager for Unix 1.0.x console.

      Management Console for Unix uses a HSQLDB (Hyper Structured Query Language Database) to store its data such as information about the hosts, settings, users, groups, and so forth.

   2. Copy the /var/opt/quest/imu data directory to a backup location.

      Note: Refer to Database Maintenance for more information about the database locations and filenames.

   3. After backup is complete restart the service. (See Start/Stop/Restart Management Console for Unix Service for details.)

      Once you backup the database files, you are ready to start the upgrade.

2. To start the upgrade, follow the instructions for a first-time installation. (See the Installing and Uninstalling topic for your platform under Installing the Management Console to start the installation procedure.)

   When the installer detects a previous version of the mangement console is already installed, it asks if you want to continue.

3. Click Yes at the Install Management Console for Unix dialog.

   The Install Management Console for Unix dialog displays.

4. Accept the terms of the license agreement and click Next.
5. Modify the installation directory path, if necessary, and click Next.
6. Modify the default SSL (https) and Non-SSL (http) port numbers, if necessary, and click Install.

   The installation wizard installs Management Console for Unix 2.x and upgrades the database.

7. When the installer asks if you want to uninstall the previous version of the console, you can opt to leave the older version installed and continue the 2.x installation.

   Once you are satisfied with the upgrade, you can uninstall the previous version at a later time. (See the Installing and Uninstalling topic for your platform under Installing the Management Console for details about the uninstall procedure.)

   Note: While you can have both the older and the newer versions of the mangement console installed, you can not run both at the same time.

8. On the Complete dialog, select the Launch the Management Console option and click Finish.
9. Log into the mangement console as supervisor to complete the post-upgrade configuration.

   You can not login as an Active Directory user until you log in as supervisor and reassign your Active Directory accounts to specific roles.

10. On the Complete Upgrade dialog, enter your Active Directory credentials and click Continue to perform the post-upgrade configuration.

    After upgrading from 1.0.x, Active Directory accounts are assigned to the Manage Host role. To assign Active Directory users to other roles, log in to the console as supervisor and go to Settings | System Settings | Console Roles and Permissions. (See Add (or Remove) Role Members for details.)

11. On the Summary dialog, click Logout to log back in using an Active Directory account or click Close to open the mangement console with the supervisor account.