Safeguard Authentication Services 4.1.5 - Upgrade Guide

Install One Identity Defender

In order to use strong authentication you must download and install Defender.

To install Defender

1. Insert the Authentication Services distribution media.

   The Autorun Home page displays.

   Note: If the Autorun Home page does not display, navigate to the root of the distribution media and double-click autorun.exe.

2. From the Home page, click the Setup tab.
3. From the Setup tab, click One Identity Defender.

   The One Identity Defender web page opens.

4. Click the Download on the left navigation panel.
5. Follow the online instructions to gain access to the Trial Download page.
6. From the Trial Download: Defender page, click the Defender Documentation Archive link.
7. Read the Defender Installation Guide to obtain detailed steps for installing Authentication Services Defender.
8. Once you have installed One Identity Defender, see the One Identity Defender Integration Guide located in the Control Center Tools page, or in the docs directory of the Authentication Services Installation media, for detailed configuration instructions about integrating Authentication Services Defender with Authentication Services.

Troubleshooting

This section lists some of the common installation problems that you may experience along with suggested resolutions.

Getting help from technical support

If you are unable to determine the solution to a problem, contact Technical Support for help.

Before you contact Support, please collect the following information:

1. Take a system information snapshot. To do this, run the following command as root:

   /opt/quest/libexec/vas/scripts/vas_snapshot.sh

   This produces an output file in /tmp.

2. Make note of the Unix attributes for the user that cannot log in (if applicable). To do this, capture the output from the following commands:

   vastool -u host/ attrs <username>
   id <username>

   Note: Depending on your platform, you may need to run id -a instead of id.

3. Copy the text from any error messages that you see.
4. Save the results of running a "double su". To do this, log in as root and run su <username> note any error messages. Then run su <username> again and note any error messages.

Once you have collected the information listed above, contact Support at https://support.oneidentity.com/authentication-services/.

Disaster recovery

Since Authentication Services relies on Active Directory, follow Microsoft’s best practices for keeping the database highly available. The Management Console for Unix and other administration tools, are not critical to the operation of Authentication Services and can quickly be reinstalled from scratch if needed.