After updating the certificate on the Application Server, the following error occurs:"Server Error in AppServer Application" "Certificate was not found""An unhandled exception occurred during the exception of the current web request. Please review the stack trace for more information about the error and where it originated in the code"
- 精选内容
- Update Connection Strings
- Impact of CVE-2021-44228
- AutoUpdate settings are disabled with the Initial installation
- Process Monitoring and Troubleshooting Guide
- 1IM Troubleshooting Steps
- Properly Interact with Support
- How to apply Hotfixes
- How to Enable TRACE Logging
- Troubleshoot Provisioning Issues
- Troubleshooting Performance
- IT Shop Logging
- How to create an SAP Trace Log
- Identity Manager Training
- 与支持部门联系
- 与支持部门联系
欢迎访问支持
您可以在附属支持站点上查找适用于戴尔*产品*的在线支持帮助。单击“继续”，转至适用于*产品*的正确支持内容和帮助。
产品支持 - Identity Manager
立即下载
立即下载
- 已选择要下载的文件。 您可以立即下载该文件以及下方选中的任意其他文件，也可以将其添加到下载文件夹中，稍后下载。 如果是同时下载多个文件，则建议您将文件添加到下载文件夹中。
选择以上文件的客户也已下载下列推荐文件。 应禁用弹出窗口阻止程序，以下载下列文件
请稍候，我们正在验证您对此文件的授权...
下载受限
通过平板电脑和移动设备进行的下载受限。 要完成此次下载，请通过不受限设备访问此页面。
条款和条件
Prior to downloading this Software, you must review the Software Transaction Agreement located here and confirm, by clicking the I agree check box below, that your organization accepts and is bound by the terms and conditions of the Software Transaction Agreement for this Software.
If you purchased the licenses for this Software by executing an order form with Quest or if you have an agreement with Quest that states that all purchases are governed by such agreement, then the terms and conditions of that agreement supersedes and takes precedence over the Software Transaction Agreement.
我同意上述内容。
知识文章
技术说明文件
Modal title
我们的技术支持人员已确定以下帮助您入门的重要信息。若要获得最佳结果，请确保在使用戴尔产品之前通读所有材料。
Identity Manager (1IM) is configured with Active Directory (AD) as the target system.In Manager | Active Directory | Target synchronization: Active Directory, there are entries for ADSAccount, ADSAccountInADSGroup, etc.In the case of ADSAccountInADSGroup, the listed users are members of respective AD groups in 1IM, but not members of the group in AD.Why are these accounts listed as "Outstandi...
What are the steps required to allow an Employee to have "read only" access to other Employee accounts?For example, there is a requirement for specific Employees or external consultants to view properties for Employee accounts using Manager.How can a custom application role, giving read-only access to Employee objects, be created?
An Employee with ADSAccount is added to a Business Role with some AD groups assigned, but the Employee's ADSAccount doesn't inherit memberships from the role.This may also occur for other instances where group inheritance is required, i.e. Department, Cost center, Location.
Auto update is used to upgrade job servers, front ends and web applications. When a hot fix, dll or upgrade of the software package is completed the files are updated in the Identity Manager database. To ensure that the other components receive those files the Auto Update is used to distribute these files.
How can administrators locate security certificates associated with the One Identity Manager Web Portal?
Establish and implement a strong Identity Manager foundation in as little as six weeks with the Identity Manager Foundation Services Package. Offered through One Identity Services (OIS), you get expert, guided assistance every step of the way so that you can implement our Identity Manager solution quickly, effectively and efficiently.Straight out-of-the-box, the Identity Manager Foundation Service...
The Identity Manager (OneIM) documentation explains the use of local cache as follows:"Some connectors support the use of local cache. If cache is enabled, the connector loads all the necessary data into a local database after the connection has been established with the target system. The data is loaded for each schema type. The data required for synchronization are then supplied by the loca...
What are product owners, and what does it mean when a product owner is assigned?Adding an owner to a service item via IT Shop adds them to other service items as well, why?Can a different product owner be assigned to a service item?When and why are product owner roles created?
After a schema extension the tasks "Enable Constraints 2" or "Disable Constraints 2" are "stuck" in DBQueue, i.e.not processing.
以下所列为建议软件以及相关文档，有助于您了解将您的产品升级到推荐版本的安装流程。
Identity Manager helps you simplify the access management process by leveraging an automated architecture. With Identity Manager, you can manage user identities, privileges and security across the enterprise. It puts you in control of identity management and takes the burden off your IT staff.
How can administrators locate security certificates associated with the One Identity Manager Web Portal?
Establish and implement a strong Identity Manager foundation in as little as six weeks with the Identity Manager Foundation Services Package. Offered through One Identity Services (OIS), you get expert, guided assistance every step of the way so that you can implement our Identity Manager solution quickly, effectively and efficiently.Straight out-of-the-box, the Identity Manager Foundation Service...
Error: Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'.
Jobs are getting frozen jobs when attempting to create ADSAccounts. The following error is displayed in the logs:[System.InvalidCastException] Unable to cast COM object of type 'System.__ComObject' to interface type 'ActiveDs.IADsUser'. This operation failed because the QueryInterface call on the COM component for the interface with IID '{GUID}' failed due to the following ...
Identity Manager Language Pack (in ZIP format) applies to all 9.2.x versions. The Identity Manager Language Pack contains ITShop translations in these languages: Chinese, Dutch, French, Italian, Japanese, Korean, Norwegian, Polish, Portuguese, Russian, Spanish, Spanish (LA), Swedish, and Danish. Please refer to the Support Portal knowledgebase article 339163 for additional information.
技术支持部门审核了所有支持信息，确定了最受欢迎的有用技巧和操作视频或文章，以确保您充分利用戴尔产品。
After updating the certificate on the Application Server, the following error occurs:"Server Error in AppServer Application" "Certificate was not found""An unhandled exception occurred during the exception of the current web request. Please review the stack trace for more information about the error and where it originated in the code"
Identity Manager (1IM) is configured with Active Directory (AD) as the target system.In Manager | Active Directory | Target synchronization: Active Directory, there are entries for ADSAccount, ADSAccountInADSGroup, etc.In the case of ADSAccountInADSGroup, the listed users are members of respective AD groups in 1IM, but not members of the group in AD.Why are these accounts listed as "Outstandi...
What are the steps required to allow an Employee to have "read only" access to other Employee accounts?For example, there is a requirement for specific Employees or external consultants to view properties for Employee accounts using Manager.How can a custom application role, giving read-only access to Employee objects, be created?
After setting the desired authentication module in designer, the angular web portal does not display this authentication module.
Unable to add user membership to AADGroup with IsMailEnabled = True and IsSecurityEnabled = True
An Employee with ADSAccount is added to a Business Role with some AD groups assigned, but the Employee's ADSAccount doesn't inherit memberships from the role.This may also occur for other instances where group inheritance is required, i.e. Department, Cost center, Location.
When adding a custom theme via the administration portal, the theme is not applied to the web portal
When a delegation is made by an attester, the Workflow for the attestation case shows that it can be attested by the user who created the delegation and the one whom its delegated to. This looks to be incorrect.
How can administrators locate security certificates associated with the One Identity Manager Web Portal?
After setting prohibit modification for an column on an Identity within manager, the column is set to read only as expected. If an applicable account views an identity via data explorer in the angular web portal, the column is able to be edited.
以下信息介绍了客户最常遇到的问题或有助于您排除戴尔产品故障的最新解决办法。
After updating the certificate on the AppServer, the below error may appear: Server Error in '/AppServer' Application. Keyset does not exist System.Security.Cryptography.CryptographicException: Keyset does not exist
After updating the certificate on the Application Server, the following error occurs:"Server Error in AppServer Application" "Certificate was not found""An unhandled exception occurred during the exception of the current web request. Please review the stack trace for more information about the error and where it originated in the code"
Identity Manager (1IM) is configured with Active Directory (AD) as the target system.In Manager | Active Directory | Target synchronization: Active Directory, there are entries for ADSAccount, ADSAccountInADSGroup, etc.In the case of ADSAccountInADSGroup, the listed users are members of respective AD groups in 1IM, but not members of the group in AD.Why are these accounts listed as "Outstandi...
After upgrading from Identity Manager version 9.2 to 9.2.1, it is observed that the ADS connector will only handle the first 1500 members of an ADSGroup. Any memberships above 1500 are marked as outstanding. Please note that this only affects Identity Manager version 9.2.1
What are the steps required to allow an Employee to have "read only" access to other Employee accounts?For example, there is a requirement for specific Employees or external consultants to view properties for Employee accounts using Manager.How can a custom application role, giving read-only access to Employee objects, be created?
Steps to reproduce: Login (identity rolebased) as a manager of an inactive employeeE.g. on bountyqs I used ARNES (who is the manager of inactive HEIDRUNA)Check whether the start page tile lists "My Direct Reports" lists your inactive reports (or not)Click the "VIEW" link of that tile(Navigates to Identities form)Check whether the Identities form lists your inactive reports (or ...
Duplicates in JobHistory appear sporadically. If such duplicates exist and historization process is started, the move of data from RawJobHistory to HistoryJob on an HDB fails because of PK constraint violation.Error:[810023] Error running statement: exec HDB_PProcessGroup '008FBECF-229B-4059-9D64-6BE2618A0334'[810143] Database error 3903: The ROLLBACK TRANSACTION request has no correspondi...
The lock timeout for specific statements is not long enough, for example: QBM-K-QBMConstraintEnable2
The "QBM_TransportToHistoryDatabase" process fails in the job queue with the following error:Source database not configured for loading data into history database. Transport is been skipped.
Sporadic loss of DialogDBQueue entries on DatabaseAgents startup when queue is almost empty
Product Life Cycle
| 版本 | 全面支持截止日期 | 有限支持截止日期 | 已停止支持 |
|---|---|---|---|
| 9.2.1 | 6/3/2024 | ||
| 9.1.3 | 3/18/2024 | ||
| 9.0.x LTS | 8/12/2022 | 9/30/2025 | 7/1/2027 |
| 9.1.2 | 12/1/2023 | 5/1/2025 | 12/1/2025 |
| 9.2 | 10/20/2023 | 4/30/2025 | 10/31/2025 |
| 9.1.1 | 4/14/2023 | 10/31/2024 | 4/30/2025 |
| 9.1 | 9/30/2022 | 3/31/2024 | 9/30/2024 |
| 未列出的较旧产品版本视为已停用。 | |||
以上产品支持生命周期表介绍了产品在哪个阶段符合产品支持和下载新版本的条件。
由于One Identity最近从戴尔剥离，One Identity从戴尔获得了许多产品。 在本网站上找到的一些旧产品可能仍包含戴尔品牌。 但是，这些产品现在由One Identity（而非戴尔）独有和提供支持。 戴尔与这些产品或服务没有任何关系，且One Identity独立于戴尔为这些产品提供服务。
产品支持策略
产品支持生命周期指明了我们的产品符合从支持门户获取补丁程序（修补程序）、支持和下载内容的各个阶段。
这是我们在当前产品版本中为当前拥有支持协议的客户提供支持和修复程序的策略。 是否提供针对早期版本的修复由我们自行决定。 我们会努力为最近的产品版本提供资源，以不断提高和强化产品的价值。
只要提供相关资源，我们就会尝试回答有关较早版本产品的问题；但是如果您使用的是停用的版本，则建议您升级为当前支持版本的产品。
我们通常所采用的支持策略是为产品的当前(n)版本及其前一版本(n-1)提供支持。 请参阅产品支持页面或知识库中的产品生命周期表，了解更多信息。
全面支持
- 完全受支持的产品（正式发行版/版本）。
- 包括产品的最新发布版本及其之前的一个或多个版本。
- 接受对此版本的增强功能请求，并且可能考虑将相关增强功能包含在未来版本中。
- 将定期为此版本提供维护版本和/或热修补。
- 支持和开发团队为版本提供全面支持。
- 可以从支持门户下载相关版本。
有限支持
- 我们为此版本提供支持，并且将尽最大努力提供已知的解决方法或修复。
- 不会生成新代码修复，除非在极端情况下由我们自行决定生成新代码修复。
- 不接受增强功能请求。
- 建议您计划升级到具有“全面支持”的版本。
- 可以从支持门户下载相关版本。
停用
- 包括已淘汰或停用的版本。
- 不会为此版本创建新的补丁程序或修复。
- 不能从支持门户下载相关版本。
- 将提供支持来帮助升级到受支持的版本。
- 支持人员没有义务为此产品版本提供帮助。
产品增强功能
如果您想要提交产品增强功能请求，则可以在支持团队的帮助下创建案例，实现此目的。 我们收到产品增强请求后，支持工程师将定义并清楚地记录该请求。 记录请求后，该请求会被提交到增强功能审核系统，相应标识编号会提供给提交者且支持案例将关闭。
产品管理团队将定期审核打开的增强功能请求，并考虑将它们包含在未来的产品版本中。 不会考虑在当前/之前的产品版本中包含或实施产品增强功能。 不保证在未来的产品版本中实施特定的增强功能请求。 对于提供的某项特定增强功能，我们将自行决定是额外收费还是作为应计费选项。
产品缺陷
如果系统确定您的问题与产品缺陷相关，则会将其记录在我们的缺陷跟踪系统中，向您提供唯一的缺陷标识符(ID)并关闭支持案例。 只要您已经将个人资料配置为接收产品通知，我们便会通过电子邮件向您发送有关新产品版本的通知。 全新产品的发行说明会包含该版本中已解决缺陷标识符的列表。 您可以查看版本说明或使用缺陷标识符搜索支持门户中的知识库，看看问题是否已解决。 我们不保证会在未来的产品版本中修复所发现的所有缺陷。
我们的产品具有许可证密钥来保证产品正常使用。 部分产品升级到新版本和/或补丁程序后，需要新的许可证密钥。 我们还建议在对产品进行任何迁移或升级操作前，确认新的许可证能够正常发挥作用，因为某些许可证密钥是针对特定计算机和计算机名称的。
如果您对某产品的许可存在疑问，请填写“支持门户许可页面”中的表单。 软件许可代表会在24小时内对您的查询作出响应。
您也可以通过发送电子邮件至license@oneidentity.com，联系软件许可团队。
针对试用用户的支持
我们会挑选一些产品提供软件试用版，以作测试之用。 自注册之日起，我们为试用用户提供为期30天的支持。 针对试用版产品的服务请求仅限测试期的前30天内提交。 您仍可不受限地访问支持门户，以访问知识库和产品页面。
软件产品的自定义策略
自定义功能是指产品中添加的功能和配置，由于并不在核心版本产品中提供，所以不属于标准支持和维护。 自定义内容可能以产品中或随产品提供的全新或经修改脚本的形式存在，也可能是您、您的合作伙伴或我们专业服务组织开发的其他功能，如自定义报告、信息显示板、规则、自动化操作等。
支持和自定义
我们不会执行或维护自定义内容。 对我们的产品进行的自定义设计和开发由您负责。 支持门户提供的帮助仅限于帮助确保产品的功能（其支持添加自定义内容）能够正常运行。 或者您可以通过产品的特定社区站点或支持知识库获得指导。
高级帮助
如果需要更为全面和详细的帮助来设计和开发自定义内容，我们建议您联系专业服务组织或经全面认证的合作伙伴，以获得帮助。 他们在设计自定义解决方案方面具有丰富的专业知识，可以确保客户获得最大的价值和产品采用率。 除了能够提供实施后专家服务，专业服务还针对某些产品提供各种预打包自定义内容，可能会满足您的特定要求。
培训和认证
我们建议您参加相应的产品培训，然后再尝试针对我们的产品设计、开发和实施任何自定义内容。 我们的培训课程可让客户具备必要的知识和能力，以便设计和实施有效的产品更改。 更多有关可用培训服务的信息，请参阅培训和认证服务。
维护自定义内容
未来迁移或升级到新产品和平台版本时，应仔细考虑所有自定义内容。 这些自定义内容可能会妨碍升级并且可能需要重新设计才能继续正常运行。 任何定制都不在支持团队的服务范围之内。 我们强烈建议您记录并维护所实施的任何自定义工作的记录。 这些记录有助于隔离自定义内容造成的问题或核心产品中的缺陷。
虚拟化的支持策略
虚拟化是一种技术，用于隐藏其他系统、应用程序或最终用户与计算资源交互方式中的物理特性。 它可以使服务器、操作系统、应用程序或存储设备等单个物理资源看起来像多台逻辑设备一样工作。 此外，它还可以使存储设备或服务器等多个物理资源看起来像是单个逻辑资源。 因此，虚拟化使IT部门可以增加资源利用率、提高可用性并简化备份、系统管理和恢复过程。 它还可以使IT部门更快响应业务的动态需求。 虚拟化技术的示例包括VMware ESX Server、Citrix/XenServer和Microsoft Windows Server 2008 Hyper-V。
我们的产品利用通过虚拟化技术提供的二进制兼容性，可使所部署的操作系统和应用程序完全透明。 因此，对于在虚拟环境中使用软件产品期间收到的所有案例，我们会假设该问题是原生和虚拟操作环境的共有情况，仅当有证据证明该问题是虚拟环境的特有情况时，我们才会要求客户在原生环境中重现该问题。
从纯功能角度来看，我们的产品将按完全相同的方式运行，但是，我们对于在运行多个虚拟实例的虚拟化环境中的性能或可扩展性不予保证。 CPU、内存可用性、I/O子系统和网络基础架构等配置方面都会影响此类部署，需小心谨慎，以确保虚拟层具备所需资源，以提供符合要求的用户体验。
第三方软件的支持策略
我们致力于提供与当前业内最新平台和技术兼容的产品。 我们与技术供应商密切合作，以确保尽快与我们的解决方案实现兼容。 我们在为每款产品发布的版本说明中提供所有系统要求以及这些产品支持的平台和第三方产品版本的完整详情。 这些信息包括受支持的操作系统版本、Service Pack级别、邮件客户端或服务器版本、数据库版本、浏览器及其他相关技术，以及哪些特定产品版本级别已针对运行这些内容通过了正式测试和认证。 对未来平台版本、新Service Pack和其他相关技术的支持将在定期产品维护和产品发布周期中予以考虑并提供相应的解决方法。 这为在客户环境中使用我们的产品提供了持续的向上兼容性。 因此应注意的是，在最新平台技术版本或服务补丁程序的可用性与针对运行这些内容通过了认证的产品版本之间可能存在延迟。 如果您对任意产品和特定相关平台、修补程序或未在发行说明中明确说明的第三方产品支持的当前支持状态存在任何疑问，请联系支持团队。
有关受支持的最新第三方平台和版本的详情，请查看产品版本说明中的“System Requirements”（系统要求）部分，或者搜索支持门户中的知识库。 请注意，虽然我们并不直接或正式为第三方软件提供支持，但我们与许多其他提供商紧密协作，以确保我们的客户始终能够享受优质服务。
新产品关联性
您已被重定向到xxxxx，其中包含yyyyy的支持信息。
可在以下位置找到支持信息：