Upgrading Management Console for Unix
The process for upgrading Management Console for Unix from an older version is similar to installing it for the first time. The installer detects an older version of the console and automatically upgrades the components.
Note: The procedures in this topic assume you have Management Console for Unix 2.0.x (or later) installed.
Before you begin the upgrade procedure, close the console and make a backup of your database, as explained in step 1.
To upgrade Management Console for Unix
- Backup the database files:
- Shutdown the service. See Start/Stop/Restart Management Console for Unix Service in the console online help for details.
Management Console for Unix uses a HSQLDB (Hyper Structured Query Language Database) to store its data such as information about the hosts, settings, users, groups, and so forth.
- Copy the /var/opt/quest/mcu data directory to a backup location.
Refer to Database Maintenance in the online help for more information about the database locations and filenames.
- After backup is complete restart the service. See Start/Stop/Restart Management Console for Unix Service in the console online help for details.
Once you backup the database files, you are ready to start the upgrade.
- To start the upgrade, follow the instructions for a first-time installation. See Installing the Management Console in the console online help for details.
When the installer detects a previous version of the management console is already installed, it asks if you want to continue.
- Click Yes in the Install Management Console for Unix dialog.
- Accept the terms of the license agreement and click Next.
- Modify the default SSL (https) and Non-SSL (http) port numbers, if necessary, and click Install.
The installation wizard uninstalls the old version and configures the server database and service.
- In the Complete dialog, select the Launch the Management Console option and click Finish.
Note: After an upgrade from any version of Management Console for Unix, it is important to re-profile all managed hosts.
Upgrade Windows components
Upgrade Windows components
One Identity recommends that you upgrade your Windows components before you upgrade the Unix components.
The process for upgrading the Safeguard Authentication Services Windows components from older versions is similar to the initial installation process. The Safeguard Authentication Services Windows installer detects older versions and automatically upgrades them. The next time you launch Active Directory Users and Computers, you will see the updated Safeguard Authentication Services property tabs.
Note: Have your license available for the Setup wizard.
Upgrading Windows components
If you had a previous version of the One Identity Identity Manager for Unix web console, upgrade to the Management Console for Unix management console to take advantage of the new features.
To upgrade the Safeguard Authentication Services Windows components
- From the Safeguard Authentication Services Autorun Setup tab, click Safeguard Authentication Services to launch the Setup wizard.
The InstallShield Wizard Welcome dialog indicates that a previous installation was found.
- Click Next in the Welcome dialog and follow the wizard prompts.
The Setup Status dialog shows the progress of the upgrade:
- Removing component registrations
- Installing
- Updating shortcuts
- Registering components
- In the Update Complete dialog, indicate whether you want to restart your computer now or later.
If you choose No, I will restart my computer later, the old version of the Control Center opens; you must restart your computer to complete the upgrade process.
Configure Active Directory
Configure Active Directory
To utilize full Active Directory functionality, when you install Safeguard Authentication Services in your environment, One Identity recommends that you prepare Active Directory to store the configuration settings that it uses. Safeguard Authentication Services adds the Unix properties of Active Directory users and groups to Active Directory and allows you to map a Unix user to an Active Directory user. This is a one-time process that creates the Safeguard Authentication Services application configuration in your forest.
Note: To use the Safeguard Authentication Services Active Directory Configuration Wizard, you must have rights to create and delete all child objects in the Active Directory container.
If you do not configure Active Directory for Safeguard Authentication Services, you can run your Safeguard Authentication Services client agent in Version 3 Compatibility Mode, which allows you to join a host to an Active Directory domain.
For more information, see Version 3 Compatibility Mode.
When running Safeguard Authentication Services client agent in Version 3 Compatibility Mode, you have the option in One Identity Management Console for Unix to set the schema configuration to use Windows 2003 R2. See Configure Windows 2003 R2 Schema in the management console online help for details. The Windows 2003 R2 schema option extends the schema to support the direct look up of Unix identities in Active Directory domain servers.
You can also create the Safeguard Authentication Services application configuration from the Unix command line, if you prefer. For more information, see Creating the Application Configuration from the Unix Command Line in the Safeguard Authentication Services Installation Guide.
