立即与支持人员聊天
与支持团队交流

Active Roles 8.0.1 LTS - Quick Start Guide

Introduction Active Roles Setup package Active Roles uninstallation System Requirements Deploying the Administration Service Deploying user interfaces Installing additional components Upgrade of an earlier version Performing a pilot deployment Deployment considerations Silent installation of Active Roles components Configuring Active Roles to Manage Hybrid Active Directory Objects Active Roles on Windows Azure VM

Deploying the pilot Administration Service

When deploying your pilot instance of the Administration Service, you need to ensure that it has the same configuration as your production instances of the Administration Service. You can achieve this as follows:

  1. Create an instance of the new Administration Service. For instructions, see Install and configure the Administration Service.

    You can install the Administration Service of version Active Roles side-by-side with the Administration Service of version 6.9, on the same computer. Another option is to install the new Administration Service on a different computer.

    CAUTION: Upgrading from Active Roles 6.9 to a newer version is only meant to be a temporary solution, as the side-by-side installation of two different Active Roles versions can have a negative impact on the environment.

    Different versions of Active Roles are not supported in the same Active Directory domain. Different versions of Active Roles servers in the same AD domain will cause issues with dynamic groups, policies, workflows, or custom scripts, and can also cause conflicts in product functionality.

    When upgrading Active Roles to a later version, One Identity recommends to upgrade all servers running Active Roles components to the same version to be in a supported configuration.

    For more information, see Knowledge Base Article 4307177.

  1. Import the configuration data from the database used by your production Administration Service of the earlier Active Roles version, to the new Administration Service you created in the previous step.

You can import the configuration data using the Import configuration wizard of the Configuration Center. On the Source database page in the Import configuration wizard, specify the database used by your production Administration Service of the earlier Active Roles version. For more information, see Import configuration data .

Optionally, you can import the management history data from the database of your production Administration Service, in addition to the configuration data (see Import management history data).

Transfer to new operating system or SQL Server version

When performing a pilot deployment, you may want to have the new Administration Service version installed on a server running a newer version of the Windows operating system. Additionally, you may need the database of the new Administration Service to be hosted on a newer SQL Server version. You can meet these requirements as follows:

  1. Install and configure the new Administration Service on a computer running the operating system you want. When performing initial configuration, specify the desired SQL Server instance. You are not required to specify the SQL Server instance that hosts the database of your production Administration Service of the earlier Active Roles version. You can choose any SQL Server version that meets the system requirements for the new Active Roles version.
  2. Import the configuration data and, optionally, management history data, from the database of your production Administration Service of the earlier Active Roles version to the new Administration Service you created in the previous step.

Deploying the pilot Web Interface

Once you have deployed the pilot Administration Service and updated its configuration, you can deploy the Web Interface for your pilot project. You have to ensure that your pilot instance of the Web Interface meets the following conditions:

  • Uses the Administration Service instance you have deployed for your pilot project (see Deploying the pilot Administration Service).
  • For each of your production Web Interface sites of the earlier Active Roles version, holds a site with the same customizations of the menus, commands, forms and other elements as the production site.

You can address these conditions as follows:

  1. For each of your production Web Interface sites of the earlier Active Roles version, identify and note down the name of the configuration object used by that site.

    You can identify your existing site configuration objects by using the Web Interface Sites Configuration wizard on the computer running your production Web Interface. For detailed instructions, see Identify configuration objects.

  2. Create an instance of the new Web Interface, and configure it to use the Administration Service instance you have deployed for your pilot project. For details, see Install and configure the Web Interface.

    You can install the Web Interface of version Active Roles side-by-side with the Web Interface of version 6.9, on the same computer. Another option is to install the new Web Interface on a different computer.

  3. On the Web Interface instance you created, create Web Interface sites, importing site configuration data from the configuration objects you identified previously. For more information, see Create sites based on old configuration objects.

Optionally, delete the default sites that were created when you configured the Web Interface. The default sites cannot detect existing site customizations, and have the default configuration of menus, command, forms and other elements. For more information on deleting the default Web Interface sites, see Delete default sites.

Installing the Active Roles console

Installing the Active Roles console

You need the Active Roles console of version 8.0.1 if you want the console to connect to the Administration Service of version Active Roles. As the console of version 8.0.1 does not connect to the Administration Service of earlier versions, the use of the console version Active Roles for your pilot project ensures that the console automatically connects to the pilot Administration Service.

For installation instructions, see Steps to install the console.

Deployment considerations

This section addresses issues concerning the deployment of the Active Roles Administration Service. Information for this section was collected from:

  • Feedback from our current customers who have enterprise class deployments with multiple sites/locations
  • Extensive testing of Active Roles in our software development labs
  • Comparisons and testing of Active Roles to competitors’ solutions

There are no technical requirements for installing many Administration Services in a location or in different locations. The number of Administration Services in a location and the number of locations with Administration Services depends on an organization’s needs and expectations, the current infrastructure and hardware, and the business workflow. When considering an To add the Active Roles console (MMC Interface) to the pilot deployment, simply install the new version of the console on an appropriate server and have the console connect to your pilot Administration Service. deployment, administrators should consider the following issues:

  • Business workflow
  • Hardware requirements
  • Need for availability
  • Replication traffic

When an organization has gathered and assessed the information above, it will be able to determine the locations and number of Administration Services to be installed. The last sub-section provides network diagrams that illustrate potential Active Roles deployments.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级