2.0 Updating the Identity Manager Components on Linux

The following considerations apply before you update Identity Manager components on Linux platforms:

Ensure that you install the zip and unzip RPM packages.

NOTE:NetIQ recommends that you obtain the dependent packages from your operating system subscription service to ensure continued support from your operating system vendor. If you do not have a subscription service, you can find the recent packages from a website such as http://rpmfind.net/linux.
Perform the following steps to verify the RPM signature:
1. Navigate to the following location for public key:
  
  <ISO-MOUNT-location>/common/license/
  
  For example:
  
  cd /mnt/common/license/
2. Run the following command to import the key:
```
rpm --import MicroFocusGPGPackageSign.pub
```
3. (optional) Run the following command to verify the signature:
```
rpm --checksig -v <RPM Name>
```
  For example:
  
  rpm --checksig -v novell-NDSbase-9.2.7.0000.x86_64.rpm
(Conditional) If you are updating the Identity Manager from 4.8 to 4.8.6 directly, then you must apply the Identity Applications 4.8.0.1 patch before 4.8.6 version in the following scenarios:
- eDirectory 9.2 and Identity Applications 4.8 are installed on the same server.
- iManager 3.2 and Identity Applications 4.8 are installed on the same server.
- Identity Applications 4.8 and PostgreSQL are installed on the same server.
The Identity Applications 4.8.0.1 patch resolves the dependencies between the NGINX module and the OpenSSL libraries. For instructions on applying the patch, see the NetIQ Identity Applications 4.8.0 Hotfix 1 Release Notes.

If you do not apply the Identity Applications 4.8.0.1 patch, the Identity Vault update fails and the installer reports the following error message:

Problem: patterns-edirectory-9.2.2-6.x86_64 requires netiq-openssl = 1.0.2u, but this requirement cannot be provided not installable providers: netiq-openssl-1.0.2u-32.x86_64[edirectory-9.2.2] Solution 1: deinstallation of netiq-nginx-1.14.2-1.x86_64 Solution 2: do not install patterns-edirectory-9.2.2-6.x86_64 Solution 3: break patterns-edirectory-9.2.2-6.x86_64 by ignoring some of its dependencies
(Conditional) Before installing or upgrading Identity Manager to 4.8.6 version on RHEL 8.5 or SLES 15 SPx operating system, make sure that you download and execute the idm_updated_os_linux.sh script available at the following location: TID KM000007635. If you do not replace the scripts, the PostgreSQL database configuration may fail with the following error:

symbol lookup error: /opt/netiq/idm/postgres/bin/../lib/libgssapi_krb5.so.2: undefined symbol: krb5_ser_context_init, version krb5_3_MIT

For more information, see TID KM000007635.