Access Manager Appliance 4.2 Service Pack 3 Release Notes

NOTE:This release of Access Manager by default supports Tomcat 8.0.39 and OpenSSL 1.0.2j, but Administration Console uses Tomcat version 7.0.68 due to dependency on iManager.

1.2 Fixed Issues

This release includes software fixes for the following:

Administration Console
Identity Server

Administration Console

The following issues are fixed in Administration Console:

On ports 9000 and 9001, there is a reverse shell connection to Administration Console. This leads to security vulnerabilities. (TID 7018159)
Kerberos fallback to name/password method loses custom branding after upgrading to Access Manager 4.2. (TID 7018538)
Office 365 SSO with SAML triggers nidsIdentity object to be removed and re-added with every login. (TID 7018539)
Potential Security Issue where Access Manager Administrator can download system files to Administration Console host via Code Promotion URL. (TID 7018541)
SAML2 Federation failing when "Encrypt name identifiers" or "Encrypt Assertion" option is enabled. (TID 7018553)

Identity Server

The following issue is fixed in Identity Server:

Unable to Map Persistent NameIdentifier to a non-LDAP Attribute

Unable to Map Persistent NameIdentifier to a non-LDAP Attribute

Issue: Access Manager does not allow mapping of a persistent NameIdentifier to a non LDAP attribute. [Bug 1020623]

Fix: To resolve this issue, refer the section Configuring Specific Attributes as ImmutableID in the NetIQ Access Manager Appliance 4.2 Administration Guide. You can also refer to TID.

2.0 Supported Upgrade Paths

To upgrade to Access Manager 4.2.3, you must be on any one of the following Access Manager versions:

4.2 Service Pack 2
4.2

3.0 Installing or Upgrading Access Manager

After purchasing Access Manager Appliance 4.2.3, log in to the NetIQ Downloads page and follow the link that allows you to download the software. The following files are available:

Table 1 Files Available for Access Manager Appliance 4.2.3

Filename	Description
AM_42_SP3_AccessManagerAppliance.iso	Contains Access Manager Appliance iso.
AM_42_SP3_AccessManagerAppliance.tar.gz	Contains Access Manager Appliance tar file.

For more information about installing and upgrading, see the NetIQ Access Manager Appliance 4.2 Installation and Upgrade Guide.

4.0 Verifying Version Numbers After Upgrading to 4.2.3

After upgrading to Access Manager 4.2.3, verify that the version number of the component is indicated as 4.2.3.0-31. To verify the version number, perform the following steps:

In Administration Console Dashboard, click Troubleshooting > Version.
Verify that the Version field displays 4.2.3.0-31.

5.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issue is currently being researched. If you need further assistance with any issue, please contact Technical Support.

Section 5.1, Upgrading Access Manager 4.2.3 to 4.3 Is Not Supported

5.1 Upgrading Access Manager 4.2.3 to 4.3 Is Not Supported

Issue: Upgrading Access Manager from 4.2.3 to 4.3 is currently not supported. [Bug 1020662]

Workaround: Currently, there is no workaround for this issue.

6.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

7.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.