11.2 Upgrading Administration Console on Windows

11.2.1 Upgrading the Evaluation Version to the Purchased Version

If you have downloaded the evaluation version and want to keep your configuration after purchasing the product, you need to upgrade each of your components with the purchased version. The upgrade to the purchased version automatically changes your installation to a licensed version.

After you have purchased the product, log in to the NetIQ Customer Center and follow the link that allows you to download the product. Then follow the instructions in Section 11.2.2, Upgrading Administration Console.

11.2.2 Upgrading Administration Console

Log in to the NetIQ Downloads page and follow the link that allows you to download the product.

NOTE:If you have enabled history for risk-based authentication in a prior version of Access Manager, you must upgrade the database for risk-based authentication after upgrading to 4.5. You can find the upgrade script here: C:\Program Files\Novell\Tomcat\webapps\nidp\WEB-INF\RiskDBScript.zip.

MySQL: Run netiq_risk_mysql_upgrade.sql

Oracle: Run netiq_risk_oracle_upgrade.sql

Microsoft SQL Server: Run netiq_risk_sql_server_upgrade.sql

If you have installed Administration Console and Identity Server on the same server, you must upgrade both of them at the same time.

Perform the following steps to upgrade Administration Console on Windows:

NOTE:To prevent security vulnerability, Access Manager uses the jQuery version that is higher than the version used in the earlier release of Access Manager. The higher version of jQuery is not compatible with the Skype for Business 2016 application. Hence, after the upgrade, you cannot log in to Skype for Business 2016 using the Identity Server login page.

If you want to continue using an old version of jQuery, which is less secure, see Single Sign-on Fails in Skype for Business 2016 in the Access Manager 4.5 Administration Guide.

  1. Manually back up your current Access Manager configuration using ambkup.bat file. For instructions, see Back Up and Restore in the Access Manager 4.5 Administration Guide.

  2. If Administration is installed on the same server, manually back up the JSP pages and related files in the C:\Program Files\Novell\Tomcat\webapps\nidp\jsp directory.

  3. If you have customized the tomcat.conf file or the server.xml file, back up these files before upgrading. These files are overwritten during the upgrade process.

    IMPORTANT:We recommend that you have your own backup of customized files.

  4. Run the installation program. When the installation program detects an installed version of Administration Console, it automatically prompts you to upgrade.

  5. Read the Introduction, then click Next.

  6. Accept the License Agreement, then click Next.

  7. Select the component to upgrade that is currently installed, then click Next.

  8. Type Y and press Enter.

    The system displays an information message to enable Syslog on the Auditing user interface of Administration Console after the upgrade.

  9. Type Y to continue with the upgrade, then press Enter.

  10. At the upgrade prompt, click Continue.

  11. Specify the following information for the administrator account on Administration Console:

    Administration user ID: Specify the name of the administration user for Administration Console.

    Password and Re-enter Password: Specify and re-enter the password for the administration user account.

  12. Decide whether you want the upgrade program to create a backup of your current configuration:

    • If you have a recent backup, click Continue. If you choose to not create a backup when you do not have a recent backup and you then encounter a problem during the upgrade, you may be forced to re-create your configuration.

    • If you do not have a recent backup, click Run Config Backup. The program creates a backup and stores it in the root of the operating system drive in the nambkup directory.

  13. Review the summary, then click Install.

  14. If the upgrade seems to hang and you have been performing other tasks on the desktop, click the installation screen and check for a warning message. Some subcomponents of Access Manager do not send warning messages to the Installation screen when the focus of the mouse is not on the installation window.

  15. When you are prompted, reboot the server.

  16. View the upgrade log file found in the following location:

    C:\Program Files\Novell\log\AccessManagerServer_InstallLog.log

  17. If Identity Server is installed on the same server, copy any custom login pages to the C:\Program Files\Novell\Tomcat\webapps\nidp\jsp directory.

  18. Restore any customized files from the backup taken earlier.

    To restore the files, copy the content of the following files to the corresponding file in the new location.

    server.xml

    If you have customized the server.xml file from the backup taken in 4.4.x, ensure that you apply the same to the new server.xml located at C:\Program Files\Novell\Tomcat\conf\ directory.

    An example below shows that the IP address is removed and ciphers added.<Connector NIDP_Name="connector" port="8443" address="" ciphers="SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, ... ../>

    Tomcat properties:

    Go to C:\Program Files\Novell\Tomcat\bin. Click the tomcat8w file, and make a note of any elements or attributes customized in 4.4.x.

    On the 4.5 server, go to C:\Program Files\Tomcat\bin\tomcat8w. Change the values and attributes as required.