Before beginning the migration, ensure to complete the following:
Backup: Perform a complete backup of your OpenText eDirectory instance, including configuration files and data.
System Compatibility:OpenSSL 3.0 is only supported on SLES 15 SP3, SP4, SP5 and SP6 and RHEL 8.8, 8.9 and 8.10 and RHEL 9.2, 9.3 and 9.4. Ensure your platform meets this requirement.
Patching: Apply the latest patches to your existing OpenText eDirectory installation to version 9.2 or later.
Bridge Patch: If you have a multi-server environment and if EBA is enabled in any or all of the servers, then before upgrading to OpenText eDirectory 9.3.0, it is mandatory to upgrade all OpenText eDirectory Servers to latest OpenText eDirectory 9.2.8 or 9.2.9 versions. Post Successful Upgrade, If you have multi server setup, user must apply the EBA bridge patch to all the servers, master and replica where EBA is enabled. EBA bridge patch is available with OpenText eDirectory build in the following paths -
For Linux:
<Untarred_edirectory_location>/eDirectory/eba_bridge_patch
For Windows:
<extracted_patch>eDirectory\eba_bridge_patch
For Container:
<Untarred_edirectory_location>/eDirectory_930/eba_bridge_patch
Execute the following command to check if EBA is enabled in the system.
ndscheck -a <admin_credentials> -w <tree_login_password>
For more details, see Installing Bridge Patch to Multiple Replica Servers with EBA in Linux, Installing Bridge Patch to Multiple Replica Servers with EBA in Windows and Installing Bridge Patch to Multiple Replica Servers with EBA in Container.
Same Box compatibility: If an older version of Identity Console is installed on the same system as OpenText eDirectory, upgrade the Identity Console to version 1.9 or later. During the upgrade, the OpenText eDirectory installation will exit if it detects an older version of Identity Console on the same machine.
Support for 56-Bit/ DES Key: From eDirectory 24.4(v9.3), 56-bit/ DES Key configurations are no longer supported, with or without FIPS mode. This is due to OpenSSL 3.0, which supports stronger key configurations. For guidance on identifying and migrating away from 56-bit keys, refer to the following TID: KM000040457.
NOTE:
During installation, OpenText eDirectory installer checks for the bridge patch applied in all the replica server with EBA and exits if its not applied to any of the replica. EBA check does not work on non-root user and container.
From OpenText eDirectory 9.3.0 onwards, if it is 9.3.0 master server then adding any lower versions of OpenText edirectory as replica is not supported, with or without EBA.
If OpenText eDirectory 9.2.9 or 9.2.8 coexists with the OpenText Identity Console 1.8, then it is recommended to upgrade OpenText Identity Console to 1.9 before upgrading OpenText eDirectory to 9.3 on Linux.