54.1 Checklist for Upgrading Identity Manager

To perform the upgrade, NetIQ recommends that you complete the steps in the following checklist.

Checklist Items

  1. Review the differences between an upgrade and a migration. For more information, see Understanding Upgrade and Migration.

  1. Upgrade to Identity Manager 4.5. You cannot upgrade or migrate to version 4.6 from versions before 4.5. For more information, see the NetIQ Identity Manager 4.5 Setup Guide.

  1. Ensure that you have the latest installation kit to upgrade Identity Manager.

  1. Learn about the interaction among Identity Manager components. For more information, see Section I, Introduction.

  1. Ensure that your computers meet the hardware and software prerequisites for a newer version of Identity Manager. For more information, see Section 6.0, Considerations and Prerequisites for Installation and the Release Notes for the version to which you want to upgrade.

  1. Back up the current project, driver configuration, and databases. For more information, see Backing Up the Current Configuration.

  1. Upgrade Designer to the latest version. For more information, see Upgrading Designer.

  1. Install or upgrade iManager to the latest version for Identity Manager. For more information, see one of the following sections:

  1. On the server running Identity Manager, upgrade eDirectory to the latest version and patch.

    If you are upgrading eDirectory 9.0 or later in an environment where a 64-bit Remote Loader is already upgraded, the eDirectory installation fails and the Remote Loader stops working. To ensure that the Remote Loader works properly, perform the following steps before upgrading eDirectory:

    1. Stop the Remote Loader and its instances.

    2. Uninstall novell-DXMLopensslx RPM.

    3. Install eDirectory 9.0 or later version.

    Upgrading eDirectory stops ndsd, which in turn stops all drivers. For more information, see the NetIQ eDirectory Installation Guide and NetIQ Identity Manager 4.6 Release Notes.

  1. Update the iManager plug-ins to match the version of iManager. For more information, see Updating iManager Plug-ins after an Upgrade or Re-installation.

  1. Stop the drivers that are associated with the server where you installed the Identity Manager engine (Metadirectory). For more information, see Stopping the Drivers.

  1. Upgrade the Identity Manager engine. For more information, see Upgrading the Identity Manager Engine.

    NOTE:If you are migrating the Identity Manager engine to a new server, you can use the same the eDirectory replicas that are on the current Identity Manager server. For more information, see Migrating the Identity Manager Engine to a New Server.

  1. (Conditional) If any of the drivers in the driver set for the Identity Manager Engine are Remote Loader drivers, upgrade the Remote Loader servers for each driver. For more information, see Upgrading the Remote Loader.

  1. (Conditional) If you are using packages, upgrade the packages on the existing drivers to get new policies. For more information, see Upgrading the Identity Manager Drivers.

    This is only required if a newer version of a package is available and there is a new functionality included in the policies for a driver that you want to add to your existing driver.

  1. Perform a migration from EAS to Sentinel Log Management for IGA (SLM for IGA). For more information, see Migrating from Event Auditing Service to Sentinel Log Management for IGA.

  1. Upgrade or install Tomcat and PostgreSQL. For more information, see Section IX, Installing PostgreSQL and Tomcat for Identity Manager.

  1. (Conditional) If OSP is not installed, install OSP. For more information, see Section X, Installing the Single Sign-on Component.

  1. (Conditional) If SSPR is not installed, install SSPR. For more information, see Section XI, Installing the Password Management Component.

    NOTE:Install SSPR if you are currently using the legacy provider for password management. For more information, see Understanding the Legacy Password Management Provider.

  1. Upgrade the User Application, Identity Manager Dashboard, OSP, SSPR, and Catalog Administrator using upgrade program. For more information, see Upgrading Identity Applications and Supporting Components.

    Alternatively, you can upgrade these components manually. For more information, see Section XVII, Migrating Identity Manager Data to a New Installation.

  1. Upgrade Identity Reporting and associated drivers. For more information, see Upgrading Identity Reporting.

  1. Start the drivers associated with the Identity Applications and the Identity Manager engine. For more information, see Starting the Drivers.

  1. (Conditional) If you migrated the Identity Manager engine or the identity applications to a new server, add the new server to the driver set. For more information, see Adding New Servers to the Driver Set.

  1. (Conditional) If you have custom policies and rules, restore your customized settings. For more information, see Restoring Custom Policies and Rules to the Driver.

  1. Activate your upgraded Identity Manager solution. For more information, see Activating Identity Manager.