11.4 Upgrading Identity Reporting

Identity Reporting includes two drivers. Also, you might need to migrate content from NetIQ Event Auditing Service to Sentinel Log Management for IGA. Perform the upgrade in the following order:

  1. Upgrade Sentinel Log Management for IGA. For more information, see Upgrading Sentinel Log Management for IGA in the NetIQ Identity Manager Setup Guide for Linux.

  2. Upgrade Identity Reporting.

11.4.1 Prerequisite for Upgrade

If your database is configured over SSL, replace ssl=true with sslmode=require in the server.xml file from PATH located at C:\NetIQ\idm\apps\tomcat\conf.

For example, change

jdbc:postgresql://<postgres db>:5432/idmrptdb?ssl=true

to

jdbc:postgresql://<postgres db>:5432/idmrptdb?sslmode=require

11.4.2 Upgrading Identity Reporting

Before upgrading Identity Reporting, you must upgrade the identity applications and SLM for IGA. To upgrade Identity Reporting, install the new version on top of the older version.

Perform the following steps to upgrade Identity Reporting:

  1. Download the Identity_Manager_4.8_Windows.iso from the NetIQ Downloads website.

  2. Mount the downloaded .iso.

  3. Navigate to the <ISO installed location>\IdentityReporting folder and run the install.exe.

  4. Select the language that you want to use for the installation and click OK.

  5. In the Introduction page, click Next.

  6. Read and accept the license agreement and then click Next.

    The installed components and their versions are displayed.

  7. Select Identity Reporting and click Next.

  8. Specify the configuration settings for Identity Reporting. For more information, see Configuration Worksheet for Identity Reporting.

  9. In the pre-upgrade summary page, review the settings and click Upgrade.

NOTE:The com.netiq.rpt.ssl-keystore.type property in ism-configuration.properties file will retain the value (JKS/PKCS12) that was set prior to upgrade.

11.4.3 Post-upgrade Steps for Reporting

After upgrading Identity Reporting to 4.8, navigate to the ism-configuration.properties file located at /opt/netiq/idm/apps/tomcat/conf/ directory and perform the following actions:

  • Change the value of the com.netiq.rpt.landing.url property as follows:

    com.netiq.rpt.landing.url = ${com.netiq.idm.osp.url.host}/idmdash/#/landing

  • Change the value of the com.netiq.idmdcs.landing.url property as follows:

    com.netiq.idmdcs.landing.url = ${com.netiq.idm.osp.url.host}/idmdash/#/landing

  • Specify the value for the com.netiq.rpt.redirect.url property in the following format: https:<hostname>:<port>/path

    For example, com.netiq.rpt.redirect.url = https://192.168.0.1:8543/IDMRPT/oauth.html

11.4.4 Changing the References to reportRunner in the Database

After upgrading Identity Reporting and before starting Tomcat for the first time, ensure that you update the references to reportRunner from the database.

  1. Stop Tomcat.

  2. Navigate to the Identity Reporting installation directory and rename the reportContent folder to ORG-reportContent.

    For example: C:\NetIQ\idm\apps\IdentityReporting

  3. Clean the temporary and work directories under the Tomcat folder.

  4. Log in to the PostgreSQL database.

    1. Locate the reportRunner references in the following tables:

      • idm_rpt_cfg.idmrpt_rpt_params

      • idm_rpt_cfg.idmrpt_definition

    2. Issue the following delete statements:

      DELETE FROM idm_rpt_cfg.idmrpt_rpt_params WHERE rpt_def_id='com.novell.content.reportRunner';
      DELETE FROM idm_rpt_cfg.idmrpt_definition WHERE def_id='com.novell.content.reportRunner';
  5. Start Tomcat.

    Check the logs to see if the reports are regenerated with the correct reportRunner.

  6. Log into Identity Reporting and run the reports.

11.4.5 Verifying the Upgrade for Identity Reporting

  1. Launch Identity Reporting.

  2. Verify that old and new reports are being displayed in the tool.

  3. Look at the Calendar to see whether your scheduled reports appear.

  4. Ensure that the Settings page displays your previous settings for managed and unmanaged applications.

  5. Verify that all other settings look correct.

  6. Verify whether the application lists your completed reports.