NetIQ Privileged Account Manager 3.0 Service Pack 1 Patch Update 4 Release Notes

July 2017

NetIQ Privileged Account Manager 3.0 SP1 Patch Update 4 resolves specific previous issues.

NetIQ Privileged Account Manager, formerly known as NetIQ Privileged User Manager, helps IT administrators to manage the identity and access of super user accounts, by providing controlled super user access to authorized users. It has the capability to manage and audit privileged account activities in applications, database, and a wide range of other systems.

You can post feedback in the Privileged Account Manager Community Support Forum, our community website that also includes product notifications, blogs, and product user groups.

To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged Account Manager Documentation Web site.

1.0 What’s New?

Privileged Account Manager 3.0 SP1 Patch Update 4 includes the following enhancements:

1.1 OpenSSL Upgrade

OpenSSL libraries in Privileged Account Manager is upgraded to version1.0.2l to eliminate OpenSSL security vulnerabilities.

1.2 Security Vulnerability Fix

In this release, the weaker SSL ciphers are replaced with Elliptic Curve Diffie–Hellman (ECDHE) cipher to improve data security.

2.0 System Requirements

For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements in the NetIQ Privileged Account Manager 3.0.1 Installation Guide.

3.0 Installing the Patch Update

This patch includes the following packages:

  • Framework Package (spf)

  • Command Control Agent (rexec)

  • SSH Relay Agent (sshrelay)

  • Audit Manager (audit)

  • RDP Relay Agent (rdprelay)

You can download the patch update from the download site, install it on a local system, then use the Package Manager to distribute the patch update.

  1. Download the patch update manually from the Patch Finder website.

  2. Extract and publish packages into the Framework:

    1. Copy the netiq-npam-packages-3.0.1-4.tar.gz file to any of the Privileged Account Manager machines.

    2. Extract netiq-npam-packages-3.0.1-4.tar.gz into a temporary location, for example, /tmp/framework/ directory.

      tar -xvf netiq-npam-packages-3.0.1-4.tar.gz 
    3. Use the following command to publish the packages to the Package Manager.

      Replace <admin> with the name of your admin user.

      For Linux and UNIX platforms:

      /opt/netiq/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework

      NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:

      /opt/novell/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework

      For Windows platforms:

      c:\Program Files\netiq\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework

      NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:

      c:\Program Files\novell\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework

    4. When prompted, enter the name and password for the administrator.

  3. To push the patch update to your host machines, continue with Section 3.1, Installing the Patch Update on Host Machines.

3.1 Installing the Patch Update on Host Machines

During the process of installing the packages through the Framework, you can create a backup of the existing packages that are being replaced. To create the backup, you need to leave the Create backup option enabled when installing the patch update. Then if you want to remove the update, you can use the Rollback Packages option.

You can choose to install the patch update on all hosts or on selected hosts.

  1. Log in to the Framework Manager console.

  2. To install the patch update on all hosts (if you want to install the patch update on only selected hosts, skip to Step 3):

    1. On the Home page, click Hosts.

    2. Select the root domain.

    3. In the left pane, select Update Domain Packages.

    4. Select the desired package for the respective hosts.

    5. Click Next.

    6. Click Finish.

  3. To install the patch update on selected hosts:

    1. Click Hosts > Update Packages on the home page of the console.

    2. Select the desired package for the respective hosts.

    3. Click Next.

    4. Click Finish.

4.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. There are no new known issues in this release and for the existing issues that are currently being researched, see Known Issues in the NetIQ Privileged Account Manager 3.0 Service Pack 1 Hotfix 1 Release Notes. If you need further assistance with any issue, please contact Technical Support.

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

6.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.

Copyright © 2017 NetIQ Corporation. All Rights Reserved.