NetIQ Privileged Account Manager 3.0 Service Pack 1 Hotfix 1 Release Notes

March 2016

NetIQ Privileged Account Manager 3.0.1 Hotfix 1 resolves a previous issue.

NetIQ Privileged Account Manager, formerly known as NetIQ Privileged User Manager, helps IT administrators to manage the identity and access of super user accounts, by providing controlled super user access to authorized users. It has the capability to manage and audit privileged account activities in applications, database, and a wide range of other systems.

You can post feedback in the Privileged Account Manager Community Support Forum, our community website that also includes product notifications, blogs, and product user groups.

To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged Account Manager Documentation Web site.

1.0 What’s New?

The following section outlines the issue that is resolved in this release:

1.1 The Remote Desktop Session to a Windows Server Hangs Randomly

Issue: When a user establishes a Windows remote desktop session to a server that runs PAM agent, the session hangs. This can happen because of the following reasons:

  • When PAM monitors multiple applications on the Windows server and if any of the monitored applications gets abruptly terminated.

  • The PAM process sometimes consumes very large memory (RAM) that can hang the Windows session. (BUG 961686)

Fix: In this release, this issue is fixed. The Windows session does not hang and the PAM server does not consume large memory (RAM).

2.0 System Requirements

For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements in the NetIQ Privileged Account Manager 3.0.1 Installation Guide.

3.0 Installing the Hotfix

Privileged Account Manager supports two ways to install the hotfix. You can use any of the following ways:

This patch includes the following:

  • The framework packages for all platforms

  • The rexec module for Windows platform

3.1 Using the Package Manager with NCC

  1. Configure the Package Manager by using Novell Update Server:

    1. Log in to the Framework Manager console.

    2. Click Package Manager > Settings.

    3. From the drop-down menu, select Novell Update Server.

    4. Configure the following fields:

      User name: Specify the user name that allows you to log in to the NetIQ Customer Center.

      Password: Specify the password that is associated with this account.

    5. To view the update server information, select Advanced Settings.

      • Select the Packages checkbox, the following URL is configured:

        https://nu.novell.com:443/PUM/packages

    6. Click Finish.

  2. (Conditional) Configure the Package Manager by using Local Package Manager:

    1. Log in to the Framework Manager console.

    2. Click Package Manager > Settings.

    3. From the drop-down menu, select Local Package Manager.

    4. Fill in the following fields:

      Host name: Specify the DNS name of the host.

      Port: Specify the communication port. The default is 29120.

      The Local Package Manager is a Framework host that has been configured to store the packages.

  3. (Conditional) If you do not have the Framework patch loaded in your Package Manager:

    1. Click Package Manager on the home page of the console, then click Add Packages.

    2. Configure the Package Filter to display the packages you need.

      Platform: Select required platforms. Make sure you select Cross Platform, which displays the console packages that run on all platforms.

      Types: Select at least Console, Module, and Patch.

      Components: Select all of them: Command Control, Framework, and Miscellaneous.

    3. Select all the packages that are listed. Make sure you select the Framework Patch.

    4. Click Next, then click Finish when the packages have been successfully downloaded.

    5. To ensure that all packages are up-to-date, click Check for Updates.

    6. Select any packages that are listed.

    7. Click Next, then click Finish when the packages have been successfully downloaded.

  4. Load the updates:

    1. In the Package Manager page, click Check for Updates.

    2. If updates are listed, select the packages, then click Next.

    3. After the hotfix is loaded, click Finish.

  5. To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.

3.2 Using the Package Manager with a Local Server

  1. Download the hotfix manually:

    1. On the NetIQ Downloads site, select the Basic Search tab.

    2. On the right pane, select Search Patches.

    3. On the Patch Finder page, select Privileged User Manager from the list of products.

    4. Click Search, then click Privileged Account Manager 3.0.1.

      This displays the current hotfix.

    5. Download Privileged Account Manager 3.0.1 HF1.

  2. Extract and publish packages into the Framework:

    1. Copy the netiq-npam-packages-3.0.1-1.tar.gz file to any of the Privileged Account Manager machines.

    2. Extract netiq-npam-packages-3.0.1-1.tar.gz into a temporary location, for example, /tmp/framework/ directory. 

      tar -xvf netiq-npam-packages-3.0.1-1.tar.gz

    3. Use the following command to publish the packages to the Package Manager.

      Replace <admin> with the name of your admin user.

      For Linux and UNIX platforms:

      /opt/netiq/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework

      NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:

      /opt/novell/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework

      For Windows platforms:

      c:\Program Files\netiq\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework

      NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:

      c:\Program Files\novell\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework

    4. When prompted, enter the name and password for the administrator.

  3. To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.

3.3 Installing the Hotfix on Host Machines

During the process of installing the packages through the Framework, you can create a backup of the existing packages that are being replaced. To create the backup, you need to leave the Create backup option enabled when installing the hotfix. Then if you want to remove the update, you can use the Rollback Packages option.

You can choose to install the hotfix on all hosts or on selected hosts.

  1. Log in to the Framework Manager console.

  2. To install the hotfix on all hosts (if you want to install the hotfix on only selected hosts, skip to Step 3):

    1. On the Home page, click Hosts.

    2. Select the root domain.

    3. In the left frame, select Update Domain Packages.

    4. Select the desired hosts.

      Use Shift+click or Ctrl+click to select multiple hosts.

    5. Click Next.

    6. Click Finish.

  3. To install the hotfix on selected hosts:

    1. Click Hosts > Update Packages on the home page of the console.

    2. Select the desired Hosts.

      Use Shift+click or Ctrl+click to select multiple hosts.

    3. Click Next.

    4. Click Finish.

4.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. There are no new known issues in this release, but following are some pre-existing issues that are currently being researched. If you need further assistance with any issue, please contact Technical Support.

4.1 When Accessing Administration Console, PAM Logs Off from the Browser Session After a Specific Time When the Session Is Active

Issue: Even when the framework users are using a particular console for the time frame that is mentioned in the default inactivity time out, they get logged off. (Bug 934677)

Workaround: To use the console for longer time, the framework user can either switch between the consoles or increase the inactivity time-out during configuration.

4.2 Selecting Option from a List Does Not Work When Editing Conditions or Approving Requests in Chrome

Issue: When configuring a condition of a rule, or approving any emergency access request, you cannot select any option from the drop-down list. This issue occurs only in Chrome.

Workaround: Use the arrow keys on the keyboard to choose the required option.

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

6.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.

Copyright © 2016 NetIQ Corporation. All Rights Reserved.