NetIQ Privileged Account Manager 3.0 Service Pack 1 Hotfix 3 Release Notes

January 2017

NetIQ Privileged Account Manager 3.0.1 Hotfix 3 resolves specific previous issues.

NetIQ Privileged Account Manager, formerly known as NetIQ Privileged User Manager, helps IT administrators to manage the identity and access of super user accounts, by providing controlled super user access to authorized users. It has the capability to manage and audit privileged account activities in applications, database, and a wide range of other systems.

You can post feedback in the Privileged Account Manager Community Support Forum, our community website that also includes product notifications, blogs, and product user groups.

To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged Account Manager Documentation Web site.

1.0 What’s New?

2.0 System Requirements

3.0 Installing the Hotfix

4.0 Known Issues

5.0 Contact Information

6.0 Legal Notice

1.0 What’s New?

Privileged Account Manager 3.0.1 Hotfix 3 includes the following enhancement:

1.1 OpenSSL Upgrade

OpenSSL libraries in PAM is upgraded from version 1.0.1q to 1.0.2j to eliminate OpenSSL security vulnerabilities.

2.0 System Requirements

For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements in the NetIQ Privileged Account Manager 3.0.1 Installation Guide.

3.0 Installing the Hotfix

Privileged Account Manager supports two ways to install the hotfix. You can use any of the following ways:

You can configure your system to use the NetIQ Customer Center (NCC) and use the Package Manager to distribute the hotfix. See Section 3.1, Using the Package Manager with NCC
You can download the hotfix from the download site, install it on a local system, then use the Package Manager to distribute the hotfix. See Section 3.2, Using the Package Manager with a Local Server

This patch includes the following packages:

Framework Package (spf)
Command Control Agent (rexec)
SSH Relay Agent (sshrelay)
Audit Manager (audit)
RDP Relay Agent (rdprelay)

3.1 Using the Package Manager with NCC

Configure the Package Manager by using Novell Update Server:
1. Log in to the Framework Manager console.
2. Click Package Manager > Settings.
3. From the drop-down menu, select Novell Update Server.
4. Configure the following fields:
  
  User name: Specify the user name that allows you to log in to the NetIQ Customer Center.
  
  Password: Specify the password that is associated with this account.
5. To view the update server information, select Advanced Settings.
  - Select the Packages checkbox, the following URL is configured:
    
    https://nu.novell.com:443/PUM/packages
6. Click Finish.
(Conditional) Configure the Package Manager by using Local Package Manager:
1. Log in to the Framework Manager console.
2. Click Package Manager > Settings.
3. From the drop-down menu, select Local Package Manager.
4. Fill in the following fields:
  
  Host name: Specify the DNS name of the host.
  
  Port: Specify the communication port. The default is 29120.
  
  The Local Package Manager is a Framework host that has been configured to store the packages.
(Conditional) If you do not have the Framework patch loaded in your Package Manager:
1. Click Package Manager on the home page of the console, then click Add Packages.
2. Configure the Package Filter to display the packages you need.
  
  Platform: Select required platforms. Make sure you select Cross Platform, which displays the console packages that run on all platforms.
  
  Types: Select at least Console, Module, and Patch.
  
  Components: Select all of them: Command Control, Framework, and Miscellaneous.
3. Select all the packages that are listed. Make sure you select the Framework Patch.
4. Click Next, then click Finish when the packages have been successfully downloaded.
5. To ensure that all packages are up-to-date, click Check for Updates.
6. Select any packages that are listed.
7. Click Next, then click Finish when the packages have been successfully downloaded.
Load the updates:
1. In the Package Manager page, click Check for Updates.
2. If updates are listed, select the packages, then click Next.
3. After the hotfix is loaded, click Finish.
To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.

3.2 Using the Package Manager with a Local Server

Download the hotfix manually:
1. On the NetIQ Downloads site, select the Basic Search tab.
2. On the right pane, select Search Patches.
3. On the Patch Finder page, select Privileged User Manager from the list of products.
4. Click Search, then click Privileged Account Manager 3.0.1.
  
  This displays the current hotfix.
5. Download Privileged Account Manager 3.0.1 HF3.
Extract and publish packages into the Framework:
1. Copy the netiq-npam-packages-3.0.1-3.tar.gz file to any of the Privileged Account Manager machines.
2. Extract netiq-npam-packages-3.0.1-3.tar.gz into a temporary location, for example, /tmp/framework/ directory.
```
tar -xvf netiq-npam-packages-3.0.1-3.tar.gz 
```
3. Use the following command to publish the packages to the Package Manager.
  
  Replace <admin> with the name of your admin user.
  
  For Linux and UNIX platforms:
```
/opt/netiq/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework
```
  NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:
  
  /opt/novell/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework
  
  For Windows platforms:
```
c:\Program Files\netiq\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework
```
  NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:
  
  c:\Program Files\novell\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework
4. When prompted, enter the name and password for the administrator.
To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.

3.3 Installing the Hotfix on Host Machines

During the process of installing the packages through the Framework, you can create a backup of the existing packages that are being replaced. To create the backup, you need to leave the Create backup option enabled when installing the hotfix. Then if you want to remove the update, you can use the Rollback Packages option.

You can choose to install the hotfix on all hosts or on selected hosts.

Log in to the Framework Manager console.
To install the hotfix on all hosts (if you want to install the hotfix on only selected hosts, skip to Step 3):
1. On the Home page, click Hosts.
2. Select the root domain.
3. In the left pane, select Update Domain Packages.
4. Select the desired package for the respective hosts.
5. Click Next.
6. Click Finish.
To install the hotfix on selected hosts:
1. Click Hosts > Update Packages on the home page of the console.
2. Select the desired package for the respective hosts.
3. Click Next.
4. Click Finish.

4.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. There are no new known issues in this release and for the existing issues that are currently being researched, see Known Issues in the NetIQ Privileged Account Manager 3.0 Service Pack 1 Hotfix 1 Release Notes. If you need further assistance with any issue, please contact Technical Support.

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

6.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.