NetIQ Privileged Account Manager 3.1 Hotfix 2 Release Notes

May 2017

NetIQ Privileged Account Manager 3.1 Hotfix 2 resolves some of the previous issues.

NetIQ Privileged Account Manager, formerly known as NetIQ Privileged User Manager, helps IT administrators to manage the identity and access of super user accounts, by providing controlled super user access to authorized users. It has the capability to manage and audit privileged account activities in applications, database, and a wide range of other systems.

You can post feedback in the Privileged Account Manager Community Support Forum, our community website that also includes product notifications, blogs, and product user groups.

To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged Account Manager Documentation Web site.

1.0 What’s New?

The following sections outline the enhancements and issues resolved in this release:

1.1 OpenSSL Upgrade

OpenSSL library in Privileged Account Manager 3.1 HF2 is upgraded to 1.0.2k to eliminate OpenSSL security vulnerabilities.

1.2 Software Fixes

Privileged Account Manager 3.1 HF2 provides software fixes for the following issues:

Data Encryption Error Is Displayed When Launching the RDP Relay Session

Issue: RDP data encryption error is displayed when launching the RDP Relay session to the Windows Server 2012 R2 from Windows 8.1 or Windows 10 machine.This error occurs because Privileged Account Manager does not support the latest RDP Client versions.(Bug 1033777)

Fix: RDP Relay session launches successfully without any error.

Command Control Report Displays the Login Password

Issue: The Command Control Report by default displays the login password of the SSH Relay session in cleartext.(Bug 1010837)

Fix: This issue is fixed and the Command Control Report does not display the login password.

Command Control Activity Report Displays Incorrect Host Details

Issue: Using PAM, when you connect to a host through intermediate proxy server, VPN, or load balancer, the Command Control Activity Report instead of the target host details displays the intermediate proxy server, VPN, or load balancer details. (Bug 1001510)

Fix: This issue is fixed.

2.0 System Requirements

For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements in the NetIQ Privileged Account Manager 3.1 Installation Guide.

3.0 Installing the Hotfix

Privileged Account Manager supports two ways to install the hotfix. You can use any of the following ways:

This patch includes the following packages:

  • Command Reporting Console (report_command)

  • Audit Manager (audit)

  • Framework Patch (spf)

  • Privileged Credential Manager (prvcrdvlt)

  • SSH Relay Agent (sshrelay)

  • RDP Relay (rdprelay)

3.1 Using the Package Manager with NCC

  1. Configure the Package Manager by using the Novell Update Server:

    1. Log in to the Framework Manager console.

    2. Click Package Manager > Settings.

    3. From the drop-down, select Novell Update Server.

    4. Configure the following fields:

      User name: Specify the user name that allows you to log in to the NetIQ Customer Center.

      Password: Specify the password that is associated with this account.

    5. To view the update server information, select Advanced Settings.

      • Select the Packages checkbox, the following URL is configured:

        https://nu.novell.com:443/PUM/packages

    6. Click Finish.

  2. (Conditional) Configure the Package Manager by using the Local Package Manager:

    1. Log in to the Framework Manager console.

    2. Click Package Manager > Settings.

    3. From the drop-down, select Local Package Manager.

    4. Fill in the following fields:

      Host name: Specify the DNS name of the host.

      Port: Specify the communication port. The default is 29120.

      The Local Package Manager is a Framework host that has been configured to store the packages.

  3. (Conditional) If you do not have the Framework patch loaded in your Package Manager:

    1. Click Package Manager on the home page of the console, then click Add Packages.

    2. Configure the Package Filter to display the packages you need.

      Platform: Select required platforms. Make sure you select Cross Platform, which displays the console packages that run on all platforms.

      Types: Select at least Console, Module, and Patch.

      Components: Select all of them: Command Control, Framework, and Miscellaneous.

    3. Select all the packages that are listed. Make sure you select the Framework Patch.

    4. Click Next, then click Finish when the packages have been successfully downloaded.

    5. To ensure that all packages are up-to-date, click Check for Updates.

    6. Select any packages that are listed.

    7. Click Next, then click Finish when the packages have been successfully downloaded.

  4. Load the updates:

    1. In the Package Manager page, click Check for Updates.

    2. If updates are listed, select the packages, then click Next.

    3. After the hotfix is loaded, click Finish.

  5. To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.

3.2 Using the Package Manager with a Local Server

  1. Download the hotfix manually:

    1. On the NetIQ Downloads site, select the Basic Search tab.

    2. On the right pane, select Search Patches.

    3. On the Patch Finder page, select Privileged User Manager from the list of products.

    4. Click Search, then click Privileged Account Manager 3.1.

      This displays the current hotfix.

    5. Download Privileged Account Manager 3.1 HF2.

  2. Extract and publish packages into the Framework:

    1. Copy the netiq-npam-packages-3.1-HF2.tar.gz file to any of the Privileged Account Manager machines.

    2. Extract netiq-npam-packages-3.1-HF2.tar.gz into a temporary location, for example, /tmp/framework/ directory. 

      tar -xvf netiq-npam-packages-3.1-HF2.tar.gz

    3. Use the following command to publish the packages to the Package Manager.

      Replace <admin> with the name of your admin user.

      For Linux and UNIX platforms:

      /opt/netiq/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework

      NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:

      /opt/novell/npum/sbin/unifi -u <admin> distrib publish -d /tmp/framework

      For Windows platforms:

      c:\Program Files\netiq\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework

      NOTE:If you are using PUM 2.3.3 or earlier versions, run the following command:

      c:\Program Files\novell\npum\bin\unifi -u <admin> distrib publish -d c:\tmp\framework

    4. When prompted, enter the name and password for the administrator.

  3. To push the hotfix to your host machines, continue with Section 3.3, Installing the Hotfix on Host Machines.

3.3 Installing the Hotfix on Host Machines

During the process of installing the packages through the Framework, you can create a backup of the existing packages that you are replacing. To create the backup, you need to leave the Create backup option enabled when installing the hotfix. Then, if you want to remove the update, you can use the Rollback Packages option.

You can choose to install the hotfix on all hosts or on selected hosts.

  1. Log in to the Framework Manager console.

  2. To install the hotfix on all hosts (if you want to install the hotfix on only selected hosts, skip to Step 3):

    1. On the Home page, click Hosts.

    2. Select the root domain.

    3. In the left pane, select Update Domain Packages.

    4. Select the desired packages for the respective hosts.

    5. Click Next.

    6. Click Finish.

  3. To install the hotfix on selected hosts:

    1. Click Hosts > Update Packages on the home page of the console.

    2. Select the desired packages for the respective hosts.

    3. Click Next.

    4. Click Finish.

4.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. There are no new known issues in this release and for the existing known issues that are currently being researched, see Known Issues in the NetIQ Privileged Account Manager 3.1 Release Notes. For further assistance contact Technical Support.

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

6.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.

Copyright © 2017 NetIQ Corporation. All Rights Reserved.