NetIQ Privileged Account Manager 3.1 includes new features and resolves several previous issues.
NetIQ Privileged Account Manager, formerly known as NetIQ Privileged User Manager, helps IT administrators to manage the identity and access of super user accounts, by providing controlled super user access to authorized users. You can post feedback in the Privileged Account Manager Community Support Forum, our community Web site that also includes product notifications, blogs, and product user groups.
To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged Account Manager Documentation Web site.
The following sections outline the enhancements and issues resolved in this release:
Privileged Account Manager provides the facility to integrate with the Advanced Authentication application. This helps in enabling multi-factor authentication that provides an extra layer of security for the privileged credentials. For more information about integrating Advanced Authentication application with Privileged Account Manager, see Integration with Advanced Authentication in the NetIQ Privileged Account Manager 3.1 Administration Guide.
Privileged Account Manager allows sharing any type of key value with privileged users. The shared keys are stored in a shared key domain to store the same type of keys together. The users can use the shared keys by using the key checkout feature. The key value does not get reset and the users can use the key without any time limit. For detailed information about shared keys, see Managing Shared Keys in the NetIQ Privileged Account Manager 3.1 Administration Guide.
Enterprise Credential Vault is now a separate component of the Administration console. All the domain information with the credentials is stored and managed in Enterprise Credential Vault. Privileged Account Manager uses Enterprise Credential Vault to provide a secure storage of your system, application, database and shared key credentials. For more information about Enterprise Credential Vault, see Enterprise Credential Vault in the NetIQ Privileged Account Manager 3.1 Administration Guide.
In addition to monitoring privileged access to Oracle database server, Privileged Account Manager provides the capability to monitor the privileged user activities that are performed in an SQL database server. A user can connect to a database server through a Privileged Account Manager server by using a database client such SQL Developer, SQL Plus and so on. For more information about SQL monitoring, see Privileged Account Monitoring of Database.
The user can also use password checkout feature for the Microsoft SQL Server database. For detailed information about password checkout for Microsoft SQL Server database, see Enabling Password Checkout for Microsoft SQL Server database monitoring.
Privileged Account Manager now supports remote access of the hosted desktop machines within an organization by using a Virtual Desktop Infrastructure (VDI) environment.You can also monitor the user sessions and define roles for different users by using Citrix VDI environment and installing Privileged Account Manager agent on the target desktop. For more information on virtualization implementation, see Virtualization Implementation.
In addition to Active Directory and eDirectory, Privileged Account Manager includes the support for managing shared account credentials for ESXi and SAP. For more information about using shared account credentials for ESXi, and SAP, see Supported Applications/ Database for Managing Accounts through PAM.
You can now start an SSH client by selecting the policy for the SSH Relay session from the user console. A JAVA Webstart program then enables the launch of the JAVA UI. For more information about SSH session initiation, see Starting an SSH Relay Session from SSH Client Client.
Privileged Account Manager 3.1 provides software fixes for the following issues:
Issue: When a Emergency Access request for RDP Relay is created on any account domain on Privileged Account Manager, the administrator is not able to select the account domain for which the request is created. (Bug 983908)
Fix: This issue is fixed.
Issue: When you authorize any command through Command Control policies after saving the audit settings in Command Control, the Privileged Account Manager service crashes. (BUG 971045)
Fix: This issue is fixed.
Issue: In Enterprise Credential Vault, when you click Add Account Domain and enter an inappropriate string as a database credential and click Test Connection, the Privileged Account Manager service crashes. (Bug 951389)
Fix: This issue is fixed. The status of the packages are displayed when the host is offline.
Issue: Even when the framework users are using a particular console for the time frame that is mentioned in the default inactivity time out, they get logged off. (Bug 934677)
Fix: This issue is fixed.
Issue: When configuring a condition of a rule, or approving any emergency access request, you cannot select any option from the drop-down list. This issue occurs only in Chrome. (Bug 959460)
Fix: This issue is fixed.
Issue: When you launch an Internet explorer browser to open a Privileged Account Manager administration console, a blank screen is displayed. This happens when the document mode of the Internet Explorer is set to 5 or 7. (Bug 881443)
Fix: This issue is fixed.
For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements
in the NetIQ Privileged Account Manager 3.1 Installation Guide.
To install Privileged Account Manager 3.1, see the NetIQ Privileged Account Manager 3.1 Installation Guide.
To obtain the purchased license, log in to the NetIQ Customer Center and download the software and the license key. The ISO image contains the following directories and files for Framework Managers, Agents, and the Package Manager:
|
Package |
Description |
|---|---|
|
netiq-npum-agent-3.1-aix-5.1-powerpc.bff.gz |
Agent package for AIX 5.1 |
|
netiq-npum-manager-3.1-aix-5.1-powerpc.bff.gz |
Framework Manager package for AIX 5.1 |
|
Package |
Description |
|---|---|
|
netiq-npum-agent-3.1-hpux-11.00-hppa.depot.gz |
Agent package for HP-UX 11 and 11i HPPA |
|
netiq-npum-agent-3.1-hpux-11.23-ia64.depot.gz |
Agent package for HP-UX 11i v2 and v3 Itanium |
|
netiq-npum-manager-3.1-hpux-11.00-hppa.depot.gz |
Framework Manager package for HP-UX 11 & 11i HPPA |
|
netiq-npum-manager-3.1-hpux-11.23-ia64.depot.gz |
Framework Manager package for HP-UX 11i v2 and v3 Itanium |
|
Package |
Description |
|---|---|
|
netiq-npum-agent-3.1-linux-2.6-x86_64.rpm |
Agent package for Linux on Intel 64-bit machines with a 2.6 kernel |
|
netiq-npum-agent-3.1-linux-2.6-intel.rpm |
Agent package for Linux on Intel 32-bit machines with a 2.6 kernel |
|
netiq-npum-manager-3.1-linux-2.6-x86_64.rpm |
Framework Manager package for Linux on Intel 64-bit machines with a 2.6 kernel |
|
netiq-npum-manager-3.1-linux-2.6-intel.rpm |
Framework Manager package for Linux on Intel 32-bit machines with a 2.6 kernel |
|
Package |
Description |
|---|---|
|
netiq-npum-agent-3.1-solaris-2.8-intel.pkg.gz |
Agent package for Solaris 2.8 Intel |
|
netiq-npum-agent-3.1-solaris-2.8-sparc.pkg.gz |
Agent package for Solaris 2.8 SPARC |
|
netiq-npum-manager-3.1-solaris-2.8-intel.pkg.gz |
Framework Manager package for Solaris 2.8 Intel |
|
netiq-npum-manager-3.1-solaris-2.8-sparc.pkg.gz |
Framework Manager package for Solaris 2.8 SPARC |
|
Package |
Description |
|---|---|
|
netiq_pum_agent_3.1_x86.msi |
Agent package for Windows 32-bit computer |
|
netiq_pum_agent_3.1_x64.msi |
Agent package for Windows 64-bit computer |
|
netiq_pum_manager_3.1_x86.msi |
Framework Manager package for Windows 32-bit computer |
|
netiq_pum_manager_3.1_x64.msi |
Framework Manager package for Windows 64-bit computer |
|
Package |
Description |
|---|---|
|
netiq-npum-packages-3.1.tar.gz |
The zip file for setting up a local package manager. |
You can upgrade to Privileged Account Manager 3.1 from the previous versions of Privileged User Manager. For more information on upgrading, see Upgrading NetIQ Privileged Account Manager
in the NetIQ Privileged Account Manager 3.1 Installation Guide.
NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Issue: Selecting and moving multiple objects by using the Shift/ Ctrl key does not work.
Workaround: To move multiple objects, you can use shift + select the required objects, or use Select All. (Bug 915307)
Issue: When you right-click Start on a Windows 2012 server, the Run as privileged user option does not get displayed. (Bug 901032)
Workaround: To workaround this issue, right-click the application in the folder where the application is installed to execute Run as privileged user.
Issue: When Command Control Objects are added simultaneously in large numbers, the objects do not appear in the console. This is an intermittent behavior. (Bug 908307)
Workaround: No Workaround.
Issue: In the administration console, when you search for unregistered hosts by clicking Hosts > List Unregistered Hosts > IP Range, the Failed to list unregistered agents error is displayed. (Bug 832747)
Workaround: Ensure that when you install Agents, you register it with the Manager for Privileged Account Manager.
Issue: In the Reporting console of Privileged Account Manager when you save the changes to syslog settings, such as select SSL, or Allow Persistent Connections, the changes are not applied. (Bug 895993)
Workaround: To workaround this issue, restart Privileged Account Manager.
For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.
Copyright © 2016 NetIQ Corporation. All Rights Reserved.