Privileged Account Manager 4.0 Patch Update 1 Release Notes

February 2021

Privileged Account Manager 4.0 Patch Update 1 resolves several previous issues and contains improvements to existing features.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Privileged Account Manager Community Support Forum, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the NetIQ website in HTML and PDF formats. If you have suggestions for documentation improvements, click the comment icon on any page in the HTML version of the documentation posted at the Privileged Account Manager Documentation website. To download this product, see the Software License and Download portal.

1.0 Software Fixes

Privileged Account Manager 4.0 P1 includes software fixes that resolve the following issues:

Component

Bug ID

Issue

Access Control

300106

Selecting a custom credential for a domain attached box does not list custom credentials in the permission page of Access Control.

Web Remote Desktop Protocol

302208

Video recording does not capture the Web-RDP agentless session.

Admin Console

300231

Multiple inconsistency issues with the Privileged Account Manager user interface.

Agentless - RDP and SSH

312102

​​​​​​​The agentless module installation fails if libcairo, libpango packages, and dejavu-sans fonts are not installed.

Enhanced Access Control

311155

Allow operation for Read, Write, and Delete is not audited in the same way for Enhanced Access Control in Windows and Linux /Unix.

RDP and SSH

310162

After a manual disconnect from a Linux or Windows agentless session, the audits are not recorded in the Disconnected Sessions report and in the disconnect type filter.

Assignment and Permissions

312177

The Assignment page takes a long time to load.

LDAP

313104

LDAP integration does not work with free IPA versions when upgrading from Privileged Account Manager version 3.7 to 4.0.

Command Control

303027

Command Control agent rexec module Is not present after a fresh install of the HP-UX depot file.

2.0 Installing Privileged Account Manager 4.0 Patch Update 1

After installing Privileged Account Manager 4.0 patch update 1, download the software and the license from the Software License and Download portal. For information about how to download the product from this portal, watch the following video.

The following files are available with the Privileged Account Manager 4.0 Patch Update 1 release:

Table 1 Files Available for Privileged Account Manager 4.0 Patch Update 1 Release

File/Folder name

Description

netiq-npam-packages-4.0.0-1.tar.gz

Contains Privileged Account Manager 4.0 Patch Update 1 .tar file.

netiq-npam-agent-4.0.0-1-hpux-11.31-ia64.depot.gz

Contains Privileged Account Manager 4.0 Patch Update 1 HP-UX depot.gz file.

3.0 System Requirements

For information about hardware requirements, supported operating systems, and browsers, see Privileged Account Manager 4.0 System Requirements and Sizing Guidelines.

4.0 Upgrading Privileged Account Manager

You can upgrade to Privileged Account Manager 4.0 Patch Update 1 from Privileged Account Manager 4.0 or later. When you upgrade to Privileged Account Manager 4.0 Patch Update 1, a rollback of packages to version 4.0 or an earlier version is not supported.

For information about upgrading to Privileged Account Manager 4.0 Patch Update 1, see Upgrading Privileged Account Manager in the Privileged Account Manager Installation Guide.

5.0 Updated Modules

This version updates the following modules:

  • Remote execution for the command control agent <rexec>

  • Administration interface <admin>

  • Framework package <spf>

  • Access Manager <auth>

  • Agentless Package <agentless>

6.0 Known Issues

Micro Focus strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

6.1 Check-in Fails for the ESXi Application with the Latest Java Version 14

Issue: Check-in fails for the ESXi application with the latest Java version 14 when installed on Linux Manager. (Bug ID: 184179)

Workaround: No workaround is available.

6.2 SSH Web Relay Session Gets Disconnected When a Vault Is Configured with an OpenSSH Private Key

Issue: SSH Web relay session gets disconnected if vault is configured with an OpenSSH private key. (Bug ID: 189414)

Workaround: Use ssh-keygen -m pem format keys.

6.3 MSI Upgrade Does not Work

Issue: MSI upgrade does not work with Privileged Account Manager 4.0. (Bug ID: 286190)

Workaround: Upgrade using Package Manager.

6.4 Windows Agent Sends Extra Request for Direct RDP, While Serving Web Agent RDP Session

Issue: When Web Agent RDP session is requested, Windows Agent sends Direct RDP request, which may get authorized if a policy is created for both these permissions for same user. (Bug ID: 301071)

Workaround: There should not be Direct RDP and Web Agent RDP Permissions created to authorize same users.

6.5 LDAP Credential Vault Set as Authentication Domain Is Not Migrated as LDAP Server on Backup Managers

Issue: After upgrade, the default Authentication Domain (LDAP Credential Vault) is not migrated as LDAP Server under Settings in the backup manager. (Bug ID: 302084)

Workaround: After upgrading all the managers, promote the auth module in Primary Manager.

NOTE:This issue does not occur if all the Backup Managers are upgraded simultaneously using the option Update Domain Packages. Use the GUI element for "Update Domain Packages".

6.6 Enhanced Access Control Fails to Work on Solaris SPARC and HP-UX

Issue: Enhanced Access Control does not work on Solaris SPARC and HP-UX. (Bug ID: 305031)

Workaround: No workaround is available.

6.7 Inaccuracy in Disconnected Sessions Report

Issue: The Disconnected Sessions report does not reflect correctly when an admin does not manually disconnect from the manager containing the agentless module. (Bug ID: 315083)

Workaround: Log into the Admin console user interface of the manager containing the agentless module and manually disconnect the session from the Reports page.

7.0 Contacting Micro Focus

For specific product issues, contact Micro Focus Support at https://www.microfocus.com/support-and-services/.

Additional technical information or advice is available from several sources: