5.4 Upgrading the Identity Manager Deployment of Self Service Password Reset

If you deployed Self Service Password Reset using the integrated installer from the Identity Manager installation or the stand alone installer, there are additional steps you must perform to upgrade Self Service Password Reset.

If you used the stand alone installer and installed Self Service Password Reset and One SSO Provider (OSP) on a separate computer than the other Identity Manager components, you must upgrade OSP before upgrading Self Service Password Reset. For more information, see Upgrading Identity Applications in the NetIQ Identity Manager Setup Guide for Linuxor Upgrading Identity Applications and Identity Reporting in the NetIQ Identity Manager Setup Guide for Windows.

To upgrade Self Service Password Reset from an Identity Manager deployment:

Ensure that your browsers support TLS 1.2.

By default, Self Service Password Reset only enables TLS 1.2 after the upgrade. Ensure that your browsers support TLS 1.2 or the users will not be able to log in after the upgrade. The most recent versions of the supported browsers support TLS 1.2. If you want to change this setting to a different protocol, you can access the setting in the Configuration Editor under Settings > HTTPS Servers > TLS Protocols.
Ensure that you are running a supported version of Identity Manager and Self Service Password Reset. For more information, see Supported Versions in the Self Service Password Reset 4.4 Administration Guide.
Download the most recent version of Self Service Password Reset WAR file from the NetIQ Patch Finder download website.
Ensure that you have configured an administrator user for Self Service Password Reset.
1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
2. In the toolbar, click your name.
3. Click Configuration Editor.
4. Click Modules > Administrator > Administrator Permission.
5. Ensure that the LDAP filter you defined includes an administrator user.
Create a backup of your current configuration information.
1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
2. In the toolbar, click your name.
3. Click Configuration Manager.
4. Under Configuration Activities, click Download Configuration.
5. Save the SSPRConfiguration.xml file to a safe location.
(Optional) If you have made any customization in Self Service Password Reset such as changes in the user interface copy these for later reference.

For more information, see Customizing the Theme of Self Service Password Reset in the Self Service Password Reset 4.4 Administration Guide.
Lock the Self Service Password Reset configuration file by accessing the Configuration Manager, then clicking Restrict Configuration.
Run the following stop script to stop the Apache Tomcat service:
```
systemctl stop netiq-tomcat.service
```
Delete the following directories:
- Tomcat_home/webapps/sspr
- Tomcat_home/work/Catalina/localhost
Copy the updated sspr.war to the Tomcat_Home/webapps directory.

NOTE:Ensure that you have set the SSPR_APPLICATION operating system environment variable in the setenv file. For more information, see Setting Operating System Environment Variables.
Run the following start script to restart the Apache Tomcat service:
```
systemctl start netiq-tomcat.service
```
Import the configuration information you backed up prior to the upgrade.
1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
2. In the toolbar, click your name.
3. Click Configuration Manager.
4. Click Import Configuration, then browse to and select the SSPRConfiguration.xml file you created earlier.
(Optional) Copy any customization as required.

NOTE:If you uploaded a ZIP file to the configuration editor in you previous Self Service Password Reset version, the file is embedded in the SSPRConfiguration.xml file you imported previously so you do not need to complete the following steps.
1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
2. In the toolbar, click your name.
3. Select Configuration Editor.
4. Click Settings > User Interface > Look & Feel > Custom Resource Bundle.
5. Browse to and select the Custom Resource Bundle file, then click Upload File.
Configure the setting that integrates Self Service Password Reset with Identity Manager.
1. Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
2. In the toolbar, click your name.
3. Click Configuration Editor > Default Settings > LDAP Vendor Default Settings.
4. Select NetIQ IDM / OAuth Integration.
5. Select Save changes.
Verify that all of the configuration information is correct and if you imported the customization, that Self Service Password Reset restored all of the customizations.