• State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 37 subscribers
  • Views 6377 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PM 4.7 to 5.6 Side-by-Side upgrade. Stored Q&A answers

sread1
over 7 years ago

Hi All,

I've just completed a Side-By-Side upgrade of PM 4.7  to 5.6 as per instructions on the this website.

New version is running on a separate server.

I've done the export from 4.7 and imported into 5.6 without any issues. Domain connections are present and working. Q&A policy has also been imported across.

The issue I have, is that if I logon to the self service site on 5.6, with a user account which has already has a Q&A answers in AD created when using 4.7, it insists on going through the Q&A questions again. I've removed the setting in the User workflow to stop always asking to edit questions, but it still insists on going through the Q&A. 

I've checked the comment attribute in AD for the test user and the field is populated. What have I missed?

Should I have put the new 5.6 service into the existing password realm to ensure continuity?

Thanks for taking the time to read this. Any help would be appreciated.

Steve

  • 0 over 7 years ago
    I think I've answered my own question. I have to do an import as realm to ensure the same encryption key is used .
  • 0 over 7 years ago
    Hmm..that didn't work either. I assume when I join a realm, I should see all instances PM instances under Realm Instances?
  • 0 over 7 years ago
    You are correct.
    1. realm = encryption key. By providing in qpm 5.6/Admin website configuration file exported from 4.7/Admin website, you make 5.6 to read Q/A on users w/4.7 profile format after User Profile Update Wizard conversion. (you did it)
    2. Not sure you can see 4.7 in 5.6/ADmin in the same realm (maybe).
    3. After User Profile Update Wizard hits ad user, the user might not be able to use 4.7 (no roll back). here I might be wrong, and maybe user still can use legacy 4.7. In later versions upgrade roll-back is supported and Profile Update Wizard is not needed anymore.
    4. Best Practice. Chose test user, do Profile Upgrade against the test user only to confirm it works w/5.6, while the rest is still using 4.7.
  • 0 over 7 years ago
    Thanks for your response...

    In point 2 of your reply, I think you are right. I don't think a 5.6 instance can be part of a 4.7 realm.

    I've tried numerous times to try and get my new 5.6 instance to join the existing 4.7 realm, but whenever I do, 4.7 won't show the 5.6 instance and vice versa.

    Using Migration Wizard, running as the service account, exported the configuration of the existing 4.7 instance. Built new 5.6 instance on separate server, used the export from 4.7 to initialize the 5.6 instance into the realm. In the realm list, it only shows it's own instance. Is there a way to confirm that it's part of a realm?

    I haven't had much experience with password manager, so reference point 4 in your reply, how does one do a profile upgrade?

    Thanks, Steve
  • 0 over 7 years ago
    >Is there a way to confirm that it's part of a realm?
    Probably, you may compare GUID-like realm identifier (in notepad).
    Also, if the encryption key is the same in legacy and new QPM, after you hit ad\test user with Profile Migration Wizard, the ad\test user will be able to pass Q/A in new qpm 5.6/PMuser page.
    Assumption: direct upgrade from 4.7 to 5.6 is supported officially.