The following upgrade paths and scenarios are supported.

Important: Starting with VMware Identity Manager, the VMware Identity Manager service no longer includes an embedded connector and the external Linux-based connector is deprecated. New versions of the external Linux-based connector are no longer available.

If you are upgrading from a deployment that uses the embedded connector, you must switch to the external Windows-based connector. If you are using the external Linux-based connector, the best practice is to switch to the external Windows-based connector during this upgrade. Otherwise, you cannot use the newest functionality available in the updated connector. If you are using the external Windows-based connector, you can continue to use existing instances, but as a best practice upgrade the external Windows-based connector instances to enable the use of the newest functionality.

VMware Identity Manager Windows connector does not support VMware ThinApp® packages. If your deployment provides access to ThinApp packages that you want to maintain, do not upgrade to VMware Identity Manager Windows connector.

A migration package is available to you for migrating embedded-connector or external Linux-based-connector information to the external Windows-based connector.

When you run the migration package on the embedded-connector or external Linux-based-connector, all authentication methods, except for the Password authentication method, are disabled. The disablement allows configuration settings, such as the IP address of the connector, to be updated. After you install the corresponding Windows-based connector instances, you must re-enable the disabled authentication methods with the correct configuration settings.

VMware Identity Manager Version Numbers

VMware Identity Manager is moving from a major.minor version-number model to a date-driven model represented by a year and month ( This release is version The previous version was 3.3.

Supported Upgrade Paths

The following upgrade paths are supported:

  • From version or 3.3 directly to version
Note: To upgrade from a version prior to, you must first upgrade to version, and then upgrade from to When you perform an online upgrade, the latest version to which upgrade is permitted appears. If necessary, upgrade to the allowed version and then upgrade to

Compatibility with Workspace ONE UEM

VMware Product Interoperability Matrix provides details about the compatibility of current and previous versions of VMware products and components, such as VMware Workspace ONE UEM Console.

Internet Connectivity

You can upgrade VMware Identity Manager online or offline.

By default, the VMware Identity Manager appliance uses the VMware web site for the upgrade procedure, which requires the appliance to have Internet connectivity. You must also configure proxy server settings for the appliance, if applicable.

If your virtual appliance does not have Internet connectivity, you can perform the upgrade offline. For an offline upgrade, you download the upgrade package from My VMware. You can either use the updateoffline.hzn script to perform the upgrade or set up a local Web server to host the upgrade file.

Upgrade Scenarios

  • If you have deployed a single VMware Identity Manager appliance, upgrade it online or offline as described in Upgrading VMware Identity Manager Online or Upgrading VMware Identity Manager Offline.
    Note: Expect some downtime because all services are stopped during the upgrade. Plan the timing of your upgrade accordingly.
  • If you have deployed multiple VMware Identity Manager virtual appliances in a cluster for failover or high availability, see Upgrading a Cluster.
  • To upgrade VMware Identity Manager with minimal downtime in a multi-data center deployment scenario, see "Upgrading VMware Identity Manager with Minimal Downtime" in Installing and Configuring VMware Identity Manager.