The upgrade process does not differ significantly from the installation process. The values and settings you configured are automatically populated. You can verify the settings and select Next through the installer.

Important: Starting with VMware Identity Manager, the VMware Identity Manager service no longer includes an embedded connector and the external Linux-based connector is deprecated. New versions of the external Linux-based connector are no longer available.

If you are upgrading from a deployment that uses the embedded connector, you must switch to the external Windows-based connector. If you are using the external Linux-based connector, the best practice is to switch to the external Windows-based connector during this upgrade. Otherwise, you cannot use the newest functionality available in the updated connector. If you are using the external Windows-based connector, you can continue to use existing instances, but as a best practice upgrade the external Windows-based connector instances to enable the use of the newest functionality.

VMware Identity Manager Windows connector does not support VMware ThinApp® packages. If your deployment provides access to ThinApp packages that you want to maintain, do not upgrade to VMware Identity Manager Windows connector.

A migration package is available to you for migrating embedded-connector or external Linux-based-connector information to the external Windows-based connector.

When you run the migration package on the embedded-connector or external Linux-based-connector, all authentication methods, except for the Password authentication method, are disabled. The disablement allows configuration settings, such as the IP address of the connector, to be updated. After you install the corresponding Windows-based connector instances, you must re-enable the disabled authentication methods with the correct configuration settings.

Supported Upgrade Path

You can perform a direct upgrade from either version or 3.3 to version

To upgrade from a version of VMware Identity Manager earlier than, you must first upgrade to version, and then upgrade from to If necessary, upgrade to the allowed version and then upgrade to

Compatibility with Workspace ONE UEM

VMware Product Interoperability Matrix provides details about the compatibility of current and previous versions of VMware products and components, such as VMware Workspace ONE UEM Console.

Prerequisite Steps

Before you begin the upgrade, make sure that the following steps are complete.

  • Take a snapshot of the database and the VMware Identity Manager nodes before upgrading to the latest version.

  • If you revoked the db_owner role on the Microsoft SQL database, you must add the role back before performing the upgrade, otherwise the upgrade fails. See Add the db_owner Role Before Upgrade.

  • To upgrade a VMware Identity Manager server equipped with SQL server availability groups, you must disable availability groups before you upgrade the server. After the upgrade, you must re-enable availability groups. See Disable SQL Server AlwayOn Availability Groups Before Upgrade
  • If the VMware Identity Manager deployment you are upgrading uses both the embedded connector and certificate-based authentication, take note of the settings for the CertificateAuthAdapter component configured in the embedded connector.
    Note: Because the embedded connector is no longer available, the CertificateAuthAdapter component configured in the embedded connector is also no longer available. The certificate (Cloud Deployment) authentication method replaces the CertificateAuthAdapter component. The migration process handles the conversion from the CertificateAuthAdapter component to the certificate (Cloud Deployment) authentication method.

    Now, before the migration, take note of the settings in the CertificateAuthAdapter component, so after the migration you can verify that the pre-migration settings match the post-migration settings.

    1. Log in to the VMware Identity Manager admin console and select Identity & Access Management > Setup.
    2. On the Connectors page, select the Worker link for the embedded-connector instance being replaced.
    3. Click Auth Adapters and then click CertificateAuthAdapter.
    4. Take note of the settings on the Certificate Service Auth Adapter page.
  • If VMware Identity Manager is deployed in a load-balancing environment, verify that the environment is properly configured.
    If you use an F5 load balancing server, when you upgrade to VMware Identity Manager, reconfigure the load balancer, if required. The requirement to reconfigure your F5 load balancing server depends on the version of VMware Identity Manager that you are upgrading from. To upgrade your F5 load balancing server, see Verifying F5 Load Balancer Configuration Before Upgrade.
    VMware Identity Manager Version Required Action
    Earlier than 3.3 Reconfigure the F5 load balancing server according to the referenced instructions.
    3.3 and later None. If you have an F5 load balancing server functioning with VMware Identity Manager 3.3 or later, the load balancing server is already appropriately configured.