VMware Identity Manager 3.3.6 Release Notes

VMware Identity Manager 3.3.6 | January 2022 | Build 19203469 VMware Identity Manager (Windows) 3.3.6 | January 2022 | Build VMware Identity Manager Connector Installer.exe Release date: January 2022

 

What's in the Release Note

• Resolved Issues in 3.3.6
• Products that can upgrade to VMware Identity Manager 3.3.6
• Internationalization
• Compatibility, Installation, and Upgrade
• Documentation
• Known Issues

Resolved Issues in 3.3.6

• Log4j updated to 2.17.
• VMware Identity Manager 3.3.6 is a minor release that includes the fixes for VMSA-2021-0028 and VMSA-2021-0030.

VMware Products that can upgrade to VMware Identity Manager 3.3.6

• VMware vRealize Products such as vRealize Automation, vRealize Suite Lifecycle Manager (vRSLCM), vRealize Operations, vRealize Business, vRealize Log insight, and vRealize Network Insight for Authentication and SSO

  • vRealize products that are deployed and managed through vRealize Suite Lifecycle Manager only can consume VMware Identity Manager 3.3.2, 3.3.3, 3.3.4, 3.3.5, or 3.3.6.

  • vRealize Suite Lifecycle Manager can now handle a brand-new installation of VMware Identity Manager 3.3.6, or an upgrade to 3.3.6 from VMware Identity Manager 3.3.2, 3.3.3, 3.3.4, or  3.3.5

• VMware NSX-T Data Center for Authentication and SSO
  • NSX-T can be deployed with VMware Identity Manager 3.3.6 or an upgrade to 3.3.6 from VMware Identity Manager 3.3.2, 3.3.3, 3.3.4, or 3.3.5

 

Internationalization

VMware Identity Manager 3.3 is available in the following languages.

• English
• French
• German
• Spanish
• Japanese
• Simplified Chinese
• Korean
• Traditional Chinese
• Russian
• Italian
• Portuguese (Brazil)
• Dutch

Compatibility, Installation, and Upgrade

VMware vCenter™ and VMware ESXi™ Compatibility

VMware Identity Manager appliance supports the following versions of vSphere and ESXi.

•  7.0, 6.7, 6.5

Component Compatibility

Windows Server Supported

• Windows Server 2012 R2
• Windows Server 2016

Web Browser Supported

• Mozilla Firefox, latest version
• Google Chrome 42.0 or later
• Internet Explorer 11
• Safari 6.2.8 or later
• Microsoft Edge, latest version

Database Supported

• Postgres 9.6.21
• MS SQL 2012, 2014, and 2016

Directory Server Supported

• Active Directory on Windows Server 2012 R2, 2016, and 2019 with a Domain functional level and Forest functional level of Windows 2003 and later.
• OpenLDAP - 2.4.X
• Oracle LDAP - Directory Server Enterprise Edition 11g, Release 1 (11.1.1.7.0)
• IBM Tivoli LDAP - IBM Security Directory Server 6.3.1

Component Versions No Longer Supported

• Windows Server 2008 R2
• Windows Server 2012

This impacts Workspace ONE Access Connectors or database that might be installed on these versions of the Windows server. This impacts Active Directory if it is running on these older versions of a Windows server.

VMware Product Interoperability Matrix provides details about the compatibility of current and previous versions of VMware products and components,

For other system requirements, see the VMware Identity Manager Installation guides for 3.3 on the VMware Workspace ONE Access Documentation center.

Default Deployment Configuration

Different sizing options for CPU and memory are available to choose at the time of deployment based on the requirements

• 100 GB hard disk
• 8 GB RAM
• 4 vCPUs
• Extra Small: 4CPU/8 GB Memory
• Small: 6CPU/10 GB Memory
• Medium: 8CPU/16 GB Memory
• Large: 10CPU/16 GB Memory
• Extra Large: 12CPU/32 GB Memory
• Extra Extra Large: 14CPU/48 GB Memory

Upgrading to VMware Identity Manager 3.3.6

Note:

• To access the Appliance Settings page in the VMware Identity Manager console, make sure that you are assigned the Operator role for the default tenant.
• To configure the SMTP settings, you must be logged in as an operator user of the default tenant from system domain, not as the admin tenant.
  • Tenant admins of non-default tenants are not authorized to configure SMTP settings.
• Migrate VMware vRealize Automation 7.5 or 7.6 Business Groups to vRealize Version 8.4   

You can upgrade VMware Identity Manager from version 3.3.2, 3.3.3, 3.3.4, to 3.3.5 and then upgrade to 3.3.6.

To upgrade to VMware Identity Manager 3.3.6, see Upgrading VMware Identity Manager to 3.3.6 on the VMware Workspace ONE Access Documentation center. During the upgrade, all services are stopped, so if only one connector is configured plan the upgrade with the expected downtime in mind.

Note: When you upgrade to VMware Identity Manager 3.3.6 for Linux, if you see the following error message and the upgrade is aborted, follow these steps to update the certificate. After the certificate is updated, restart the upgrade. 

"Certificate auth configuration update required for tenant <tenantName> prior to upgrade. Pre-update check failed, aborting upgrade."

1. Log in to the VMware Identity Manager console.
2. Navigate to Identity & Access Management > Setup.
3. In the Connectors page, click the link in the Worker column
4. Click the Auth Adapters tab, then click CertificateAuthAdapter.
5. In the Uploaded CA Certificates section, click the red X next to the certificate to remove it.
6. In the Root and intermediate CA Certificates section, click Select File to re-add the certificate.
7. Click Save.

VMware Identity Manager Connector 3.3.6 (Windows)

If you installed the VMware Identity Manager Connector for Windows 3.3.1 and 3.3.2 with vRealize Suite Lifecycle Manager, you cannot upgrade to 3.3.6.  You must install the new 3.3.6 version of the connector. 

If you installed the VMware Identity Manager Connector for Windows 3.3.2, 3.3.3, 3.3.4, 3.3.5 using the .exe installer, you can upgrade your connector to 3.3.6.

Documentation

The VMware Identity Manager 3.3 documentation is in the VMware Workspace ONE Access Documentation center. The 3.3.6 upgrade guide can be found under VMware Identity Manager 3.3 in the Installation & Architecture section.

Known Issue

• To upgrade from 3.3.2 to 3.3.6, you must first upgrade to 3.3.5 and then upgrade to 3.3.6.

• Network might be lost after the upgrade to 3.3.4 or 3.3.5.

  If any of the properties from the command

  /usr/local/horizon/scripts/networkwizard.hzn showovfenv

  are empty or incorrect, follow KB 83587 to resolve the issue.

•  Inventory Sync of VMware Identity Manager Services might fail in vRealize Suite Lifecycle Manager. To resolve the issue, follow KB 83586.

• The steps to remove a node from a VMware Identity Manager cluster are not supported when you deploy VMware Identity Manager with vRealize Suite Lifecycle Manager.