VMware Identity Manager 3.3.7 Release Notes

VMware Identity Manager 3.3.7 | 26 JAN 2023 | Build 21173100 VMware Identity Manager (Windows) Connector 3.3.7 | 26 JAN 2023 | Build VMware Identity Manager Connector 3.3.7.0 Installer.exe UPDATED October 2023

VMware Identity Manager 3.3.7 is a minor release that includes updates for open source software and third-party dependencies.

VMware Identity Manager 3.3.7 includes fixes for VMSA-2022-0032.

NEW. The patch for VMware Identity Manager 3.3.7 includes fixes for VMSA-2023-0011 and support for Active Directory on Windows 2022.

Before You Begin

• Compatibility
• Installation and Upgrade

Compatibility

VMware vCenter™ and VMware ESXi™ Compatibility

VMware Workspace ONE Access appliance supports the following versions of vSphere and ESXi.

•  7.0, 6.7, 6.5

Windows Server Supported

• Windows Server 2012 R2

• Windows Server 2016

• Windows Server 2019

Web Browser Supported

• Mozilla Firefox, latest version

• Google Chrome, latest version

• Safari, latest version

• Microsoft Edge, latest version

Database Supported

• Postgres 9.6.21

• Microsoft SQL Server 2014, 2016, 2017, 2019

  Important:

  Microsoft SQL server 2014 must be updated with the Microsoft SQL patch to support TLS 1.2.

Directory Server Supported

• Active Directory on Windows Server 2012 R2, 2016, and 2019

  NOTE: The VMware Identity Manager 3.3.7 patch release supports Active Directory on Windows Serve 2022.

• OpenLDAP - 2.4

• Oracle LDAP - Directory Server Enterprise Edition 11g, Release 1 (11.1.1.7.0)

• IBM Tivoli Directory Server 6.3.1

Compatibility Matrix

The VMware Product Interoperability Matrix provides details about the compatibility of current and previous versions of VMware products and components, such as VMware vCenter Server and Horizon 7.

Installation and Upgrade

Default Deployment Configuration

Different sizing options for CPU and memory are available to choose at the time of deployment based on the requirements

• 100 GB hard disk

• 8 GB RAM

• 4 vCPUs

• Extra Small: 4CPU/8 GB Memory

• Small: 6CPU/10 GB Memory

• Medium: 8CPU/16 GB Memory

• Large: 10CPU/16 GB Memory

• Extra Large: 12CPU/32 GB Memory

• Extra Extra Large: 14CPU/48 GB Memory

Upgrading to VMware Identity Manager 3.3.7

The following upgrade paths are supported.

• From version 3.3.6, you upgrade directly to version 3.3.7.

• From version 3.3.3, 3.3.4, and 3.3.5, you must upgrade directly to version 3.3.6 before upgrading to 3.3.7.

• From version 3.3.2, you must first upgrade to version 3.3.5, then upgrade from 3.3.5 to 3.3.6 and then to 3.3.7.

Note:

• To access the Appliance Settings page in the VMware Identity Manager console, make sure that you are assigned the Operator role for the default tenant.

• To configure the SMTP settings, you must be logged in as an operator user of the default tenant from system domain, not as the admin tenant.

  • Tenant admins of non-default tenants are not authorized to configure SMTP settings.

• Migrate VMware vRealize Automation 7.5 or 7.6 Business Groups to vRealize Version 8.4   

To upgrade to VMware Identity Manager 3.3.7, see Upgrading VMware Identity Manager to 3.3.7 on the VMware Workspace ONE Access Documentation center. During the upgrade, all services are stopped, so if only one connector is configured plan the upgrade with the expected downtime in mind.

Note: When you upgrade to VMware Identity Manager 3.3.7 for Linux, if you see the following error message and the upgrade is aborted, follow these steps to update the certificate. After the certificate is updated, restart the upgrade. 

"Certificate auth configuration update required for tenant <tenantName> prior to upgrade. Pre-update check failed, aborting upgrade."

1. Log in to the VMware Identity Manager console.

2. Navigate to Identity & Access Management > Setup.

3. In the Connectors page, click the link in the Worker column

4. Click the Auth Adapters tab, then click CertificateAuthAdapter.

5. In the Uploaded CA Certificates section, click the red X next to the certificate to remove it.

6. In the Root and intermediate CA Certificates section, click Select File to re-add the certificate.

7. Click Save.

Upgrade Path for VMware Identity Manager Connector 3.3.7 (Windows)

• If you installed the VMware Identity Manager Connector for Windows 3.3.1 and 3.3.2 with vRealize Suite Lifecycle Manager, you cannot upgrade to the 3.3.7 connector.  You must install the new 3.3.7 version of the connector. 

• If you installed the VMware Identity Manager Connector for Windows 3.3.2, 3.3.3, 3.3.4, 3.3.5, or 3.3.6 using the .exe installer, you can upgrade your connector to 3.3.7.

Resolved Issues

The VMware Identity Manager 3.3.7 release includes the following resolved issues.

• NEW, MAY 30 2023 - HW-170932: A fix for the issues reported in VMware Security Advisory VMSA-2023-0011 is available. Read the advisory and follow the instructions to download and apply the patch.

  As part of this patch release, an updated connector is also available. The HW-170932-Connector-3.3.7.zip patch supports Active Directory domain controllers on Windows Server 2022. It also includes the fix for HW-172083 (issues with RADIUS authentication for more than one domain).

• HW-158908. Resolved an issue with an api client consuming free disk space in /db/data

• HW-153940. The autocomplete feature for the password field is turned off. This attribute prevents the browser from prompting the user to save the populated values later.

Known Issues

No known issues.

Documentation

• For VMware Identity Manager 3.3 documentation, see the VMware Workspace ONE Access Documentation center. The 3.3.7 upgrade guide can be found under VMwre Identity Manager 3.3 in the Installation & Architecture section.

Internationalization

VMware Workspace ONE Access is available in the following languages.

• English

• French

• German

• Spanish

• Japanese

• Simplified Chinese

• Korean

• Traditional Chinese

• Russian

• Italian

• Portuguese (Brazil)

• Dutch