Technical Requirements for Identity Governance 3.7.3

Micro Focus recommends the verified components described in the following section. However, customers running on any component not provided in this list or with untested configurations will be supported until the point Micro Focus determines that the root cause is the untested component or configuration. Issues that can be reproduced on the verified component will be prioritized and fixed according to standard defect-handling policies. For more information about support polices, see Support Policies.

Ensure that the systems you install and use with Identity Governance meet the hardware and software requirements and supported paths and product versions listed here.

For additional documentation about this release, see the Identity Governance Documentation website.

1.0 Identity Governance Server System Requirements

This section provides the minimum requirements for the servers where you want to install Identity Governance. You can install Identity Governance and the required components in different configurations. For more information, see Recommended Production Environment Installation Scenarios in the Identity Governance 3.7 Installation and Configuration Guide.

These system requirements provide server settings according to the size of your Identity Governance catalog. In a small catalog, you might collect fewer than 100,000 identities with 100,000 permissions and 80,000 groups.

Category

Minimum Requirement

Processor

  • 4.0 GHz, single processor (small catalog)

  • 4 physical cores of 2.0 GHz or higher per processor

Disk Space

50 GB

Memory

  • 16 GB (small catalog)

  • 32 GB

Utilities

Identity Governance Configuration Update utility (ConfigUpdate) 4.12.4

Operating System

  • Red Hat Enterprise Linux 8.6 (64-bit) or later patched versions of 8.x

  • SUSE Linux Enterprise Server 15.4 or later patched version of 15.x

  • Microsoft Windows Server 2019 or later patched versions of Windows Server 2019

IMPORTANT:Before installing Identity Governance, apply the latest operating system patches.

Virtual Systems

We support Identity Governance on enterprise-class virtual systems that provide official support for the operating systems where our products are running. As long as the vendors of the virtual systems officially support these operating systems, we support Identity Governance running on them.

IMPORTANT:Ensure to configure the virtual machines running Identity Governance as Thick Provisioned.

Java

Zulu OpenJDK 8u352, 1.8.0_352 from Azul JRE or JDK, or later respective patched versions of 8uxxx and 1.8.0_xxx

Application Server

Apache Tomcat 9.0.69 or later patched versions of 9.0.x

NOTE:(Conditional) For guaranteed delivery of email notifications, your application server must include support for Apache ActiveMQ Java Message Service (JMS) and clustering.

LDAP Identity Service

  • Microsoft Active Directory that comes with Windows Server 2019

  • eDirectory 9.2 or later patched versions of 9.2.x

  • Identity Manager 4.8.6 or later patched versions of 4.8.x

Authentication Service

  • OSP 6.6.1 or later versions of 6.6.x when deployed with Identity Governance or Identity Manager

  • Access Manager 5.0.2, or later patched versions of 5.0.x

Secure Communication

TLS 1.2 or later for secure communication

Third-Party Connector Libraries

(Optional) The Identity Governance JDBC Collectors and SAP User Management Collector use third-party client connector software that is not distributed with the product. Find and download the appropriate JDBC driver file for your database from the database vendor.

  • DB2: com.ibm.db2.jcc.DB2Driver

  • Generic jTDS: net.sourceforge.jtds.jdbc.Driver

  • Microsoft SQL Server: com.microsoft.sqlserver.jdbc.SQLServerDriver

  • MySQL: com.mysql.jdbc.Driver

  • Oracle Thin Client: oracle.jdbc.driver.OracleDriver

  • PostgreSQL: org.postgresql.Driver

  • SAP: sapjco3.jar

    NOTE:Ensure that all required SAP Java Connector Native library components are installed on the host system. For more information, refer to the vendor documentation.

  • Sybase: com.sybase.jdbc3.jdbc.SybDriver

To gather identity and application data from one of these sources, put one or more of the these client .jar files into the Apache Tomcat /lib folder, then restart the Apache Tomcat server. The default installation location is:

  • Linux: /opt/netiq/idm/apps/tomcat/lib

  • Windows: c:\netiq\idm\apps\tomcat\lib

2.0 Database Requirements

This section provides the additional minimum requirements for the server where you want to install the databases for Identity Governance and the supported versions of the databases. The databases for Identity Governance are required for the product to work.

These system requirements provide server settings according to the size of your Identity Governance catalog. In a small catalog, you might collect fewer than 100,000 identities with 100,000 permissions and 80,000 groups.

On a virtual machine, set up the VM as Thick Provisioned.

Category

Minimum Requirement

Processor

  • 4.0 GHz, single processor (small catalog)

  • 4 physical cores of 2.0 GHz or higher per processor

Disk Space

  • 60 GB (small catalog)

  • 100 GB

Memory

  • 16 GB (small catalog)

  • 32 GB

Operating System

  • Red Hat Enterprise Linux 8.6(64-bit) or later patched versions of 8.x

  • SUSE Linux Enterprise Server 15.4 or later patched version of 15.x

  • Microsoft Windows Server 2019 or later patched versions of Windows Server 2019

IMPORTANT:Before installing Identity Governance, apply the latest operating system patches.

Virtual Systems

We support the databases for Identity Governance on enterprise-class virtual systems that provide official support for the operating systems where our products are running. As long as the vendors of the virtual systems officially support these operating systems, we support Identity Governance running on them.

IMPORTANT:Ensure to configure the virtual machines running Identity Governance as Thick Provisioned.

Database

One of the following:

  • Microsoft SQL Server

    • Microsoft SQL Server 2019 or later patched versions of the SQL Server 2019

    • Microsoft SQL JDBC driver 10.2 or later patched versions of the Microsoft SQL JDBC driver

  • Oracle

    • Oracle 18c, or later patched versions of 18x

    • Oracle 19c, or later patched versions of 19x

    • Oracle JDBC driver ojdbc8.jar

  • PostgreSQL

    • PostgreSQL 11.14, or later patched versions of 11.x

    • PostgreSQL JDBC driver 42.2.24 or later patched versions of the PostgreSQL JDBC driver

  • Vertica

    • Vertica 11.1.1 or later patched versions of 11.1.x

    • Vertica JDBC driver 12.0.x

Secure Communication

TLS 1.2 or later for secure communication

For information about the different options on how to create and populate the different Identity Governance databases, see Creating Databases for Identity Governance and Components in the Identity Governance 3.7 Installation and Configuration Guide.

3.0 Identity Reporting Server System Requirements

Servers that host Identity Reporting when installing only for Identity Governance need to meet the same minimum requirements as for the Identity Governance server and databases.

Identity Reporting is a separate product that comes with Identity Governance that provides detailed reports about your business-critical processes and systems. It is optional to install Identity Reporting. If you determine that you will install Identity Reporting, you install it after you have completed the Identity Governance installation.

For more information about whether to install the components on the same server, see Recommended Production Environment Installation Scenarios in the Identity Governance 3.7 Installation and Configuration Guide.

Identity Reporting also comes with Identity Manager, however, the reports provided are different if you install the version that comes with Identity Manager than the version of Identity Reporting that comes with Identity Governance. There are different requirements if you want to install Identity Reporting in an Identity Manager environment. For more information about the system requirements for installing in an Identity Manager environment that includes Identity Governance, see System Requirements for Identity Manager.

To see how to install Identity Reporting that comes with Identity Governance, see Installing Identity Reporting in the Identity Governance 3.7 Installation and Configuration Guide.

4.0 Workflow Engine Server System Requirements

The Workflow Engine runs the workflows at runtime and manages the approval tasks for approvers. It comes with Identity Governance but it is optional to install the Workflow Engine.

IMPORTANT:Installing Workflow Engine on a remote server will be supported in a future release. If installing Workflow Engine, install it on the same Tomcat Server as Identity Governance.

5.0 Browser Requirements for Identity Governance and its Components

To log in to Identity Governance on their local devices, users must have one of the following browser versions, at a minimum:

Computers

  • Apple Safari 16.1

  • Google Chrome 103.0.5060.114

  • Microsoft Edge Browser 103.0.1.1264.49

  • Mozilla Firefox 15.5

iPad (iOS 12 and later)

  • Apple Safari 15.5

  • Google Chrome 101.0

  • Mozilla Firefox 37

IMPORTANT:The browser must have cookies enabled. If cookies are disabled, the product does not work.

6.0 Audit Server System Requirements

Identity Governance generates the common event format (CEF) events which you can forward to an audit server to generate audit logs that can help prove compliance with regulations. Enabling auditing in Identity Governance is optional.

If you decide to use auditing, you must have your audit server installed and running. Identity Governance does not install the third-party audit servers for you. This section provides the minimum version of the audit servers where you want to send audit events from Identity Governance. We support the following audit servers using syslogger for use with Identity Governance:

  • ArcSight Enterprise Security Manager Suite 7.5.0.2516

  • Sentinel 8.5

  • Sentinel Log Manager 8.5

  • Splunk 8.2.2.1

To determine where you should install the audit server, see Recommended Production Environment Installation Scenarios. You can enable auditing during the installation of the components or you can enable auditing after you have installed the components. It depends on your environment and your needs.

7.0 Email Notification Server System Requirements

Identity Governance can send email notifications to managers, reviewers, administrators, or other people who must receive notifications about events or processes occurring. To be able to send emails and ensure that there are not any lapses in communication, you can install Apache ActiveMQ to guarantee that Identity Governance sends notifications using SMTP. Enabling email notifications is optional. If you choose to enable email notifications, Identity Governance supports the following:

  • Apache ActiveMQ 5.16.5

You can enable email notification during the installation of Identity Governance or Identity Reporting or you can enable email notifications after the installation. It depends on your environment and your needs.

8.0 Supported Upgrade Paths and Components

This section outlines the supported upgrade paths and component versions.

8.1 Supported Upgrade Paths

Supported upgrade paths for Identity Governance and related products are listed below.

  • Identity Governance 3.6.2.5 or 3.7 to 3.7.3

  • Identity Reporting 6.6.4 or 6.7 to 6.7.3

8.2 Supported Components and Products

  • Form Builder 1.4.0

  • Identity Manager 4.8.6

  • Identity Reporting 6.7.3

  • Workflow Console 1.0.5

  • Workflow Engine 1.0.5.1 on the same Tomcat server as Identity Governance

8.3 Supported Identity Manager Drivers and Packages

Identity Governance provides IDM entitlement application definition and application templates to collect account and permission entitlements from an on-premises Identity Manager environment. To successfully collect all accounts and permissions, the supported drivers must be running. Find below a list of the Identity Manager and Identity Governance supported drivers.

  • Drivers in Identity Manager 4.7.5 and 4.8.4 and later patched versions

  • Identity Governance Assignment collection: MFIGASGMTCOL_1.0.0.20220110104142

    Driver

    Minimum Driver Version

    Minimum Package Version

    Active Directory

    4.1.3.0

    • NOVLADENTEX_2.5.7.20190610155012

    Azure AD

    5.1.4.0100

    • MFAZUREENTL_1.0.2.20211118165327

    • MFAZUREXROLE_1.0.2.20211125114229

    Bidirectional

    4.0.4.0

    • NOVLEDIR2ENT_2.2.7.20211118165416

    Groupwise REST

    4.0.1.1

    • NOVLGRPWRAEN_3.1.1.20211209173838

    JDBC

    4.2.2.0000

    • NOVLJDBCBISN_2.0.0.20211208134901

    • NOVLJDBCENTI_2.4.4.20211208135336

    • NOVLORAINSYN_2.1.0.20211208135824

    • NOVLSQSIDSYN_2.1.1.20211220115351

    • NOVLPGSINSYN_2.1.1.20211220124959

    Lotus Notes

    4.1.2.0

    • NOVLNOTEENT_2.4.1.20211118113748

    SAP User Management

    4.0.4.0

    • NOVLSAPUFENT_2.3.5.20211217153914

    • NOVLSAPUMIG_1.0.0.20211217153953

    SCIM

    1.0.1.0200

    • NETQSCIMENT_1.0.1.20211223151040

    • NETQSCIMBASE_1.0.1.20211223151032

    Workday

    1.3.0.0100

    • NETIQWDENT_1.0.0.20210505165701

9.0 Contact Information

We want to hear your comments and suggestions about this book and the other documentation included with this product. You can use the comment link on each page of the online documentation, or send an email to Documentation-Feedback@microfocus.com.

10.0 Legal Notices

© Copyright 2022 Micro Focus or one of its affiliates.

The only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice.

For additional information, such as certification-related notices and trademarks, see https://www.microfocus.com/en-us/legal.