Skip to content

Commit 6f5d457

Browse files
jake-mahon-netwrixjake-mahon-netwrix
committed
Add NAA upgrade workflow articles
1 parent a85bb30 commit 6f5d457

5 files changed

+368
-0
lines changed

‎docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-aic.md‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
---
2+
description: Step-by-step instructions for upgrading the Netwrix Access Information Center (AIC), including installation, SSL and SSO configuration, and post-upgrade validation.
3+
keywords:
4+
- Netwrix Access Analyzer
5+
- Access Information Center
6+
- AIC upgrade
7+
- AIC configuration
8+
- SSO
9+
- SSL
10+
- BindingUrl
11+
- AuthAllowWindowsAuthentication
12+
- installation
13+
products:
14+
- access-analyzer
15+
sidebar_label: Upgrading Access Information Center (AIC)
16+
title: Upgrading Access Information Center (AIC)
17+
knowledge_article_id: ka0Qk000000GIqbIAG
18+
---
19+
20+
# Upgrading Access Information Center (AIC)
21+
22+
> **NOTE:**
23+
> - Return to the main workflow page: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md).
24+
> - Return to the previous section: [Access Analyzer Upgrade Workflow — Post-Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md).
25+
26+
## Overview
27+
28+
This article lists the steps to perform the **Access Information Center (AIC)** upgrade.
29+
30+
## Upgrade
31+
32+
Follow these steps:
33+
34+
1. Download the latest version of **Netwrix AIC** from the [My Products ⸱ Netwrix 🡥](https://www.netwrix.com/my_products_int.html).
35+
36+
> **IMPORTANT:** Unblock the installer. In **Properties**, select the **Unblock** checkbox and save the changes.
37+
38+
2. To upgrade the AIC application to a newer version, run the new `AccessInformationCenter.msi` installer. You do not need to uninstall the existing version.
39+
See the [Install the Access Information Center](https://docs.netwrix.com/docs/accessinformationcenter/12_0/installation/install) topic for additional details.
40+
41+
3. Hold **Shift**, right-click the latest AIC installer, and select **Copy as path**. In an elevated Command Prompt, paste the path and run it to start installation.
42+
4. Complete the installation.
43+
44+
## Post-Upgrade
45+
46+
Follow these steps to complete the AIC upgrade:
47+
48+
1. If SSL is implemented, update the `BindingUrl` node of the AIC configuration file to use HTTPS. Example:
49+
50+
```registry
51+
<add key="BindingUrl" value="http://+:82" />
52+
```
53+
54+
- If SSO is implemented, update the `AuthAllowWindowsAuthentication` node of the configuration file. Example:
55+
56+
```registry
57+
<add key="AuthAllowWindowsAuthentication" value="True" />
58+
```
59+
60+
- Default configuration file path:
61+
62+
```registry
63+
C:\Program Files\STEALTHbits\Access Information Center
64+
```
65+
66+
2. Have a user with the correct permissions log in to the AIC to confirm operability.
67+
3. Verify the AIC configuration settings match those saved during the preparation phase.
68+
4. Verify that the built-in admin account for the AIC is either disabled or that the password has been changed.

‎docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
---
2+
description: Final steps for completing the Netwrix Access Analyzer upgrade, including schema updates, settings verification, and published reports validation.
3+
keywords:
4+
- Netwrix Access Analyzer
5+
- Access Analyzer upgrade
6+
- upgrade completion
7+
- File System auditing
8+
- schema update
9+
- Active Directory Inventory
10+
- published reports
11+
- SQL database
12+
- db_owner
13+
products:
14+
- access-analyzer
15+
sidebar_label: Completing Access Analyzer Upgrade
16+
title: Completing Access Analyzer Upgrade
17+
knowledge_article_id: ka0Qk000000GIozIAG
18+
---
19+
20+
# Completing Access Analyzer Upgrade
21+
22+
> **NOTE:**
23+
> - Return to the main workflow page: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md).
24+
> - Return to the previous section: [Access Analyzer Upgrade Workflow — Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md).
25+
> - Proceed to the next section: [Access Analyzer Upgrade Workflow — Access Information Center](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-aic.md).
26+
27+
28+
29+
## Overview
30+
31+
This article lists the steps to complete the **Access Analyzer** upgrade procedure.
32+
33+
## Instructions
34+
35+
Follow these steps to finalize the Access Analyzer upgrade:
36+
37+
1. After the **Netwrix Upgrade Wizard** finishes, open the **Access Analyzer Console**.
38+
2. Verify the global settings match the initial settings.
39+
3. If licensed for File System auditing, run the **File System\0-CreateSchema** job. This updates the schema for the tables, views, and functions used by the rest of the File System solution.
40+
4. Run the **Active Directory Inventory** group from the **Schedules** node to confirm operability.
41+
5. Verify that the published reports configuration matches the backed-up version. If necessary, migrate the `<AppSettings>` node from the default configuration path:
42+
43+
```registry
44+
%SAInstallDir%Web\WebServer.exe.config
45+
```
46+
47+
6. If you are using Windows authentication to connect to the SQL database, configure the **Netwrix Access Analyzer Web Server** service to log on as a service account with **db_owner** permissions for the Access Analyzer database.
48+
7. Have a user with the appropriate permissions log in to the **Published Reports** site to confirm operability.

‎docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-preparations.md‎

Lines changed: 162 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,162 @@
1+
---
2+
description: Preparation steps for upgrading Netwrix Access Analyzer, including considerations, reference screenshots, and required file backups.
3+
keywords:
4+
- Netwrix Access Analyzer
5+
- Access Analyzer upgrade
6+
- upgrade preparation
7+
- upgrade considerations
8+
- Azure jobs
9+
- Entra ID
10+
- proxy service
11+
- file backups
12+
- Access Information Center
13+
- SharePoint agent
14+
products:
15+
- access-analyzer
16+
sidebar_label: Preparing for Access Analyzer Upgrade
17+
title: Preparing for Access Analyzer Upgrade
18+
knowledge_article_id: ka0Qk000000GIllIAG
19+
---
20+
21+
# Preparing for Access Analyzer Upgrade
22+
23+
> **NOTE:** Return to the main workflow page here: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md).
24+
> Proceed to the next section: [Access Analyzer Upgrade Workflow — Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md).
25+
26+
## Overview
27+
28+
This article lists the steps to prepare for the **Access Analyzer** upgrade procedure.
29+
30+
## Upgrade Considerations
31+
32+
Refer to the following points to learn more about the upgrade scope:
33+
34+
- The **Access Information Center (AIC)** should be upgraded along with Access Analyzer.
35+
- If you run SharePoint on-premises scans, update the **SharePoint agent** on the SharePoint server.
36+
- When upgrading from v11.5 to v11.6, re-schedule all Azure jobs due to the **Entra ID** rebranding.
37+
- When upgrading from v11.5 to v11.6, manually upgrade each proxy service instead of running the **FS_UpdateProxy** job.
38+
39+
## Reference Screenshots
40+
41+
Take the following reference screenshots before the upgrade:
42+
43+
- Installed programs (**Programs and Features**) via Control Panel:
44+
45+
```registry
46+
appwiz.cpl
47+
```
48+
49+
- **License** (**Help** > **About**)
50+
- Each of the global **Settings** subnodes
51+
- The **Schedules** node
52+
53+
> **IMPORTANT:** When upgrading from Access Analyzer v11.5 to v11.6 or later, pay attention to any Azure-related tasks. Recreate these tasks under the new Entra ID naming after the upgrade.
54+
55+
- The job tree structure with the contents of each module
56+
- Query settings of the **Active Directory Inventory** > **1-AD_Scan** job, including the **Options** page and the **Custom Attributes** page
57+
- Upload the **Active Directory Inventory** > **1-AD_Scan** > **Active Directory Summary** report to Salesforce (**Customer Account** > **Related** > **Notes & Attachments**)
58+
59+
> **IMPORTANT:** Upload the screenshot to Salesforce — **Customer Account** > **Related** > **Notes & Attachments**.
60+
61+
- Every page of the FSAA, FSAC, SEEK, SPAC, SPAA/SPSEEK scans query settings
62+
- Every page of the AIC settings
63+
64+
## File Backups
65+
66+
Create a separate folder named `NEAUpgrade_%date%` to store backup files. Back up the following items:
67+
68+
- Access Analyzer license file:
69+
70+
```registry
71+
%SAInstallDir%StealthAUDIT.lic
72+
```
73+
74+
- Host list definitions:
75+
76+
```registry
77+
%SAInstallDir%SADatabase\Views
78+
```
79+
80+
- All connection profiles:
81+
82+
```registry
83+
%SAInstallDir%SecurityMap
84+
```
85+
86+
- Global Options/Settings:
87+
88+
```registry
89+
%SAInstallDir%GlobalOptions.xml
90+
```
91+
92+
- Connection profiles:
93+
94+
```registry
95+
%SAInstallDir%SPProfiles.xml
96+
```
97+
98+
- RBA configuration:
99+
100+
```registry
101+
%SAInstallDir%rba.conf
102+
```
103+
104+
- Reporting RBA configuration:
105+
106+
```registry
107+
%SAInstallDir%rba-reporting.conf
108+
```
109+
110+
- Published reports configuration:
111+
112+
```registry
113+
%SAInstallDir%Web\WebServer.exe.config
114+
```
115+
116+
- Custom SDD criteria:
117+
118+
```registry
119+
%SAInstallDir%DC\MyPatternsDef.xml
120+
```
121+
122+
- Configured SDD criteria:
123+
124+
```registry
125+
%SAInstallDir%DC\PatternsDef.xml
126+
```
127+
128+
- Customized jobs:
129+
130+
```registry
131+
%SAInstallDir%Jobs
132+
```
133+
134+
- Certificates on the server and the ports they are bound to:
135+
136+
1. Create an `ssl.txt` file in the `NEAUpgrade_%date%` folder.
137+
2. Hold **Shift**, right-click the text file, and select **Copy as path**.
138+
3. In an elevated PowerShell instance, run the following command to save the `netsh` output to the file:
139+
140+
```registry
141+
netsh http show ssl > %ssl.txt_location%
142+
```
143+
144+
Example:
145+
146+
```registry
147+
netsh http show ssl > "C:\Users\agradmin\Desktop\testfolder\ssl.txt"
148+
```
149+
150+
- AIC configuration:
151+
152+
- In AIC v11.5:
153+
154+
```registry
155+
C:\inetpub\wwwroot\StealthAUDIT Compliance\
156+
```
157+
158+
- In AIC v11.6:
159+
160+
```registry
161+
C:\Program Files\STEALTHbits\Access Information Center
162+
```

‎docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md‎

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
---
2+
description: Step-by-step instructions for upgrading Netwrix Access Analyzer, including the Console, Sensitive Data Discovery add-on, and File System Proxy service.
3+
keywords:
4+
- Netwrix Access Analyzer
5+
- Access Analyzer upgrade
6+
- upgrade console
7+
- Sensitive Data Discovery
8+
- SDD add-on
9+
- File System Proxy
10+
- FSAA Proxy
11+
- upgrade wizard
12+
- Netwrix Customer Portal
13+
products:
14+
- access-analyzer
15+
sidebar_label: Upgrading Access Analyzer
16+
title: Upgrading Access Analyzer
17+
knowledge_article_id: ka0Qk000000GInNIAW
18+
---
19+
20+
# Upgrading Access Analyzer
21+
22+
> **NOTE:**
23+
> - Return to the main workflow page: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md)
24+
> - Return to the previous section: [Access Analyzer Upgrade Workflow — Preparations](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-preparations.md)
25+
> - Proceed to the next section: [Access Analyzer Upgrade Workflow — Post-Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md)
26+
27+
## Overview
28+
29+
This article lists the steps to perform the **Access Analyzer** upgrade.
30+
31+
## Upgrading Access Analyzer Console
32+
33+
Follow these steps to upgrade the Access Analyzer Console:
34+
35+
1. Download the latest version of **Netwrix Access Analyzer Management Platform** from the [My Products ⸱ Netwrix 🡥](https://www.netwrix.com/my_products_int.html).
36+
37+
> **IMPORTANT:** Unblock the installer. In **Properties**, select the **Unblock** checkbox and save the changes.
38+
39+
2. Verify no Access Analyzer jobs are running. Check **Task Manager** > **Details**.
40+
3. Uninstall the Access Analyzer Console either via **Control Panel** or **Apps & Features**.
41+
4. Hold **Shift**, right-click the Console installer, and select **Copy as path**. In an elevated Command Prompt, paste the path and run it to start the installation.
42+
5. Complete the installation and launch the Console instance. This should start the upgrade wizard.
43+
44+
> **IMPORTANT:** If the upgrade wizard does not start, run the following commands in PowerShell:
45+
```registry
46+
cd $Env:SAINSTALLDIR
47+
.\StealthAUDIT.EXE /Upgrade
48+
```
49+
50+
6. Review upgrade conflicts. Click **View Conflicts** to review, then select an item in the **Changes** window and click **Undo**.
51+
7. In the **Solution Set Files** tab, click **Advanced**. Verify that the Active Directory solution, File System solution, and any custom solution groups in the job tree are set to **Upgrade in Place**.
52+
8. Proceed with the upgrade wizard to complete setup.
53+
54+
## Upgrading Sensitive Data Discovery
55+
56+
> **IMPORTANT:** If licensed and used in your environment, upgrade the SDD Add-on after upgrading the Access Analyzer Console.
57+
58+
Follow these steps to upgrade the **Sensitive Data Discovery Add-on (SDD):**
59+
60+
1. Download the latest SDD version from the [My Products ⸱ Netwrix 🡥](https://www.netwrix.com/my_products_int.html) and transfer the installer to the Access Analyzer Console server.
61+
62+
> **IMPORTANT:** Unblock the installer. In **Properties**, select the **Un**

‎docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
---
2+
description: Overview of the Netwrix Access Analyzer upgrade workflow with links to preparation, upgrade, post-upgrade, and information center articles.
3+
keywords:
4+
- Netwrix Access Analyzer
5+
- Access Analyzer upgrade
6+
- upgrade workflow
7+
- preparations
8+
- upgrade steps
9+
- post-upgrade
10+
- information center
11+
- Access Analyzer documentation
12+
products:
13+
- access-analyzer
14+
sidebar_label: Access Analyzer Upgrade Workflow Articles
15+
title: Access Analyzer Upgrade Workflow Articles
16+
knowledge_article_id: ka0Qk000000DYiDIAW
17+
---
18+
19+
# Access Analyzer Upgrade Workflow Articles
20+
21+
## Overview
22+
23+
This article outlines the upgrade workflow for **Netwrix Access Analyzer**. Refer to the following articles for detailed steps:
24+
25+
1. [Access Analyzer Upgrade Workflow — Preparations](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-preparations.md)
26+
2. [Access Analyzer Upgrade Workflow — Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md)
27+
3. [Access Analyzer Upgrade Workflow — Post-Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md)
28+
4. [Access Analyzer Upgrade Workflow — Access Information Center](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-aic.md)

0 commit comments

Comments
 (0)