OpenIAM migration procedure is linked with fact that root encryption algorithm was changed from 3DES to AES.

RPM Installation

PostgreSQL and MySQL

For PostgreSQL and MySQL since v4.1.5.1 one can use a migration util. Util is located in /usr/local/OpenIAM/data/openiam/conf/schema/migration folder. Usage:

where db_type may has values: mysql, postgresql, current_openiam_version may has values: "3.4" - for 3.4.X installations, "3.5" for 3.5,3.6,3.6.1 installations, db_root_password is a password for root user in case of using MySQL, idmuser in case of using PostgreSQL

For example https://drive.google.com/file/d/159IJ2k44drlUbACNro3xexiYJDqIt5eu/view?usp=sharing

Oracle

Use Oracle SQL developer to perform scripts to existed Oracle database. Please run consistently scripts from:

/data/openiam/conf/schema/oracle/4.0

/data/openiam/conf/schema/oracle/4.0.1

/data/openiam/conf/schema/oracle/4.1.0

/data/openiam/conf/schema/oracle/4.1.1

and etc...

After, perform the following script.

UPDATE PROPERTY_FILE_VALUES SET PROPERTY_VALUE = 'DES' WHERE PROPERTY_ID = 'org.openiam.iam.cryptor.algorithm';

Note: Use AES encryption instead of 3DES

After uccessful update of database and running the application you will be able to update your deployment to use AES encryption instead of 3DES that was used in v3.X.

To do that, perform the following steps:

1. Go to webconsole as sysadmin at: http://your_server/webconsole
2. Navigate on top menu to Administration → System Configuration.
3. In System tab find Crypto Algorithm Name and change the value to AES
4. Click save button at the bottom.
5. Stop openiam application (you can stop only openiam-esb module)
6. Login to the redis server with redis-cli command
7. In redis-cli console, if you are using the password, type AUTH <YOUR_REDIS_PASSWORD>
8. Run FLUSHALL command in redis-cli console. It will cleanup all cache and current active users sessions. Don't worry, you will not loose any kind of important information.
9. Run openiam-esb application.
10. Now you are able to use your passwords. AES encryption is applied.