Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
68 changes: 68 additions & 0 deletions docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-aic.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,68 @@
---
description: Step-by-step instructions for upgrading the Netwrix Access Information Center (AIC), including installation, SSL and SSO configuration, and post-upgrade validation.
keywords:
- Netwrix Access Analyzer
- Access Information Center
- AIC upgrade
- AIC configuration
- SSO
- SSL
- BindingUrl
- AuthAllowWindowsAuthentication
- installation
products:
- access-analyzer
sidebar_label: Upgrading Access Information Center (AIC)
title: Upgrading Access Information Center (AIC)
knowledge_article_id: ka0Qk000000GIqbIAG
---

# Upgrading Access Information Center (AIC)

> **NOTE:**
> - Return to the main workflow page: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md).
> - Return to the previous section: [Access Analyzer Upgrade Workflow — Post-Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md).

## Overview

This article lists the steps to perform the **Access Information Center (AIC)** upgrade.

## Upgrade

Follow these steps:

1. Download the latest version of **Netwrix AIC** from the [My Products ⸱ Netwrix 🡥](https://www.netwrix.com/my_products_int.html).

> **IMPORTANT:** Unblock the installer. In **Properties**, select the **Unblock** checkbox and save the changes.

2. To upgrade the AIC application to a newer version, run the new `AccessInformationCenter.msi` installer. You do not need to uninstall the existing version.
See the [Install the Access Information Center](https://docs.netwrix.com/docs/accessinformationcenter/12_0/installation/install) topic for additional details.

3. Hold **Shift**, right-click the latest AIC installer, and select **Copy as path**. In an elevated Command Prompt, paste the path and run it to start installation.
4. Complete the installation.

## Post-Upgrade

Follow these steps to complete the AIC upgrade:

1. If SSL is implemented, update the `BindingUrl` node of the AIC configuration file to use HTTPS. Example:

```registry
<add key="BindingUrl" value="http://+:82" />
```

- If SSO is implemented, update the `AuthAllowWindowsAuthentication` node of the configuration file. Example:

```registry
<add key="AuthAllowWindowsAuthentication" value="True" />
```

- Default configuration file path:

```registry
C:\Program Files\STEALTHbits\Access Information Center
```

2. Have a user with the correct permissions log in to the AIC to confirm operability.
3. Verify the AIC configuration settings match those saved during the preparation phase.
4. Verify that the built-in admin account for the AIC is either disabled or that the password has been changed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
---
description: Final steps for completing the Netwrix Access Analyzer upgrade, including schema updates, settings verification, and published reports validation.
keywords:
- Netwrix Access Analyzer
- Access Analyzer upgrade
- upgrade completion
- File System auditing
- schema update
- Active Directory Inventory
- published reports
- SQL database
- db_owner
products:
- access-analyzer
sidebar_label: Completing Access Analyzer Upgrade
title: Completing Access Analyzer Upgrade
knowledge_article_id: ka0Qk000000GIozIAG
---

# Completing Access Analyzer Upgrade

> **NOTE:**
> - Return to the main workflow page: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md).
> - Return to the previous section: [Access Analyzer Upgrade Workflow — Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md).
> - Proceed to the next section: [Access Analyzer Upgrade Workflow — Access Information Center](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-aic.md).



## Overview

This article lists the steps to complete the **Access Analyzer** upgrade procedure.

## Instructions

Follow these steps to finalize the Access Analyzer upgrade:

1. After the **Netwrix Upgrade Wizard** finishes, open the **Access Analyzer Console**.
2. Verify the global settings match the initial settings.
3. If licensed for File System auditing, run the **File System\0-CreateSchema** job. This updates the schema for the tables, views, and functions used by the rest of the File System solution.
4. Run the **Active Directory Inventory** group from the **Schedules** node to confirm operability.
5. Verify that the published reports configuration matches the backed-up version. If necessary, migrate the `<AppSettings>` node from the default configuration path:

```registry
%SAInstallDir%Web\WebServer.exe.config
```

6. If you are using Windows authentication to connect to the SQL database, configure the **Netwrix Access Analyzer Web Server** service to log on as a service account with **db_owner** permissions for the Access Analyzer database.
7. Have a user with the appropriate permissions log in to the **Published Reports** site to confirm operability.
Original file line number Diff line number Diff line change
@@ -0,0 +1,162 @@
---
description: Preparation steps for upgrading Netwrix Access Analyzer, including considerations, reference screenshots, and required file backups.
keywords:
- Netwrix Access Analyzer
- Access Analyzer upgrade
- upgrade preparation
- upgrade considerations
- Azure jobs
- Entra ID
- proxy service
- file backups
- Access Information Center
- SharePoint agent
products:
- access-analyzer
sidebar_label: Preparing for Access Analyzer Upgrade
title: Preparing for Access Analyzer Upgrade
knowledge_article_id: ka0Qk000000GIllIAG
---

# Preparing for Access Analyzer Upgrade

> **NOTE:** Return to the main workflow page here: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md).
> Proceed to the next section: [Access Analyzer Upgrade Workflow — Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md).

## Overview

This article lists the steps to prepare for the **Access Analyzer** upgrade procedure.

## Upgrade Considerations

Refer to the following points to learn more about the upgrade scope:

- The **Access Information Center (AIC)** should be upgraded along with Access Analyzer.
- If you run SharePoint on-premises scans, update the **SharePoint agent** on the SharePoint server.
- When upgrading from v11.5 to v11.6, re-schedule all Azure jobs due to the **Entra ID** rebranding.
- When upgrading from v11.5 to v11.6, manually upgrade each proxy service instead of running the **FS_UpdateProxy** job.

## Reference Screenshots

Take the following reference screenshots before the upgrade:

- Installed programs (**Programs and Features**) via Control Panel:

```registry
appwiz.cpl
```

- **License** (**Help** > **About**)
- Each of the global **Settings** subnodes
- The **Schedules** node

> **IMPORTANT:** When upgrading from Access Analyzer v11.5 to v11.6 or later, pay attention to any Azure-related tasks. Recreate these tasks under the new Entra ID naming after the upgrade.

- The job tree structure with the contents of each module
- Query settings of the **Active Directory Inventory** > **1-AD_Scan** job, including the **Options** page and the **Custom Attributes** page
- Upload the **Active Directory Inventory** > **1-AD_Scan** > **Active Directory Summary** report to Salesforce (**Customer Account** > **Related** > **Notes & Attachments**)

> **IMPORTANT:** Upload the screenshot to Salesforce — **Customer Account** > **Related** > **Notes & Attachments**.

- Every page of the FSAA, FSAC, SEEK, SPAC, SPAA/SPSEEK scans query settings
- Every page of the AIC settings

## File Backups

Create a separate folder named `NEAUpgrade_%date%` to store backup files. Back up the following items:

- Access Analyzer license file:

```registry
%SAInstallDir%StealthAUDIT.lic
```

- Host list definitions:

```registry
%SAInstallDir%SADatabase\Views
```

- All connection profiles:

```registry
%SAInstallDir%SecurityMap
```

- Global Options/Settings:

```registry
%SAInstallDir%GlobalOptions.xml
```

- Connection profiles:

```registry
%SAInstallDir%SPProfiles.xml
```

- RBA configuration:

```registry
%SAInstallDir%rba.conf
```

- Reporting RBA configuration:

```registry
%SAInstallDir%rba-reporting.conf
```

- Published reports configuration:

```registry
%SAInstallDir%Web\WebServer.exe.config
```

- Custom SDD criteria:

```registry
%SAInstallDir%DC\MyPatternsDef.xml
```

- Configured SDD criteria:

```registry
%SAInstallDir%DC\PatternsDef.xml
```

- Customized jobs:

```registry
%SAInstallDir%Jobs
```

- Certificates on the server and the ports they are bound to:

1. Create an `ssl.txt` file in the `NEAUpgrade_%date%` folder.
2. Hold **Shift**, right-click the text file, and select **Copy as path**.
3. In an elevated PowerShell instance, run the following command to save the `netsh` output to the file:

```registry
netsh http show ssl > %ssl.txt_location%
```

Example:

```registry
netsh http show ssl > "C:\Users\agradmin\Desktop\testfolder\ssl.txt"
```

- AIC configuration:

- In AIC v11.5:

```registry
C:\inetpub\wwwroot\StealthAUDIT Compliance\
```

- In AIC v11.6:

```registry
C:\Program Files\STEALTHbits\Access Information Center
```
Original file line number Diff line number Diff line change
@@ -0,0 +1,62 @@
---
description: Step-by-step instructions for upgrading Netwrix Access Analyzer, including the Console, Sensitive Data Discovery add-on, and File System Proxy service.
keywords:
- Netwrix Access Analyzer
- Access Analyzer upgrade
- upgrade console
- Sensitive Data Discovery
- SDD add-on
- File System Proxy
- FSAA Proxy
- upgrade wizard
- Netwrix Customer Portal
products:
- access-analyzer
sidebar_label: Upgrading Access Analyzer
title: Upgrading Access Analyzer
knowledge_article_id: ka0Qk000000GInNIAW
---

# Upgrading Access Analyzer

> **NOTE:**
> - Return to the main workflow page: [Access Analyzer Upgrade Workflow](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md)
> - Return to the previous section: [Access Analyzer Upgrade Workflow — Preparations](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-preparations.md)
> - Proceed to the next section: [Access Analyzer Upgrade Workflow — Post-Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md)

## Overview

This article lists the steps to perform the **Access Analyzer** upgrade.

## Upgrading Access Analyzer Console

Follow these steps to upgrade the Access Analyzer Console:

1. Download the latest version of **Netwrix Access Analyzer Management Platform** from the [My Products ⸱ Netwrix 🡥](https://www.netwrix.com/my_products_int.html).

> **IMPORTANT:** Unblock the installer. In **Properties**, select the **Unblock** checkbox and save the changes.

2. Verify no Access Analyzer jobs are running. Check **Task Manager** > **Details**.
3. Uninstall the Access Analyzer Console either via **Control Panel** or **Apps & Features**.
4. Hold **Shift**, right-click the Console installer, and select **Copy as path**. In an elevated Command Prompt, paste the path and run it to start the installation.
5. Complete the installation and launch the Console instance. This should start the upgrade wizard.

> **IMPORTANT:** If the upgrade wizard does not start, run the following commands in PowerShell:
```registry
cd $Env:SAINSTALLDIR
.\StealthAUDIT.EXE /Upgrade
```

6. Review upgrade conflicts. Click **View Conflicts** to review, then select an item in the **Changes** window and click **Undo**.
7. In the **Solution Set Files** tab, click **Advanced**. Verify that the Active Directory solution, File System solution, and any custom solution groups in the job tree are set to **Upgrade in Place**.
8. Proceed with the upgrade wizard to complete setup.

## Upgrading Sensitive Data Discovery

> **IMPORTANT:** If licensed and used in your environment, upgrade the SDD Add-on after upgrading the Access Analyzer Console.

Follow these steps to upgrade the **Sensitive Data Discovery Add-on (SDD):**

1. Download the latest SDD version from the [My Products ⸱ Netwrix 🡥](https://www.netwrix.com/my_products_int.html) and transfer the installer to the Access Analyzer Console server.

> **IMPORTANT:** Unblock the installer. In **Properties**, select the **Un**
28 changes: 28 additions & 0 deletions docs/kb/accessanalyzer/access-analyzer-upgrade-workflow.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
description: Overview of the Netwrix Access Analyzer upgrade workflow with links to preparation, upgrade, post-upgrade, and information center articles.
keywords:
- Netwrix Access Analyzer
- Access Analyzer upgrade
- upgrade workflow
- preparations
- upgrade steps
- post-upgrade
- information center
- Access Analyzer documentation
products:
- access-analyzer
sidebar_label: Access Analyzer Upgrade Workflow Articles
title: Access Analyzer Upgrade Workflow Articles
knowledge_article_id: ka0Qk000000DYiDIAW
---

# Access Analyzer Upgrade Workflow Articles

## Overview

This article outlines the upgrade workflow for **Netwrix Access Analyzer**. Refer to the following articles for detailed steps:

1. [Access Analyzer Upgrade Workflow — Preparations](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-preparations.md)
2. [Access Analyzer Upgrade Workflow — Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-upgrade.md)
3. [Access Analyzer Upgrade Workflow — Post-Upgrade](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-post-upgrade.md)
4. [Access Analyzer Upgrade Workflow — Access Information Center](/docs/kb/accessanalyzer/access-analyzer-upgrade-workflow-aic.md)