Micro Focus Universal Policy Administrator 3.0 Release Notes

October 2020

Universal Policy Administrator includes features for centralized security policy management, orchestration and enforcement solution, which unifies previously disparate policy silos across all enterprise devices and identities, on premise and within the cloud.

We designed this product in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in Micro Focus Forums, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available in HTML and PDF formats. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Universal Policy Administrator Documentation page.

To download this product, go to the Micro Focus Downloads or Customer Center website.

About Universal Policy Administrator

Universal Policy Administrator provides you with a market-first centralized security policy management, orchestration and enforcement solution, which unifies previously disparate policy silos. This results in consistent and uniform policies across all enterprise devices and identities, on premise and within the cloud. This also simplifies configuration and security for users and devices, and delivers an automated, centralized, and consistent policy management solution with automated enforcement, that covers a variety of endpoints: Windows, Mac and Linux with this release and more in future.

Product Feature List

Universal Policy Administrator features include the following:

  • Policy Consolidation

    • Unifies disparate policy silos to include Windows GPOs, Linux and Mac

    • Simplifies and transforms security policies into readable and translatable language

    • Consolidates multiple segmented and fragmented policy consoles into single pane of glass for On Premises and Cloud segments

    • Singular delegated Web Console for managing security policies across multiple policy silos

    • Offline Policy Repository for safe and effective policy management, when you create and test security policies

  • Ease the Compliance Burden

    • Extensive Conflict Analysis reports to alleviate and remove the complicated task to determine policies that conflict with one another

    • Robust policy management audit to provide auditors with a single pane of glass for detailed audit logs and data

  • Leverage and Extend Existing Policy Investments

    • Allows policy administrators to manage their respective devices without having to hand over control to other administrators

    • Extensive out-of-the-box reports for RSOP and conflict analysis to alleviate complexities of determining policy order

    • Centralize and simplify policy management across multiple domain, cloud-based VMs and various workstations

System Requirements

For detailed information about hardware requirements, supported operating systems and other software requirements, see Universal Policy Administrator 3.0 System Requirements.

Installing This Version

The Universal Policy Administrator installation involves multiple component. For a detailed description about installing these components, see Installing Universal Policy Administrator.

Known Issues

We strive to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

Samba ID Mapping Does Not Recognize AD Group Assignments

Issue: Samba ID mapping does not recognize AD Group assignments and complicates NIX device management.(Defect# 280460)

Workaround: Enter Winbind to translate AD Groups from SSSD to Samba ID mapping and to manage appropriate configurations.

Uninstalling Windows Agent Does Not Remove Agent Computer From the Web Console

Issue: When you uninstall the Windows Agent, it does not remove the agent computer from the Web Console page.(Defect# 226795)

Workaround: Remove the Windows Agent from the Web Console or manually delete the agent from the Computer and then the BaseUrl tables.

Uninstalling Windows Agent Does Not Remove Computer Object From Active Directory

Issue: When you uninstall the Windows Agent, it does not remove the computer object from Active Directory.(Defect# 261049)

Workaround: Remove the associated computer object manually from Active Directory Users and Computers (ADUC) in Active Directory.

Installing Windows Agent Fails on Windows Server 2012 R2 and 2016

Issue: Installation of Windows Agent fails on Windows Server 2012 R2 and 2016, if Internet Explorer Enhanced Security Configuration is enabled and .Net Framework 4.7.2 is not installed (Defect# 278135)

Workaround: Disable Internet Explorer Enhanced Security Configuration or install .Net Framework 4.7.2 manually.

Uninstalling Universal Policy Administrator On Premises Gateway Removes All Configured Universal Policies

Issue: When you uninstall the Universal Policy Administrator On Premises Gateway, it also removes all configured Universal Policies.(Defect# 177761)

Workaround: Before you uninstall the Universal Policy Administrator Gateway, copy the C:\ProgramData\MicroFocus\AD Bridge\CCM folder to backup, and replace in the same location upon reinstallation of the Universal Policy Administrator Gateway.

Web Console Allows Creation of WMI Filters With Invalid Queries

Issue: Universal Policy Administrator Web Console allows creation of WMI filters with invalid queries.(Defect# 257101)

Workaround: The Universal Policy Administrator Web Console is more restrictive than a real WMI Filter query and only supports such queries at the operating system level. Recreate an appropriate WMI Filter query.

Unable To Rollback Universal Policy From Web Console Organization View

Issue: Unable to rollback a Universal Policy version, from the organization tab and details blade of the web console, and submit for approval.(Defect# 257009)

Workaround: Rollback to the required version of the Universal Policy from the Universal Policies tab of the Web Console.

Web Console Displays Duplicate Device Records

Issue: The Devices tab of the Web Console displays duplicate device records. (Defect# 256024)

Workaround: Scroll through the list of devices in the user interface to refresh and cause duplicate records to disappear.

Unable To Configure a New Universal Policy In the Editor

Issue: Unable to configure a new Universal Policy in the editor if an already configured Universal Policy is expanded to details on the policy blade.(Defect# 276166)

Workaround: Collapse the policy blade, launch the editor and configure the new Universal Policy.

Links From A Previous Installation Not Removed When Universal Policy Itself Is Removed

Issue: Universal Policy OU links from a previous installation of the Universal Policy Administrator On Premises Gateway, are not removed even if the Universal Policy itself is removed. (Defect# 273082)

Workaround: Select the OU with old links, click Include Universal Policies, select one or more Universal Policies from the available list, click Link and Save. Remove OU link records with a previously removed Universal Policy from the Azure database to completely wipe such records.

Unable To Remove Domain After Import and Creation Of Domain Node

Issue: Unable to remove a domain after it is imported and a domain node is created. (Defect# 282270)

Workaround: Delete the Azure database and reinstall the Universal Policy Administrator Cloud Gateway to recreate the Azure database and start afresh.

Resolving More Than One Universal Policy Conflict Manually Fails

Issue: Resolving conflicts manually fails when there are more than one conflict in a merged Universal Policy. (Defect# 285165)

Workaround: Select an authoritative Universal Policy to choose settings from instead of manual conflict resolution, when you merge two Universal Policies with more than one conflict.

NOTE:You can modify settings as required after you save the merged Universal Policy.