Universal Policy Administrator 3.3.1 Release Notes

June 2023

Universal Policy Administrator includes features for centralized security policy management, orchestration and enforcement solution, which unifies previously disparate policy silos across all enterprise devices and identities, on premise and within the cloud.

We designed this product in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in Micro Focus Forums, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available in HTML and PDF formats. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Universal Policy Administrator Documentation page.

To download this product, go to the Micro Focus Downloads or Customer Center website.

1.0 System Requirements

For detailed information about hardware requirements, supported operating systems and other software requirements, see Universal Policy Administrator 3.3 System Requirements.

2.0 Installing This Version

Universal Policy Administrator 3.3 Service Pack 1, can only be applied to UPA 3.3.

The installation of Universal Policy Administrator, involves multiple components as follows:

  • Universal Policy Administrator 3.3 Service Pack 1, consists of two executable files.

  • To install the service pack on the UPA 3.3 Gatekeeper machine, execute the 'AD Bridge Gatekeeper Service Pack 331.exe' file.

  • After installing the service pack, restart the Gatekeeper IIS site.

  • Similarly, on the Gateway machine, execute the 'AD Bridge Gateway Service Pack 331.exe' file.

For a detailed description about installing these components, see Installing Universal Policy Administrator.

3.0 What’s New?

The following are the key fixes in this release:

  • Resolved an issue where certain list-based settings are not showed and could not be set or exported.

  • Resolved an issue where the import of a GPO with preferences failed because the PDC was not utilized previously.

  • Resolved an issue where the user-supplied alternate credentials for accessing AD in a specific domain were not utilized during certain AD operations that specifically require the PDC.

  • Resolved an issue where the GetGlobalPolicy API and the Get-UniversalPolicy PowerShell cmdlet, which invokes it, failed to function properly when a specific domain was provided as the target.

  • Resolved an issue where duplicate settings could not be resolved individually after merging two Universal Policies and choosing to retain them.

  • Resolved an issue where the domain import operation disrupted the OU hierarchy for domains that include sub-domains, as well as a parent and child domain with one or more OUs sharing the same name.

  • Resolved an issue where delegation views for Repository OUs were not created with the correct view type, resulting in a lack of access for delegation assignments utilizing that view.

  • Resolved an issue where the actions enabled and disabled within the delegation view did not properly reflect the granted rights of OUs when delegation was granted through them.

  • Resolved an issue where delegation assignment changes did not take effect until the gateway was restarted due to improper role cache updation.

  • Resolved an issue where the Enforced and Activate/Enabled flags for the GPO links to OUs were not imported or set in the repository during a domain import operation.

  • Resolved an issue where the job for exporting a Universal Policy to AD would not run if the system hosting the UI had the time zone set to UTC + x, despite the operation appearing to succeed.

4.0 Known Issues

We strive to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

4.1 Universal Policy Export Fails for Users not in the Global Full Administrators Delegation Assignment

Issue: The export process of a Universal Policy fails with the error message “This user is not authorized to perform this operation in HAPI.” when the user is not a member of the Global Full Administrators delegation assignment. (Defect# 722004 and 734016)

Workaround: Export the Universal Policy by using an account that belongs to the Global Full Administrators delegation assignment, and do not select the “Update all links of this Universal Policy” check box.

4.2 AD Domain Import Fails for Users not in the Global Full Administrators Delegation Assignment

Issue: Unable to import AD domain items into UPA, when the user is not a member of the Global Full Administrators delegation assignment.(Defect# 728004)

Workaround: Import the AD domain by using an account that belongs to the Global Full Administrators delegation assignment.