Considerations when Upgrading to FIM 2010 R2 SSPR

Considerations when Upgrading to FIM 2010 R2 SSPR

The following are considerations that must be taken into account when upgrading to FIM 2010 R2 SSPR. These considerations deal strictly with upgrading. For additional Considerations such as security questions, service accounts see Considerations for a Clean Installation of FIM 2010 R2 SSPR later in this document.

Upgrade Considerations

Always upgrade the FIM Service first before attempting to update the FIM 2010 native clients. The FIM 2010 native client will continue to work with a FIM 2010 R2 service with a little modification to the default QA gate, however the FIM 2010 R2 clients will not work with the FIM 2010 Service.

Upon upgrade to FIM 2010 R2, the new QA gate will by default use the new properties available to it. For a list of these see SSPR Authentication Gates later in this document.

The FIM 2010 native client can register for a QA gate against an R2 server so long as the Allow radio button is selected under Compatibility of the QA Gate. By selecting Allow, the Allow duplicate answers and the Answer Constraint settings will not be enforced on registrations from these older clients. These selections are made in the AuthN workflow in the FIM portal. For an example of the QA gate see QA Gate later in this document.

Warning

Be aware that the FIM 2010 native client will not work with the OTP Email or OTP SMS gates, so if you have configured your workflow with either of these it will not work. The reason is, is that these were introduced with R2 and the FIM 2010 native client does not know about them.