Product Upgrades

In this section:

Note that when upgrading server and database infrastructure we recommend you upgrade by no more than 2 major versions in each step. Upgrading 3 or 4 versions in one operation is not a method that has been tested and could produce unexpected behavior. For further information please refer to this Community article.

Prepare to Upgrade

Existing User Workspace Manager software packages upgrade automatically during the installation process, including database schemas, agents, and configurations. Prior to an upgrade, it is recommended that you do the following:

  • Back up all databases
  • Save all product configuration packages from the console as MSI files.
  • If necessary, save all earlier versions of the product agent software that you would like to maintain.
  • You must upgrade the Management Server before you upgrade the Deployment Agent. The Management Server must be of the same version number or later than the installed Deployment Agent.
  • Disconnect all users from the Personalization Servers.
  • Take all Personalization Servers offline until the upgrade is complete.
  • Run the whole suite installer to upgrade components.

Upgrade with the User Workspace Manager Installer

  1. Run the Installer by executing the setup.exe file in the installation media.

  2. In the drop-down language selector box click the language required.

    The selection made here will determine the language for all User Workspace Manager components downloaded.
    Note that when installing the product console, users retain the ability to select the language required, refer to Localization settings for further information.

    The Welcome screen displays.

  3. Select Upgrade and click Next.

    The Product Selection screen displays.

    Only the products currently installed display for you to select to upgrade. If you have server products installed, each instance is listed. Select the ones to upgrade.

  4. Select the product components that you want to upgrade and click Next.

    The Summary screen displays listing the products to be upgraded.

  5. Click Next.

    The next step depends on whether all prerequisites are installed:

    • If any prerequisites are missing the Prerequisites screen displays.

      Select InstallAll to install all missing prerequisites. Once all components are installed the upgrade process starts immediately.

    • If there are no missing prerequisites the upgrade process starts.
  6. If there are missing server prerequisites the Server Prerequisites screen displays, select Install All to install all missing components.
  7. On completion the Upgrade Complete screen displays.

  8. Click Finish to exit the Installer and open the Help Portal.

Upgrade Application Control

Process Rules and Websites

Starting with Application Manager 10.0 (Application Control from 10.1 FR1 and later), the Websites tab has been removed from Process Rules. If your configuration has any Web Installations or Elevated Websites rules in any Process Rules, it is recommended they be moved to the Everyone group and deleted from the Process Rule prior to upgrading. This will ensure the configuration, after upgrading, will continue to function in the same way.

URL Redirection and Custom Rules

Custom rules and URL Redirection in Application Manager 10.0 and later (Application Control from 10.1 FR1 and later) differ considerably from versions 8.8 and 8.9. You can upgrade version 8.8 and 8.9 configurations by opening them in a version 10.0 or later console and saving them. This changes the configurations as follows:

  • Custom rules are recreated using the new version 10.n conditions, matching the behavior of the earlier version rules.
  • URL Redirections are converted to Custom rules that contain:
  • Matching conditions for connection types, IP addresses, and port numbers.
    • Browser Control items for the sensitive URLs.
    • If you don't upgrade the configuration, the Application Control Agent version 10.n still reads the configuration, but the URL Redirection and Custom rules are ignored. The rest of the application still applies.

Upgrade Environment Manager

Environment Manager components must be upgraded in the following order:





All Personalization Servers and Databases

All Personalization Servers and Databases must be upgraded together - if you are using SQL replication then see separate best practice guides on upgrading the database and server.


All Consoles

Personalization Server is only compatible with the matching console version, so the consoles will need to be upgraded immediately after the servers. Note that the Policy configuration should not be upgraded until step 4.


All Agents

The Personalization components in the Environment Manager Agent are compatible with all Personalization Server versions.

If you have configurations created with older consoles then you might need to upgrade agents and configurations simultaneously, one group at a time.


Configuration Files

When new agents have been deployed to all endpoints and are working successfully then any legacy policy configurations in use can be upgraded by the latest console and deployed.

Endpoint Configuration Merging

If you are using the Endpoint Configuration Merging function in Environment Manager, all configurations must be of the same Environment Manager product version. Upgrade all configurations before merging. For more information see Configuration Endpoint Merging in the Environment Manager help.

Conversion Rules

  • Personalization Groups that used Global Desktop Settings that were Shared are placed in a GlobalShared Windows Settings Group.
  • Personalization Groups that used Separate Global Desktop Settings are placed in the Windows Settings Groups to match the appropriate operating systems:
    • GlobalXP
    • GlobalVista
    • GlobalWin7
    • GlobalWin8
  • Personalization Groups that used specific shared and separate Desktop Settings are placed in either of the following Windows Settings Groups:
    • [Personalization Group Name]_Shared
    • [Personalization Group Name]_OS
  • Session Data is placed in a SessionData Windows Settings Group.
  • Certificates and Credentials are placed in the Security Windows Settings Group.

These groups are created to ensure backward compatibility during the upgrade process. They are applied to Personalization Groups that are using Desktop Settings when the Environment Manager agent is upgraded to 8.6. It is recommended that they are replaced using the default 8.6 Windows Settings Groups wherever possible.

Upgrade The Logon Trigger

In Environment Manager 8.5, a new Logon trigger structure was introduced replacing the single Logon trigger with three sub-triggers. This increases efficiency and speeds up login times, as Environment Manager actions can be configured to run at their most appropriate point during the user logon process:

  • Pre-Session - Actions take effect before terminal services is notified of the logon. Registry, Group Policy, and Environment actions are compatible with this sub-trigger. During the upgrade, actions that were previously in the Logon Environment tab are moved here.
  • Pre-Desktop - Actions take effect when the user logs on to the system but before the desktop shell has started. During the upgrade, actions that were previously in the Logon trigger are moved here.
  • Desktop Created- Actions take effect after the desktop shell and Explorer has started. To improve efficiency and logon times, any non-critical Logon actions should be added to this trigger, for example, mapping drives and printers.

Upgrade Certificates

The client maintains both the legacy format and the saved certificates and credentials in the same profile. When a new client logs on with an old profile, the client uses the old format to restore the certificates if there is no new-format data, and saves it in the new format. From then on there is no roaming between legacy and new clients.

Personalization Operations Bulk Operations User Selection

The Personalization Operations utility, introduced in Environment Manager 10.n, is a web-based console for managing personalization data. You can create bulk data operations for multiple users that apply to Personalization Groups, Active Directory (AD) groups, or specific users. The Active Directory (AD) group information in the database comes from the endpoints. When a user logs on using a version 10.n endpoint, the endpoint provides a list of the AD groups to which the user belongs. Endpoints running earlier versions of Environment Manager do not provide this information, so in a newly-upgraded system there is no AD group information at all, and selecting users by AD group is not possible. As the endpoints are upgraded to version 10.n and users log on, the database receives AD group information about the users and searching for AD groups works.

Upgrade Configurations

User Workspace Manager product configurations must be upgraded sequentially by major product version.

To upgrade a configuration, open it in the latest product console. The console detects that the configuration was created in an earlier version and prompts you to upgrade. When the configuration is subsequently saved, it is saved as the latest version and it is ready to be deployed using a deployment mechanism.

Environment Manager policy configuration files are upgraded when opened in a combined or policy console. When you open a configuration created in a more recent version of the console, you are asked if you want to upgrade the configuration. Click Yes to upgrade, click No to open the console with an empty configuration.

Save the configuration to complete the upgrade and ensure compatibility with the latest version of the agent, server, and console. Once the configuration has been saved it is ready to be deployed.

Policy configurations cannot be upgraded in the Personalization only console. They can only be upgraded if opened in the policy or combined console.

Caution: Any work in progress configurations are deleted during the upgrade process, so they must be saved before upgrading.

Upgrade Servers

All servers connected to a database must be upgraded at the same time.