Upgrading IdentityIQ Cloud Gateway

  1. Stop the Apache Tomcat Server.

  2. Take a backup of the lib and lib-connectors (if present) directories present in cloudGatewayInstallationDir/apache/tomcat/7.0.32/webapps/CloudGateway/WEB-INF/ directory.

  3. Take steps to mitigate log4j vulnerability (CVE-2021-44228)

    Note
    This step is applicable only for IdentityIQ Cloud Gateway 8.0 version and later.

    To prevent this vulnerability from being exploited, introduce a JVM system property to the Apache Tomcat server environment that is hosting IdentityIQ Cloud Gateway, set the following property in catalina.sh or catalina.bat on the Cloud Gateway instance:

    set CATALINA_OPTS=%CATALINA_OPTS% -Dlog4j2.formatMsgNoLookups=true

  4. Extract the contents of the identityiq-CloudGateway-releaseVersion.zip file, where releaseVersion is the current version of IdentityIQ Cloud Gateway.

  5. Replace the new lib and lib-connectors directories (extracted and copied from step 2 above) in the following respective directories:

    • (For lib): cloudGatewayInstallationDir/apache/tomcat/7.0.32/webapps/CloudGateway/WEB-INF/lib

    • (For lib-connectors): cloudGatewayInstallationDir/apache/tomcat/7.0.32/webapps/CloudGateway/WEB-INF/lib-connectors

  6. Start the Apache Tomcat Server.

  7. Run IdentityIQ Cloud Gateway Synchronization Task to synchronize all the application objects on upgraded Cloud Gateway.