Upgrade from previous version
Current version is pre 2.0
Even though PhenixID server is fully compliant with previous versions there are differences. Upgrades should not be done without contacting PhenixID.
When contacting PhenixID please add information about current usage of PhenixID server. This will help in assessing the work upgrading the system.
Current version is 2.0 or later
The installer will guide through the update. Be sure to backup the existing installation before starting the upgrade.
As always, verify customizations from earlier version and transfer to new installation if needed.
There has been changes to the "front end files" such as css, js and templates. If you see strange behavior with the web apps or authentication pages, please clear the browser cache.
From version 2.6 there has been a change to the template file used by One Touch.
The server will now look for this file in the folder /resources and the name of the default template file has changed from onetouch_template_json.template to ot_auth_template.json.
If there are One Touch scenarios configured in earlier versions, please go into the Configuration Manager, locate your scenario(s) for One Touch and click on the tab "Advanced".
Edit the name of the template file according to your environment.
If One Touch tokens have been enrolled in version 2.7 and before, you might see this error on startup.
Error: com.orientechnologies.orient.core.exception.OSchemaException: The database contains some schema-less data in the property 'DEVICES.created' that is not compatible with the type DATETIME. Fix those records and change the schema again DB name="phenixid"
Please contact PhenixID support for assistance if this occurs.
Upgrading from an clustered installation
Clustering configuration and recommendation has been updated in a way that previously installed systems using cluster will need additional configuration. Functionality will be maintained.
Please contact PhenixID support for assistance in upgrading (free of charge).
BankID template update
If using Swedish bankid, the template has been updated. Current configuration is found in Authenticators manual.
Module com.phenixidentity~phenix-api-authenticate API has been updated.
The API module MUST include a "http_configuration_ref" reference to a http listener.
Read more here
Authentication API with OneTouch
Module com.phenixidentity~phenix-api-authenticate API calls has been updated.
In order to access any One Touch api endpoint, the uri now must end with a "/", ie /api/authentication/onetouch/assign/
In addition the ending part of the URI must be listed as an allowed operation:
ADFS MFA Adapter
The ADFS MFA Adapter for One Touch has been updated to work against a PAS 3.2 backend.
Download new binaries here.
Follow the instructions for configuring PAS for the PhenixID ADFS MFA adapter for OneTouch.
Unregister and register the PhenixID One Touch MFA Adapter.