© 2016 IBM Corporation Virtual Appliance migration self-assessment May 2016 IBM Security Identity Manager

2 © 2016 IBM Corporation Purpose/Overview  Use this self-assessment survey to help you decide if you should upgrade your IBM Tivoli Identity Manager (ITIM, now IBM Security Identity Manager – ISIM) to the release 6 software installation or version 7 virtual appliance (“VA”) –Note: v7 and v6 both provide equivalent identity management functionality  After completing this assessment, you may choose to embark either on a v6 upgrade or a v7 migration. We always recommend seeking assistance from IBM Security professional services consultants or experience business partners. However, for the less complex upgrades and migrations, customers with highly proficient staff may prefer to self-deploy. In any case, we strongly urge all customers to contact Technical Support for pointers to latest documentation and technical notes and expert advice.  Before you begin: –This survey assumes you have in-depth technical knowledge of your Identity Manager environment: components used and any customizations implemented. –If you are not deeply familiar with your deployment, we recommend engaging with either IBM Security professional services or a certified business partner, to help you assess your environment –Please read the following technical papers which provide information on SIM v7 deployment constraints: SIM VA customization constraints: SIM v7 VA vs. SIM v6 comparison:

3 © 2016 IBM Corporation General approach/ guidance  What version are you currently running? –SIM v6: you can stay on v6 and apply fixpacks or migrate to v7 for future upgradeability improvement –TIM v5.1: take the survey –TIM v5.0: out of support; automated upgrade to v6 possible, else redeploy “fresh start” to v7 within VA design constraints –TIM v4.6: no supported automated upgrades available to v6 or v7. Strongly consider “refresh start” redeploy within constraints of VA.  What level of Identity Manager expertise does your organization have? –We maintain it ourselves, implement customizations and are very familiar –We can do basic maintenance, but had help with the initial deployment and the development of the customizations –We lost the original staff who were familiar with our deployment and its customizations, and no longer have internal expertise to make significant environment and configuration changes  Unless you have deep current knowledge and expertise, of your environment, its configuration and customizations, we strongly urge you to enlist the help of IBM or partner professional services for an environmental assessment and the upgrade/migration project itself

4 © 2016 IBM Corporation User Interface 1.Does your organization use the TIM v5.x Self-Service Interface (SSUI)? (Yes/No) 2.Does your organization use a custom developed user interface instead of, or in addition to the SSUI? (custom application client) 3.Does your organization support user requests via another application’s UI (for example, a ticketing system or other in-house application) which is integrated (via workflows or APIs) with the Identity Manager server? See slide notes for background on these questions

5 © 2016 IBM Corporation Java, WebSphere, forms customizations and extensions 4.Have you installed a custom J2EE module on the ISIM application server? 5.Have you made direct configuration changes or use any special features in the WebSphere server that hosts ISIM? 6.Have you changed files,other than property files, that are outside the “custom” directory (for example: custom login JSP)? 7.Have you created any additional tables in the SIM Schema? 8.Do you make use of custom subforms, javascript, workflow or policy extensions? 9.Do you use custom password rules implemented via.js extensions? 10.Is your current production environment a single server WAS ND installation? See slide notes for background on these questions

6 © 2016 IBM Corporation Integrations, SSO and Adapters 11.Are you using custom developed adapters? -These need to be hosted on a separate server from the virtual appliance 12.Are you using any TIM 5.1 adapters that may have been discontinued? –(see for list of supported V7 adapters) 13.Are you using SSO with WebSeal (Access Manager) or 3 rd party SSO product? –If ISAM, may need some minor reconfiguration. –If you have configured Identity Manager for SSO with another vendors’ SSO product (e.g. SiteMinder), this will likely require modifications 14. Are you using any customized WAS authentication (e.g. the context of APIs/custom code)? –This works differently under SIM v6 and above than in previous releases and you will probably need to modify this area of your custom code 15.Are you using the pre-GA version of the Identity Manager Web Services APIs? –The GA version (SIM v6 and 7) is somewhat different – you may need to modify your custom application

7 © 2016 IBM Corporation Summary and recommendations Results: If you have:Recommendations High level of expertise about your SIM environment and its history A few basic customizations, all supportable on the Virtual Appliance.. Or wish to “start fresh” with a clean re-implementation You may be able to deploy the SIM v7 virtual appliance with the help of IBM Technical Support. You may need to manually migrate any minimal amount of key data from your previous deployment Some Identity Manager expertise, A deployment that includes some customizations, most of which are directly supported by the VA or can be redesigned fairly easily, Your current deployment may be a good candidate for a v7 migration, but we recommend engaging IBM Security professional services (or business partner experienced with v7 deployments and migrations specifically) to better assess which aspects may need to be reconfigured or reimplemented No deep expertise with SIM and are not familiar with the history of your original deployment A deployment that includes many of the customizations discussed You may experience difficulties migrating to the v7 VA. Please engage IBM Security professional services (or IBM partner experienced with v7 deployments and migrations specifically) to assess your situation and help plan how to reimplement your customizations. Otherwise, consider a v6 upgrade instead. As a next step, we recommend you reach out to your IBM technical account contacts for more info and guidance on how to proceed