Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-19542: Steps to prepare URL changes for Centrify Clients 19.4 or below

Privileged Access Service ,  

3 September,19 at 09:52 AM

Applies to: Centrify Agent for Linux and Windows version 19.4 or below

Problem:

The tenant migration of Application and Endpoint services from the Centrify cloud to Idaptive cloud is expected to occur the first of October 2019.  As part of the Idaptive tenant spin-out, the tenant URL for Centrify cloud services will change from centrify.com to centrify.netCentrify Clients 19.5 or higher support transparent tenant split, which no configuration changes, re-enroll or restart is required. However, for older versions it is required to unenroll, re-enroll with the new URL settings or changing the URL setting manually if upgrade to Centrify Clients 19.5 version is not an option.

Resolution:

For continued functionality, clients must follow either of the below actions:
  • unenrolled and re-enrolled (using --force option) with the new tenant URL
  • Client settings must be updated as follows:
Linux:
Update the file /var/centrify/cloud/kset.user and replace the "Cloud" value with the updated URL, followed by restarting the agent. No unenroll/re-enroll needed.   
                     
                         18.11 Client:
                             ---Original-Value "Cloud":"https:// <tenant>.my.centrify.com/"
                             ---New-Value      "Cloud":https:// <tenant>.my.centrify.net/

                          19.4 Client:
                               ---Original-Value "ServiceURI":"https:// <tenant>.my.centrify.com/"
                               ---New-Value      "ServiceURI":https:// <tenant>.my.centrify.net/”
Windows
  1. Edit Registry "HKLM/SOFTWARE/Centrify/Agent/ – ServiceURI" to use <tenant>.my.centrify.net, then perform  
  2. Using powershell/cmd and run
"cagent -operation stop"
"cagent -operation start"

*Note that enrollment of Centrify client by a federated user is not currently supported.  Customers must use enrollment codes or enroll by a user who is not federated.  

    Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.