IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  IVG 11 in Oracle Linux

    Posted 02/12/25 06:57 AM

    Hi all,

    I have a client that has their servers in Oracle Cloud. They are looking to implement ISVG in their environment. I see that ISVG 11 comes in three modules.
    One of them is the IVIG Software Stack which is the ISIM or ISVG Identity Manager that we know and the other is the IVIG Container which is the ISVG Compliance although now there is also an option called IVIG Role Optimizer.
    I am interested in the IVIG Software Stack, the problem is that it is only compatible with RHEL. One option that I was considering is to install the containerized version of ISVG IM but I see that it is not included in this version 11 and I also see that DB2 does not support Oracle Linux.
    I wanted to know if you have experience with this, since Oracle Linux is based on RHEL, if anyone has already installed it on Oracle Linux.



    ------------------------------
    Roberto Cristaldo
    ------------------------------


  • 2.  RE: IVG 11 in Oracle Linux

    Posted 02/12/25 10:21 AM

    Let me clarify a couple of things...

    IVIG 11 is the first version of consolidated IGA - basically that ISVG IM + the first release of some of the Governance functionality that was previously only available in IGI (ARC risk module, Recertification Campaigns and Role Composition as the most interesting ones)

    That means that it is the next version of ISVG IM and ISIM. It is currently available as SW and Containers. The biggest change is the move to WAS Liberty from WAS classic - but the SW and Container versions are basically the same system - VA will come later this year....

    This means that IVIG 11 container version includes what was previously known as ISIM/ISVG IM and you can upgrade from these to IVIG 11.

    HTH 



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------



  • 3.  RE: IVG 11 in Oracle Linux

    Posted 02/12/25 10:28 AM

    And just to make it clear - the SW version supports the following OPSYS (IBM Verify Identity Governance v11.0.0 Installer for Software Stack on Liberty (M0P5BML)<ibm-tooltip-icon _ngcontent-vrs-c230="" placement="bottom" alignment="center" class="bx--tooltip-icon"></ibm-tooltip-icon>) : 

     AIX 7.3, Red Hat Entrprs Linx RHEL Base Srvr, SUSE Linux Enterprise Server (SLES), Windows Server 2022 



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------



  • 4.  RE: IVG 11 in Oracle Linux

    Posted 02/17/25 10:59 AM

    Hi, If your customer plan on installing the Software Version on Oracle Linux, it is not supported. Oracle Linux is based on Red Hat linux, but is not officially listed as a supported OS. Here is the link to
    Verify Identity Governance supported configuration. Hence Container Version is the next choice. All Kubernetes version are are supported. As long you can install Kubernetes flavors such asa Red Hat Open Shift, Kubernetes for Oracle (container Services), as well as Helm on Oracle Linux, you should be good. MicroK8s is another flavor (considered to be Enterprise Grade) of Kubernetes that we have used to install IVIG Container version on RedHat, Ubuntu (not listed) or CentOS (not listed). 





    ------------------------------
    Abraham Panicker
    IAM Solution Engineer
    IBM
    IL
    6306606970
    ------------------------------



  • 5.  RE: IVG 11 in Oracle Linux

    Posted 02/28/25 07:43 AM
    Thanks Abraham, the problem is that there are functional differences between IVIG Software Stack and IVIG Container. Software Stack contain the functionalities of the ISVG Identity Manager and IVIG Container ISVG Compliance. 

    Another problem is the installation of the base software , like db2 and ldap and SDI, that software need to be installed in oracle linux too.
    image.png

    --
    Roberto Cristaldo
    Consultor Informatico RMI S.R.L



    Original Message


  • 6.  RE: IVG 11 in Oracle Linux

    Posted 02/28/25 08:30 AM

    There should be no functional difference between container and SW - that I believe is a misconception .

    Of course you can do something with SW version easier than for the container version - but that is something that is normally outside the supported area such as place files in unsupported areas e.g. under ITIM_EAR 

    But beside that there is no difference - and all the supporting programs (MQ, Database, Ldap Server) is coming default in the container though the database is PostgreSQL and not Db2

    HTH



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------

    Original Message


  • 7.  RE: IVG 11 in Oracle Linux

    Posted 02/28/25 11:37 AM
    Thanks Franz, but in the documentation I found many differences. For example, you can compare the administration section of the documentation 

    In  stack- adminstering you can see what we are used to seeing in the ISIM(ISVG Identity Manager).
    In container-adminsitering you can see others option (similar to ISVG Compliance)




    Original Message


  • 8.  RE: IVG 11 in Oracle Linux

    Posted 03/01/25 06:48 AM

    I believe this is due to missing updates of the documentation - I will let out documentation teak know.

    The only difference between IVIG 11 SW and CNT is the limitation that is imposed by the deployment - i.e. SW you can do as many silly and unsupported things as you full access - the CNT deployment restricts that somewhat so that only the supported file locations is exposed through the delivered tooling in the starter kit :-) 

    HTH



    ------------------------------
    Franz Wolfhagen
    WW IAM Solution Architect - Certified Consulting IT Specialist
    IBM Expert Labs
    ------------------------------

    Original Message


  • 9.  RE: IVG 11 in Oracle Linux

    Posted 03/04/25 08:12 AM
    Hi Franz, thanks for your answer. I will make a test with Container version.
    I alway prefered to install SW version exactly because of what you said.
    Thanks!





    Original Message


Related Content