Upgrading Password Reset Server without outbound access


Password Reset Server periodically polls our update server to detect for updates. However, if your Password Reset Server is on an internal network that does not have outbound access or goes through a proxy, Password Reset Server will not be able to perform updates.

As of 2.1.00000, the recommended method is the using 'Advanced options' to manually select and upload the upgrade file.

File Upload Steps:

    Go to the http://your password reset server/Installer.aspx page, and click Next up to step 2. Download Updates
    Click the Advanced (not required) to expand the file upload options
    Download the latest Version zip from the Get Latest Version link (for example Version_2_2_00000.zip)
    In the Upload File dialog select the zip file that was downloaded above, and click Upload File
    Complete the Installer steps

Note: You should not use the fresh install PasswordResetServer.zip that is first downloaded from thycotic.com, only the Get Latest Version link should be used as there is a difference between the upgrade file and fresh install zip.

The work around is to modify your HOSTS file to have your own server act as our update server. 

  1. If you have replaced your update.config file in the past or previously failed an upgrade, replace the update.config file in your Password Reset Server directory with the default file. To do this, you can download Password Reset Server from http://updates.thycotic.net/PasswordResetServer/PasswordResetServer.zip. Then, extract the zip file to a directory, copy the update.config file in the extracted directory, and paste it to your working Password Reset Server directory.
  2. Download our update zip from the internet from another machine. You can check what the latest version is by going to http://updates.thycotic.net/passwordresetserver/latestversion.aspx . After checking the latest version number you will have to create a link that uses this version number. The URL should be http://updates.thycotic.net/passwordresetserver/Version  followed by an underscore, then by the version number after replacing the "."s with "_" (underscores), and then .zip. For example, version 1.1.000005 would be:   http://updates.thycotic.net/passwordresetserver/Version_1_1_000005.zip
  3. On your server where Password Reset Server is installed, find the Default Web Site. This should be the web site that is accessible by going to http://localhost on your server. Under this web site, create a virtual directory called “passwordresetserver” and place the update zip file in it. 
  4. In the same folder, create a empty text document called LatestVersion.aspx and inside of it, place the version number that you retrieved from : http://updates.thycotic.net/passwordresetserver/latestversion.aspx  in our example:  1.1.000005.
  5. Make sure the “passwordresetserver” virtual directory is configured to run ASP.NET 2.XX and has execute permission in IIS.
  6. Modify the HOSTS file  of the server Password Reset Server is installed on (usually located in C:\WINDOWS\SYSTEM32\drivers\etc) and add the following entry at the bottom:

    127.0.0.1              updates.thycotic.net

    Replace 127.0.0.1 with the IP of where the virtual directory is located.

    Browse to
    http://updates.thycotic.net/passwordresetserver/latestversion.aspx and ensure it is working properly. Make sure it is hitting the correct machine.
  7. Run the Password Reset Server upgrader as you normally would.   You may have to do an IIS Reset to see the link appear above the header navigation bar.

Please contact support if you have any issues.

Article ID: 122, Created On: 10/19/2010, Modified: 4/9/2012