Running the Ignition Gateway service under a group Managed Service Account (gMSA), a supported configuration per the user manual for cases like SQL Server access via gMSA. When attempting to upgrade to 8.3.x with the service configured this way, the installer fails. I experienced this twice, and then have used a workaround. I did not experience this issue with 8.1.x.
The gMSA has Administrator rights.
What happens:
- Gateway service is running normally under the gMSA.
- Run the 8.3 upgrade installer.
- Installer fails late in the process.
- Attempting to roll back to the previous version via installer also fails, and it leaves the Gateway in a broken state (major fubar) requiring messy manual repair/install or server restore.
Workaround: Switch the service to run as Local System before upgrading, complete the install, then switch the service back to the gMSA afterward. This avoids the install failure, but if you've worked with gMSA in secure environments, you know this is not a simple workaround.
Has anyone else hit this or know of a better workaround? I contacted IA support in April, and the initial feedback was this is not a known issue, opened a ticket and never heard back, when I logged in to IA, I see the ticket closed with no resolution...