Please Confirm/Correct the Steps in this 1P6 (MAS) license to 1P7 (Agile Site) license Upgrade

@The Doctor

I have a small Apple oriented consulting company. 1Password is one of handful of Apps we recommend all our clients use and the ONLY password manager.

First of all, wow, thank you - we're very glad you choose us to recommend. You guys rock. This reply will be a bit long and technical, mostly because It's quite obvious you can handle it but also because it's clear you're looking for this level of detail.

A while back, you guys had decided to move to MAS and said website version was going away so we shifted our clients to MAS.

Maybe someone who's been here longer than I have can chime in and correct me if I'm wrong, but I've been here since late summer 2014 and I do not remember this, ever. What we did do at one point was -- due to changes Apple made to iCloud -- say that iCloud sync was going away from "our" version of 1Password. For a time after the switch from Documents & Data format to the iCloud Drive format, Apple restricted the use of iCloud APIs to apps that had been purchased from the Mac App Store. Overnight, people who had been using "our" version and syncing via iCloud were left with the choice of either re-purchasing from the Mac App Store or switching to Dropbox or WLAN sync.

OK. On to your steps!

Preface: 1Password 7 for Mac will convert Agile Keychains to OPVaults as part of the initial setup. Important - this import will be done from the SQLite file in the user's Library folder on the local disk, NOT the Agile Keychain. If 1Password 7 finds old 1Password 6 data in ~/Library/Conainers... (which is where the sandboxed Mac App Store version of 6.x stored it, it will import that. If it finds data in ~/Library/Application Support/1Password 4... (which is where "our" version of 6.x stored it), it will import that. If it finds BOTH, it will throw a Data Migration dialogue box indicating two sets of data, and offering a suggestion on which one to import based on which was most-recently changed. This is because, if people have switched back-and-forth between our version and the Mac App Store version, whichever one they've been using recently will likely be the most-recently updated. In the process of import, if Dropbox sync using an Agile Keychain is discovered, it will be disabled and should be converted to an OPVault.

Prep All of that ^^ said, if you prefer to switch sync to OPVault from Agile Keychain first (instead of relying on the upgrade process' built-in sync I just described, then yes -- the "Delete Data from Dropbox" option is a checkbox at the bottom on the window when you disable sync. But do those first four steps in reverse order, just to be sure, though: In other words, disable sync (but don't remove the data) on the OTHER devices first, so that the iMac is the only one remaining synced. Then, when you disable sync on the iMac, check the "remove data" box. And yes, re-enabling sync after disabling it on the iMac will write out an OPVault, instead of an Agile Keychain. OPVault is the default keychain that gets written now. You can then re-enable sync on all other devices, using the OPVault(s) you just created on the iMac, and you should be exactly where you described wanting to be at the end of "Prep."

Upgrading - the best way to quit 1Password and the mini is to type ^⌥⌘Q (or just hold down the Control and Option keys as you choose Quit from the 1Password menu). The 1Password 7 installer should detect the presence of any running processes from 1Password 6 for Mac...but to be on the safe side, make sure you quit them yourself, before starting the install. All the rest of your "install" steps look correct. Assuming both iMac and MacBook are using the same iCloud account and both have iCloud Keychain turned on, you're right -- it should license itself automatically. If it doesn't for some reason, the email will contain a link to download the license file. Like this:

The license file is basically a specialized .plist file; it will download into the user's Downloads folder (or wherever they have selected for downloads). Double-clicking on that file in Downloads while 1Password 7 is running will license it -- you'll be able to confirm because it will display a window showing you the license was successfully applied. Everything else looks good!

By the way, if you want to know which of your steps convinced me personally to reply, it was No. 21:

...then raise adult beverage whilst shouting Skol!

Given my ancestry, you had me at "Skol!" 😉 And on a personal note: every 1Password user should have the advantage of an installer as thorough and knowledgeable as you.

@The Doctor

As an additional thank-you, I have attached a ancestry-appropriate image to this comment for your use :)

😍

You mentioned that the SQLite "local" files are stored in ~Library\Containers... for the sandboxed MAS, but where exactly?

Good question. I'm happy to tell you, but I'd urge you not to mess with the contents of these folders; they're really not "user serviceable" as they say in the manufacturing business, and you can do a lot of damage in there inadvertently. OK, lecture over.

• For the Mac App Store - ~/Library/Containers/2BUA8C4S2C.com.agilebits.onepassword-osx-helper/Data/Library/Data/OnePassword.sqlite
• For the AgileBits version - ~/Library/Application Support/1Password 4/Data/OnePassword.sqlite

If you or your clients get into a situation where things have gone so far south that you're considering leveraging the raw SQLite file, every one of such situations is likely to be slightly unique, so it's best to get in contact with us on a case-by-case basis, if necessary. Given the thoroughness of your approach above, I doubt it will be, even once. But yes, this is where the "canonical" data lives, for standalone installs.

Where are the same SQLite files stored once 1P7 is installed?

In ~/Library/Group Containers/2BUA8C4S2C.com.agilebits/Library/Application Support/1Password/Data/

Should, for some reason I cannot understand at present, we need to revert to 1P6.X (MAS), is that still available on the App Store from the purchase tab?

Yes, for anyone who had downloaded 1Password 6 for Mac from the Mac App Store prior to when we replaced it with the current 1Password 7 for Mac.

I left this out of my original steps, but should Steps 22 & 23 be to drag 1P6.X (MAS) to trash on iMac and MacBook respectively? Meaning it is ok to do the initial launch and Sync setup of 1P7 before trashing 1P6.X (MAS). I'd assume so, otherwise why go through the trouble of a unique name, but just wanted to confirm.

Yep.

If Users are nervous and would like to keep both around for a month or so but not use 1P6.X (MAS) would this create a significant risk?

Yes, it will. Definitely do NOT do this, especially with less-tech-savvy users who may be confused on the differences. This can cause all sorts of unexpected behavior. I'd tell them instead that if they don't like it, you can revert them easily to the exact same state they were in with 1Password 6 if they want -- only because you switched to OPVault in 1Password 6 for Mac before upgrading, as soon as you re-install and re-launch the older version, it will update itself with any changes made in 1Password 7, so your customers won't lose any data. :)

@The Doctor

I'm assuming that the installation of 1P7 changes the launch daemon so that if one of our folks inadvertently rebooted while both 1P6 and 1P7 were on the machine, only 1P7 and its associate Mini would load, right?

Not quite. If it's doing its job properly, the 1Password 7 installer should create a zip file of 1Password 6 for Mac. In this way, it's not possible for the OS to inadvertently load components of the older version (because launchd, in particular, will sometimes do that if left to its own devices). Note: if it DOESN'T make a zip file, you don't have to re-do the entire thing, just trash the 1Password 6 app itself. But it should, under normal conditions, and if so, you can drag the zip file to the trash at your leisure.

We will stay away from the canonical data as if they were guarded by a nest of angry hornets. If things get to that point, we'll hit you up on the bat phone.

Sounds like a plan! We're always here to help. Good luck with all your upgrades. :)

@The Doctor: This is definitely an odd situation. Thanks for the additional details! I think it would be best to move this to email so we can get more information if you're still unable to remove the damaged item.

In that case, the best thing to do will be to restart your device, try to edit and remove it, and then generate a diagnostic report so we can look at the logs to determine exactly what is happening:

https://support.1password.com/diagnostics/

Please send it to support@agilebits.com and add the following Support ID (including the square brackets) to the subject of your diagnostics email before sending:

[#MZP-47879-318]

If you’re reading this and you are not The Doctor, this Support ID is for The Doctor only. Please ask us for your own if you also need help.

This will link your diagnostics to our current discussion. Let me know once you've sent it. Once we see it we should be able to better assist you.

Also, enabled the Copy UUID feature in Preferences > Advanced and then use Item > Copy UUID to include that as well, so we can track down any errors specific to that. Thanks in advance!

ref: MZP-47879-318