Upgrading to the latest version of Security Analytics

book

Article ID: 167794

calendar_today

Updated On:

Products

Security Analytics

Issue/Introduction

For the most up-to-date information on upgrading Security Analytics, please view the release notes on the Broadcom documentation site by clicking HERE.  This article explains some of the different methods you can upgrade your Security Analytics appliance.

Resolution

To upgrade your existing appliance to the latest release of Security Analytics, your appliance must meet the following pre-requisites:
 
·       The Appliance is running Solera Version 5.0.2 or greater
·       The Appliance has a current maintenance support contract

 
Here are the supported upgrade paths.  These are the minimum versions you must upgrade to when jumping from major version to major version.  However, if you are are running any version of 6.x, you can upgrade directly to the latest version of 7.x.
 
4.1.x --> 5.0.5 --> 6.1.0 --> 7.1.x 
Please note that there was an encryption key change in the way our .tar files were encrypted between Solera 5.0.1 and 5.0.2.  If you are trying to upgrade a 5.0.0 or a 5.0.1 appliance, you must use the ISO file and upgrade manually  you cannot use the Network Upgrade option or the .tar file option.
    

Network Upgrades (with direct Internet access via the GUI)
 
1.  Login to the DS Appliance with a user that has admin rights.
 
NOTE:  The following upgrade server details should always be there if the appliance was licensed properly via the license server.  Use these details solely for verification.
 
2.  Select Settings | Upgrade | Add Upgrade Server or click New.
3.  Select HTTPS for Protocol.
4.  Enter license.soleranetworks.com for Host (upgrade.soleranetworks.com also works)
5.  Use /upgrades/ for the Path.
6.  Manifest should show Manifest.xml.
7.  Enter the License key for both the username and the password (if you don't have your License Key, please contact Bluecoat support)
8.  Click Save.
9.  On a Solera 5.x appliance, Select the checkbox next to the upgrade server and click Download Upgrade. On a Solera 6.x or Security Analytics 7.x appliance, click the circular green arrow icon under Actions.
10.Select the Available Version and click Download Upgrade.
11.Wait while the ~1 GB file is downloaded to the appliance (downloads are stored in the /ds directory structure).
12.Click the option to Reboot once prompted.
 
From this point you will not be presented with the upgrade status. The upgrade can take anywhere from 10 to 30 minutes. The server will need to reboot twice during the upgrade process.
Once the server responds again, log in and confirm that the new version is being displayed.
 

Network Upgrades (without Internet access via the GUI)
 
NOTE:  Only use this method if you do not have access to the CLI.  If you do have root access to the CLI, please see the section below on how to upgrade via the command line.

If your Appliance does not have Internet access, you need to host the image file (.tar) and the Manifest.xml file on your own web server and point your Appliance to your local web server during the Upgrade process. To download the .tar file and the Manifest.xml file, do the following:

 
1.     Open a browser and browse to https://license.soleranetworks.com/upgrades/
2.     Log in with your username and password (see above)
3.     Download the appropriate Solera OS .tar file and the accompanying Manifest.xml file and host them on your web server.
 
NOTE: Both files must be in the same directory on your web server.
 
4.     Login to the DS Appliance with a user that has admin rights.
5.     Select Settings > Upgrade > Add Upgrade Server or click New.
6.     Select HTTP or HTTPS under Protocol depending on your web server setup.
7.     Enter your web server’s DNS or IP address under Host.
8.     Specify the appropriate path where the .tar and .xml files are located.
9.     If your web server requires authentication, log in with your username and password. Otherwise, leave the credentials blank.
10.  Click Save.
 
Continue with Step 9 above in the “Network Upgrades (with direct Internet access)” section.
 
 
Command Line Upgrades
 
In addition to using the Upgrade page in the GUI, if you have root access, you can perform the upgrade from the command line.  There are two options, encrypted TAR and ISO.
 
To use the encrypted .tar file (preferred), do the following:
 
1.  Using the df -h command, confirm that you have at least 3 GB of free space in the /ds partition.  Delete any old upgrade ISOs or files in the root of the /ds directory.  Also delete ALL files in the /ds/upgrade directory with rm -fr /ds/upgrade/*.
2.  Copy the .tar file to the /home directory on the appliance.
3.  If you have copied the file from a USB attached device, disconnect it physically.

4.  Run the following script: /etc/utils/verify-reboot-upgrade.sh /home/XXXXXXX.tar
5.  After the extraction is complete, reboot the appliance to initiate the automated upgrade.
 
NOTE:  you can only use the .tar method if the appliance is running Solera OS 5.0.2 or greater.  If running Solera OS 5.0.0 or 5.0.1, use the ISO method.
 
To use the .iso file, do the following:
 
1.  Using the df -h command, confirm that you have at least 3 GB of free space for the /ds partition.  Delete any old upgrade ISOs or files in the root of the /ds directory.  Also delete ALL files in the /ds/upgrade directory with rm -fr /ds/upgrade/*.
2.  Copy the .iso file to the /home directory on the appliance.
3.  If you have copied the file from a USB attached device, disconnect it physically.
4.  Run the following script: /etc/utils/solera-upgrade.sh /home/XXXXXXX.iso
5.  After the extraction is complete, reboot the appliance to initiate the automated upgrade.
  
If you have any questions or need further assistance with the upgrade process, please contact Symantec Technical Support.