Upgrading to the latest version of Security Analytics

Products

Security Analytics Security Analytics - VA

Issue/Introduction

For the most up-to-date information on upgrading Security Analytics, please view the release notes on the Broadcom documentation site by clicking Security Analytics 8.3.1 Documentation. Click the appropriate version in the dropdown depending on which version you are trying to upgrade to. This article explains some of the different methods you can use to upgrade your Security Analytics appliance.

Resolution

Depending on what version you are running will determine your upgrade path. A supported upgrade path is critical to a successful upgrade. The release notes for each version are available on the Broadcom documentation site. Refer to the release notes for the latest supported upgrade paths.

You may need to manually download either the ISO file or the .tar file for the various upgrade methods below. You can download the ISO or .tar by going to https://support.broadcom.com and logging in with your customer credentials and then locating Security Analytics under "My Downloads" and following the links to download the appropriate files version. If you need an older version that is not longer available, you may contact technical support for assistance.

Network Upgrades (with direct Internet access via the GUI)

Login to the Security Analytics Appliance with a user that has admin rights.

NOTE: The following upgrade server details should always be there if the appliance was licensed properly via the license server. If you do not see an upgrade server entry listed, contact technical support for licensing assistance..
Click the circular green arrow icon under Actions.
Select the Available Version and click Download Upgrade.
Wait while the ~2 GB file is downloaded to the appliance (downloads are stored in the /ds directory structure).
Click the option to Reboot once prompted.

From this point you will not be presented with the upgrade status. The upgrade can take anywhere from 30-120 minutes. The server will need to reboot twice during the upgrade process. Once the server responds again, log in and confirm that the new version is being displayed.

Command Line Upgrades

In addition to using the Upgrade page in the GUI, if you have root access, you can perform the upgrade from the command line. There are two options, encrypted tar, and ISO.

To use the encrypted .tar file (preferred), do the following:

Using the df -h command, confirm that you have at least 3 GB of free space in the /ds partition.
Delete any old upgrade ISOs or files in the root of the /ds directory.
Delete ALL files in the /ds/upgrade directory with rm -fr /ds/upgrade/*
Copy the .tar file to the /home directory on the appliance.
If you have copied the file from a USB-attached device, disconnect it physically.
Run the following script: /etc/utils/verify-reboot-upgrade.sh /home/XXXXXXX.tar
After the extraction is complete, reboot the appliance to initiate the automated upgrade.

To use the .iso file, do the following:

Using the df -h command, confirm that you have at least 3 GB of free space for the /ds partition.
Delete any old upgrade ISOs or files in the root of the /ds directory.
Delete ALL files in the /ds/upgrade directory with rm -fr /ds/upgrade/*
Copy the .iso file to the /home directory on the appliance.
If you have copied the file from a USB-attached device, disconnect it physically.
Run the following script: /etc/utils/solera-upgrade.sh /home/XXXXXXX.iso
After the extraction is complete, reboot the appliance to initiate the automated upgrade.

If you have any questions or need further assistance with the upgrade process, contact technical support.

Additional Information

If the Password field is left blank in configuring the upgrade server, there may be an error of:

Cannot connect to the upgrade server. Please check the hostname and path, and verify internet connectivity to Symantec upgrade server.

The requested URL returned error: 401

If you cannot contact the upgrade server directly from the SA appliance, make sure that *soleranetworks.com is an allowed domain in your firewall.