search cancel

Upgrade order from Siteminder 12.x with Symantec CA Directory 14.x

book

Article ID: 214191

calendar_today

Updated On:

Products

SITEMINDER

Issue/Introduction

When planning an upgrade of Siteminder environment as In-place, one might like to know the order of the upgrade of Policy Stores and Policy Servers.

Note that in this scenario it's needed to upgrade the Policy Store software, as the current version is not supported with the new Policy Server version.

 

Environment

Environment: Policy Server 12.x; Policy Store on CA Directory 14.x.

 

Resolution

According to documentation, upgrade first the Policy Servers and then the Policy Store data. The Policy Servers can run with old Policy Store data (1).

Verify with the Support Matrix, that the version of the Policy Server is supported with the version of Symantec (CA) Directory (2).
   
As such, first upgrade the CA Directory and then upgrade Siteminder as In-Place.

(NOTE: We strongly suggest you to test the upgrade plan in lower environment in order to validate it.)

 

Additional Information

(1)

    Upgrade Order for In-place Upgrade

      To migrate a deployment with multiple Policy Servers and agents,
      remove one of the components from the environment. While the
      component is being upgraded, the remaining components continue
      to protect resources. Continue removing and upgrading components
      until all components are upgraded or operating in mixed-mode
      compatibility.

      The following figures show a simple r12.5x environment. The
      stages detail the order in which existing components are
      upgraded. Each figure depicts a single policy store and key
      store. However, a deployment can use separate policy and key
      stores.

    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/upgrading/in-place-upgrade.html


(2)

    2.3 Database and Directory Systems

      | Data Store System   | Version    | Policy |
      |                     |            | Store  |
      |---------------------+------------+--------|
      | CA Directory Server | 12.x, 14.0 | Yes    |

      p.4

    https://ftpdocs.broadcom.com/WebInterface/phpdocs/7/5262/5262-12-7-platform-support-matrix.pdf