Upgrade order from Siteminder 12.x with Symantec CA Directory 14.x
Article ID: 214191
Updated On:
Products
Issue/Introduction
When planning an upgrade of Siteminder environment as In-place, one might like to know the order of the upgrade of Policy Stores and Policy Servers.
Note that in this scenario it's needed to upgrade the Policy Store software, as the current version is not supported with the new Policy Server version.
Environment
Environment: Policy Server 12.x; Policy Store on CA Directory 14.x.
Resolution
According to documentation, upgrade first the Policy Servers and then the Policy Store data. The Policy Servers can run with old Policy Store data (1).
Verify with the Support Matrix, that the version of the Policy Server is supported with the version of Symantec (CA) Directory (2).
As such, first upgrade the CA Directory and then upgrade Siteminder as In-Place.
(NOTE: We strongly suggest you to test the upgrade plan in lower environment in order to validate it.)
Additional Information
(1)
Upgrade Order for In-place Upgrade
To migrate a deployment with multiple Policy Servers and agents,
remove one of the components from the environment. While the
component is being upgraded, the remaining components continue
to protect resources. Continue removing and upgrading components
until all components are upgraded or operating in mixed-mode
compatibility.
The following figures show a simple r12.5x environment. The
stages detail the order in which existing components are
upgraded. Each figure depicts a single policy store and key
store. However, a deployment can use separate policy and key
stores.
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/upgrading/in-place-upgrade.html
(2)
2.3 Database and Directory Systems
| Data Store System | Version | Policy |
| | | Store |
|---------------------+------------+--------|
| CA Directory Server | 12.x, 14.0 | Yes |
p.4
https://ftpdocs.broadcom.com/WebInterface/phpdocs/7/5262/5262-12-7-platform-support-matrix.pdf
Feedback
