Access Gateway Silent/Unattended Upgrade

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign-On

Issue/Introduction

What is the correct procedure for an Silent/Unattended upgrade of Access Gateway?

Environment

Release : 12.8

OS: RHEL 8

Resolution

The solution below is tested on Linux platform only.

1) Backup current entire Access Gateway installation directory under <Install-Dir>/secure-proxy to a .tar file.

2) When installing AG first time, Access Gateway installation creates a separate registry folder.  The default path is "/opt/etc".

If custom installation path is ~/CA, then "~CA/SiteMinder_Secure_Proxy" is created. Prior upgrade, back up this entire CA folder to a .tar file.

 CA/

   |--- SiteMinder_Secure_Proxy/

   |                                            |--- InstanceCount.properties

   |                                            |--- default/

   |                                            |               |---ca-sps-version.info

3) Ensure ca-sps-version.info has the following similar content (the version needs to match with your old existing Access Gateway).

Product Name=Access Gateway
FullVersion=12.80.0700.2758
Version=12.80
Update=0700
Build Number=2758
Location=<Install-Dir>/secure-proxy
InstanceName=default
ARCH=64

4) Ensure policy server is UP running. Once access gateway is upgraded, it will attempt to start and connect to it.

5) Prepare the Silent/Unattended upgrade properties file, please replace <Install-Dir>  and PORT with your actual value:  

The installer.properties can be obtained by any manual upgrade attempt first.

e.g. 12.8.08-upgrade-ca-sps-installer.properties

################################################################
# General Information.
################################################################
# Specifies the information used for the unattended installation.

AG_REGISTRY=<Install-Dir>/CA
INSTANCE_NAME=default
USER_INSTALL_DIR=<Install-Dir>/CA/secure-proxy
SHUT_DOWN_PORT=8005
AJP_PORT=8009
USER_SHORTCUTS=Do Not Install
CHOSEN_JDK_ROOT=<Install-Dir>/jdk1.8.0_202

###############################################################
#  Tomcat Configuration Information
###############################################################
TOMCAT_HTTP_PORT=
TOMCAT_SSL_PORT=

##################################################################
# APP TIRE TOMCAT HOST AND PORT VALUE
##################################################################
AAP_TIRE_TOMCAT_HOSTNAME=<APP_TIRE_TOMCAT_HOSTNAME>
AAP_TIRE_TOMCAT_PORT=<APP_TIRE_TOMCAT_PORT>

##################################################################
# POLICY SERVER ADMIN USER DETAILS
##################################################################
ADMIN_REG_NAME=<ADMIN_REG_NAME>
ADMIN_REG_PASSWORD=<ADMIN_REG_PASSWORD>

################################################################
# Restart Web Server Option (Windows only)
################################################################
# Set to YES to allow the installation program to reboot the

# Windows machine, if required.

USER_REQUESTED_RESTART=

6) Source Access Gateway environment script:

 .  <Install-Dir>/CA/secure-proxy/ca_sps_env.sh

7) Run silent upgrade command

./ca-proxy-12.8-sp08-linux-x86-64.bin -i silent -f ./12.8.08-upgrade-ca-sps-installer.properties

You can debug this installation by:

export LAX_DEBUG=true

/usr/bin/strace ./ca-proxy-12.8-sp08-linux-x86-64.bin -i silent -f ./12.8.08-upgrade-ca-sps-installer.properties