Patching appliance gateway command line

Products

• CA API Gateway

Issue/Introduction

The upgrade process (11.0 to 11.1.2) using SSGCONFIG menu is prone for mistakes between the different closely named files,  uploading, then installing all required patches to get to the finish line.

Different environments (prod, QA, test…) multiple groups.  These groups have multiple clusters containing many gateway nodes.  

What other options are available 

 

Environment

Gateway 11.x

Resolution

Docs link for “Patching Using the Command Line”

Shutdown the Gateway from SSGCONFIG menu option 2 -> Option 7 ->STOP

/opt/SecureSpan/PatchManagement/bin/patch.sh <action>

Steps for each patch:

First Patch:

/opt/SecureSpan/PatchManagement/bin/patch.sh upload /home/ssgconfig/Layer7_API_PlatformUpdate_v11.1.00-Debian-17707.L7P

/opt/SecureSpan/PatchManagement/bin/patch.sh INSTALL Layer7_API_PlatformUpdate_v11.1.00-Debian-17707

REBOOT

Second Patch

/opt/SecureSpan/PatchManagement/bin/patch.sh upload /home/ssgconfig/ Layer7_API_Gateway_Debian_v11.1.00-17707.L7P

/opt/SecureSpan/PatchManagement/bin/patch.sh install Layer7_API_Gateway_Debian_v11.1.00-17707

REBOOT

Third Patch

/opt/SecureSpan/PatchManagement/bin/patch.sh upload /home/ssgconfig/Layer7_API_PMS_Debian_v2.0.0-20240715115049.L7P

/opt/SecureSpan/PatchManagement/bin/patch.sh install /home/ssgconfig/Layer7_API_PMS_Debian_v2.0.0-20240715115049

Forth Patch

/opt/SecureSpan/PatchManagement/bin/patch.sh upload /home/ssgconfig/Layer7_API_SSG_Platform_Update_64bit_v1.12.00-1705-11.1.2-Debian.L7P

/opt/SecureSpan/PatchManagement/bin/patch.sh install Layer7_API_SSG_Platform_Update_64bit_v1.12.00-1705-11.1.2-Debian

REBOOT

Fifth Patch

/opt/SecureSpan/PatchManagement/bin/patch.sh upload /home/ssgconfig/Layer7_API_Gateway_Debian_v11.1.2-20324.L7P

/opt/SecureSpan/PatchManagement/bin/patch.sh install Layer7_API_Gateway_Debian_v11.1.2-20324

REBOOT

Update SSG DB from SSGCONFIG menu 

 

Additional Information

When using command patch approach the pms_0_0.log owner changed to root

Before:

/opt/SecureSpan/PatchManagement/var/logs:

-rwxr-xr-x 1 patcher patcher 251606 May 14 13:17 pms_0_0.log

After:

/opt/SecureSpan/PatchManagement/var/logs:

-rw-r--r-- 1 root    root     689503 May 15 06:21 pms_0_0.log

If go back to the SSGCONIFG menu to patch/review permission will get reset back