Upgrading Symantec SiteMinder from 12.8.x to 12.9

Products

• SITEMINDER
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

When planning an upgrade of their SiteMinder environment to version 12.9 and requires clarification on the following:

1. Are there known issues or compatibility concerns between SiteMinder 12.9 and Oracle ODSEE 11g?
2. Is coexistence supported between Policy Server 12.9 and Access Gateway 12.8.08 to allow for separate maintenance windows?
3. Are there restrictions on maintaining Policy Server 12.8.08 instances on different operating systems within the same environment?
4. Can Policy Server 12.8.08 and 12.9 coexist while sharing the same Policy Store, or must the entire environment be upgraded in one window?
5. Are Web Agents 12.52 and 12.8 compatible with Policy Server 12.8.08 and 12.9?
6. Must the Administrative UI (AdminUI or WAMUI) be upgraded in the same window as the Policy Server?

Resolution

1. Oracle ODSEE 11g Compatibility

   
   Oracle ODSEE 11g is not listed in the SiteMinder 12.9 Platform Support Matrix. If a component is not mentioned in the matrix, it means it has not been certified.
   Recommendation: Using an unsupported directory server is at the your own risk. If an issue arises, Support will require an upgrade to a supported version for troubleshooting (1).
   
   

2. Coexistence of Policy Server 12.9 and Access Gateway 12.8.08

   
   Yes, this is supported. SiteMinder Policy Servers are backward compatible with older versions of Access Gateway.
   
   

3. Heterogeneous Operating Systems

   
   There are no restrictions on running Policy Server 12.8.08 instances on different operating systems (e.g., a mix of Windows and Linux) within the same environment, provided each specific OS version is supported in the 12.8.08 Support Matrix.
   
   

4. Policy Store Coexistence and Upgrade Path

   
   Policy Server 12.8.08 and 12.9 can coexist; however, the Policy Store schema should only be upgraded once all Policy Servers have been moved to 12.9.
   
   In-place Upgrade (3)(4)(5)
   
   1. Ensure that you have met the upgrade prerequisites.
   2. Ensure that policy store integrity errors are corrected before migrating.
   3. Upgrade Policy Server to 12.9.
   4. Upgrade the remaining Policy Servers to 12.9.
   5. Upgrade the policy and key stores to 12.9.
   6. Upgrade the Administrative UI to 12.9.
   7. Upgrade Access Gateway
   
   

5. Web Agent Compatibility

   
   Both Web Agent 12.52 and 12.8 are compatible with Policy Server 12.8.08 and 12.9 (2)(6).
   
   

6. Administrative UI (AdminUI or WAMUI) Timing

   
   The Administrative UI must be upgraded after the Policy Servers and the Policy Store data structures have been upgraded to 12.9. Running a 12.8 AdminUI(WAMUI) against a 12.9 Policy Store is not a recommended long-term configuration.
   
   

Additional Information

1. Symantec SiteMinder 12.9
   
   
2. 1.7 Policy Server and Agents Compatibility
   
   
3. In-place Upgrade
   
   
4. Compatibility and Upgrade Path from SiteMinder 12.8 SP8 to 12.9
   
   
5. XPSSweeper integrity checks during Policy Server upgrade 12.8.8 to 12.9
   
   
6. Web Agent Compatibility and Upgrade Path for SiteMinder 12.9