How to upgrade JDK in CA Access Gateway (SPS) and Policy Server

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

 

JDK upgraded from lower versions to higher supported versions for CA Access Gateway (SPS) and Policy Server due to security vulnerabilities.

How to upgrade JDK to the higher supported JDK version without re-installing the components again?

 

Resolution

 

A. Policy Server JDK upgrade, follow the below steps:

1. Stop the Policy Server;
2. Change the SYSTEM environment variable NETE_JRE_ROOT to the new path where the new JDK version is installed, by replacing the old location;
3. Change the SYSTEM environment variable NETE_JAVA_PATH to the new path where the new JDK version is installed, by replacing the old location;
4. Start the Policy Server; (better to reboot the machine to load all system varible fresh)

B. CA Access Gateway (SPS) JDK upgrade, follow the below steps:

1. Stop the CA Access Gateway (SPS);
2. Modify environment variables:
   
   On Windows:
   
   Modify NETE_SPS_JAVA_HOME=<location of new JDK path>, by replacing the old location in the file SmSpsProxyEngine.properties;
   
   On Linux:
   
   Modify SPS_JAVA_HOME=<location of new JDK path>, by replacing the old location in the file ca_sps_env.sh;
   
   
3. Start the CA Access Gateway (SPS);