Upgrade Gateway 11.1.1 Debian 12 to Gateway 11.2 Debian 13

Products

• CA API Gateway

Issue/Introduction

In place upgrade  Gateway 11.1.1 Monthly platform patch (MPP Aug 2025)

OTK 4.6.3

Portal 5.3.1    

Looking to use the new oneClickUpgrade script

 

Environment

Gateway 11.1.1 Portal 5.3.1.1

Resolution

For Gateway enrolled with Portal prerequisite link:  Cross-APIM Product Compatibility Considerations for Gateway Version 11.2

1. Deploy/Update Rate & Quota Policy Template 2.0.8 (Portal Menu bar Manage Gateway Bundle) - Rate and Quota Policy Template-2.0.8 bundle.tar.gz
2. Upgrade to OTK 4.6.4 (or apply supported workarounds) if using earlier version OTK_Installers_4.6.4-8469.zip
3. Manually Patch Portal Deployer Assertion on GW:  PortalDeployerAssertion-1.0.24.saar
4. Upgrade GW to 11.2

NB: Failure to deploy RQ Bundle WILL result in service disruption

Docs Link: Upgrade an Appliance Gateway 

Docs Link OneClickUpgrade:  Gateway Upgrade Enhancement (In-Place)

Steps after prereq:

Uploaded files to gateway folder: /home/ssgconfig:

Layer7_API_Gateway_Debian_v11.2.0-22643.L7P

Layer7_API_PMS_Debian_v3.0.0-20251112151340.L7P

Layer7_API_PlatformUpdate_v11.2.0-Debian-22643.L7P

oneClickUpgrade.sh

ssg-inplace-upgrade-readiness-checker_v11.2.0.22643.sh

Readiness Check

#/home/ssgconfig/oneClickUpgrade.sh --readiness-check /home/ssgconfig/ssg-inplace-upgrade-readiness-checker_v11.2.0.22643.sh

log output to /var/log  - i.e ssg-inplace-upgrade-readiness-checker_v11.2.0.22643_2025-12-05_06-37-06.log

Gateway upgrade 11.1.1 to 11.2 

Readiness check for 11.2  failure on PMS 2.0.  Since this is uploaded and included in the oneClickUpgrade script it can be ignored 

Message to be ignored:

System Check: Validating Patch Management service..

System Check: Older Patch Management service detected: version 2.0.0

System Check: Patch Management service validation - FAIL

Mitigation

The version 11.2 upgrade requires Patch Management service 3.0.0 or newer.

Please install PMS 3.0.0 before applying any 11.2 patch.

This updated PMS version ensures stronger signing algorithms to help prevent supply chain attacks

Test with With DB - check for errors 

# /home/ssgconfig/oneClickUpgrade.sh --test <db_user> <db_password>

Database upgrade enabled based on provided credentials.

Upgrade with DB 

# /home/ssgconfig/oneClickUpgrade.sh --major 11.2.0 22643 --dbupgrade <db_user> <db_password> --silent yes -–reboot yes

If the DB was updated the log output to /var/log  - i.e db-upgrade-once-11.2.0.log

If option “--reboot yes” added it will reboot automatically 

Otherwise Reboot system - Gateway 11.2 and Debian 13 installed