000037071 - How to rollback to a previous version in case of virtual application patch failures in RSA Identity Governance & Lifecycle 7.1.0

Document created by RSA Customer Support Employee on Feb 11, 2019Last modified by RSA Customer Support Employee on Feb 11, 2019
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000037071
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle
RSA Product/Service Type: Virtual Application Installation 
RSA Version/Condition: 7.1.0
Application Server: WildFly 10

IssueWe are currently working on a technical design for upgrading from RSA Identity Governance & Lifecycle 7.0.2 P09 to 7.1. We currently are configured for the Software Bundle with remote customer-supplied database. 

For a Virtual application (OVA) with customer-supplied database, what is the back out (rollback) option when implementing application patches in RSA Identity Governance & Lifecycle Version 7.1 environment?
ResolutionRSA Identity Governance & Lifecycle does not provide rollback functionality to the previous version.  However, RSA Identity Governance & Lifecycle also provides a backup and restore scripts below:
  • /home/oracle/deploy/acm_backup.sh 
  • /home/oracle/deploy//acm_restore.sh

The backup procedure applies only to hardware appliance, software bundle, and virtual application (OVA) deployments.  The backup procedure also backs up keystore files in following directory:
  • For RSA Identity Governance & Lifecycle version 5.5 or 6.x:  /home/oracle/wildfly-<wildfly-version>/server/default/deploy/keystore

You can restore a product version only on a machine that has the same version installed. You must also use a database dump from the same version to restore the database data and associated KEK and keystore files.

For more information, please review following sections from Appendix C:  Maintenance of the RSA Identity Governance and Lifecycle 7.1 Installation Guide:

  • Back up the RSA Identity Governance & Lifecycle Application on page 210
  • Restore RSA Identity Governance & Lifecycle on page 211
Alternatively, you can roll back to a previous version by reinstalling RSA Identity Governance & Lifecycle 7.1.0 GA version using an .ova file (for example, RSA_IGL.x86_64-<VersionNumber>.ova) and applying the desired (previous patch) to which you need to roll back.

The process of reinstalling the .ova would be as described in Chapter 5 Virtual Application Installation of the RSA Identity Governance and Lifecycle 7.1 Installation Guide. Then you can apply desired/previous patch to which you want to roll back.

The recommended approach would be to use RSA Identity Governance & Lifecycle Backup and Restore Script, as mentioned above for supported deployments.