RSA releases identity router software updates periodically. You must apply these updates to ensure compatibility with new RSA SecurID Access features and improvements. RSA SecurID Access supports only the latest version and the previous version of the identity router software, and does not support rolling back updates after they are installed.
When a new software version is released, RSA announces the update on RSA Link, and schedules a date and time when each cluster in your deployment will automatically install the latest update. You can view and modify the update schedule using the Clusters page. The Identity Routers page lists the software version for each identity router in your deployment and, when a new software version is released, displays OUT-OF-DATE status for identity routers that do not have the latest software installed.
During an update, each identity router in the cluster installs the new software in rapid succession. Each identity router continues to authenticate users while waiting to install the update but does not perform authentication while installation is in progress. If a cluster contains only one identity router, user authentication through that cluster is disrupted when the update is installed. Individual identity routers typically take between 10 and 30 minutes to update. The cluster update process assumes updates that take longer than 40 minutes have failed or timed out.
If the first identity router does not update successfully, the cluster update is aborted, and all other identity routers continue to perform authentication using the outdated software version. If the first identity router update succeeds, but a subsequent identity router update is unsuccessful, the cluster update proceeds until all remaining identity routers have either updated, failed, or timed out. If a subsequent identity router takes more than 40 minutes to update, the status of that identity router displays OUT-OF-DATE and the cluster update proceeds to the next identity router.
You can perform the steps in Update Identity Router Software for a Cluster to either immediately apply the latest update to all identity routers in a cluster containing an OUT-OF-DATE identity router, or schedule an automatic update to occur at a date and time you select. Use this as the primary method for updating the identity routers in your deployment.