Can an upgraded RSA SecurID Access Identity Router be rolled back to a previous version?

3 years ago

Originally Published: 2017-01-10

Article Number

000059072

Applies To

RSA Product Set: SecurID Access
RSA Product/Service Type: Identity Router

Issue

Is there any way to to revert or roll-back when attempting to update an RSA SecurID Access Identity Router (IDR)?

Resolution

Rolling back to the previous IDR version via snapshot or some other means is not supported.

In the unlikely occurrence that an IDR version upgrade fails, download the current image from the admin console, open the VMware console to assign IPs, and go to the IDR Setup Console to register the IDR.

If any HTTP Federated (HFED) applications are being used and the IDR is a member of a cluster then user keychains will automatically be synced from an existing cluster member once the new IDR is active. If this is a single IDR system then restore the keychains from backup as described in the article on how to Restore a Backup for a Single Cluster.

Please see Chapter 5 (Installing and Configuring the Identity Router) of the RSA SecurID Access SSO Agent Setup and Configuration Guide, for more information on deploying a replacement IDR.

Notes

Note that if this is defined as a new IDR object in the admin UI AND you had configured anything special (firewall rules, static DNS entries, etc.) on the original IDR object, you would need to reconfigure those items in the new IDR. Therefore, it is important to keep a record of any such changes.

Don't see what you're looking for?

Related Articles

Trending Articles