The November 2024 release introduces significant updates to the Identity Router. The software has been upgraded to version 12.22.x, and the underlying operating system has been updated to SLES 15 SP6. New IDR templates will be based on SLES 15, while existing IDRs will seamlessly upgrade to SLES 15 SP6 without manual intervention based on the platform. You must update your Identity Router software to version 12.22.x and upgrade the operating system to SLES 15 SP6.

VMware / Hyper-V / AWS

SLES 15 SP6 upgrade is supported out of the box based on the platform. RSA recommends that you allow the update to occur automatically on the default rollout date. For more information, see Update Identity Router Software. Before performing an in-place upgrade, RSA recommends that you take a snapshot of the virtual machine for VMware and Hyper-V-based routers and a snapshot of the storage volume for AWS-based routers. The upgrade will update both the identity router software (version 12.22.x) and the operating system (from SLES 12 SP5 to SLES 15 SP6).

After the upgrade, verify the operating system version in the Cloud Administration Console by navigating to Platform > Identity Routers, and checking the version next to the identity router name. If the OS is not SLES 15 SP6, contact Customer Support. 

Note: The in-place upgrade process may take longer than the standard software update. A single identity router update could take over an hour, while a three-router cluster might take more than two hours.

Authentication Manager 

Identity routers for Authentication Manager cannot be upgraded to SLES 15. However, they will continue receiving updates for the SLES 12 OS and software packages. New Authentication Manager Identity Router deployments will use an SLES 15 SP6-based image.

Migrating Authentication Manager IDRs to SLES 15 SP6

To migrate existing Authentication Manager Identity Routers to the SLES 15 SP6 image, follow these steps in the Authentication Manager Security Console:

1. Remove the Embedded Identity Router from the Authentication Manager appliance. Refer to Remove the Embedded Identity Router from RSA Authentication Manager.
2. Download and install the new identity router. Refer to Step 3: Deploy the Embedded Identity Router section in the Quick Setup - Connect RSA Authentication Manager to the Cloud Authentication Service with an Embedded Identity Router article. 

Note: In step 1, regenerate the Registration Code from the existing identity router record. You do not need to create a new identity router record.

3. Register the New Identity Router with the existing record in the Cloud Administration Console. Refer to steps 3 to 9 of Step 3: Deploy the Embedded Identity Router section in the Quick Setup - Connect RSA Authentication Manager to the Cloud Authentication Service with an Embedded Identity Router article. 
4. In the Cloud Administration Console, click Publish Changes.

After the migration, verify that the new identity router is working as expected by checking the status in the Cloud Administration Console. Refer to View Identity Router Status.