8.2 upgrade and appliance HW Replacement procedure

[AndreasDietrich]

Hi RSA followers,

what is a recommended procedure to upgrade a version 8.1 SP1 P03 running at an old Appliance 250

to actual version 8.2 P1 (actual) with a physical replacement of primary Appliance,

a physical replacement of first replica appliance

and to keep! the secondary replica appliance (due to actual hardware).

Important, there is currently no physical access to the secondary replica,

I need a way to keep the secondary replica appliance without reinstalling it.

Thank you in advance and have a nice day.

(Answers may come with a delay, currently on the road)

Best Regards

Andreas Dietrich 

[EricaChalfin]

Andreas Dietrich‌,

My apologies for the delayed response.  You would need to apply RSA Authentication Manager 8.2 to your primary first, then to your replicas.  Once all of the servers are updated, apply RSA Authentication Manager 8.2 SP1 to the primary first then to the replicas.

For information on how to download the RSA Authentication Manager 8.2 update, please see 000034558 - How to download RSA Authentication Manager 8.x full kits and service packs from RSA Link 

After installing Authentication Manager 8.2 SP1, you can install the most recent patch from the RSA Authentication Manager 8.2 SP1 Downloads page (again, primary first, then replicas).  Note that these patches are cumulative, so you can install RSA Authentication Manager 8.2 Patch 5 without installing Patches 1, 2, 3 and 4.

Regards,

Erica

[AndreasDietrich]

Hi Erica,

many thanks for the installation process of RSA 8.2 SP1 Patch 5.

If I will be finished with upgrading the software packages on all three current appliances:

Which way I replace Hardware Appliance of Master and Replica 1 and keep Replica 2 physical untouched.

Will it work with backup old appliance / restore new appliance for the master and after that making a resynchronozation of replica 2?

Or will I need to perform PING Backup of original Appliance 3.0 Master and PING Restore on the new hardware?

Summary question:

I can not bring replica 2 to the Quick Setup Page due to missing physical access.

I need a way to let replica 2 run as a lonely instance while replacing the hardware of the other two machines after

that I will need to resync it only. No fresh install possible.

Sorry for pointing again on this specific scenario. I am afraid that after a physical replacement of the master I need to

quick setup the replica.

Many thanks and warm regards

Andreas Dietrich

[MennaAbdellatif]

Hi Andreas,

I got from your question that you currently have 1 server that's not configured yet as you don't have physical access to it and you would like to make it work as a standalone server while replacing your primary and replicas. If that's correct, then you can take backup from your current primary before shutting it down (you can't have 2 primary servers running at the same time) and restore it to this server using PING so that it can be your new primary and after replacing your servers(old primary and replicas ), you can rebuild the old primary to be replica to this new server and resync the other replicas.

I hope this answers your question and if not, please don't hesitate to get back to us.

Best Regards,

Menna Abdellatif

[AndreasDietrich]

Hi, 

it seems quite hard for me to describe the Basic Problem at all:

start position:

3 appliances, 1 Primary and 2 replicas, all on Version 8.1

I need to upgrade the complete environment from 8.1 to 8.2 SP1 HF5

I have to replace two of three appliances physically (primary and replica1).

the third appliance (replica2) is forbidden to lose its status as a replica instance and I am afraid and have panic, that it will need a replica package Installation!

my plan:

upgrade primary to 8.2

update primary to 8.2 SP1

update primary to 8.2 SP1 HF5

upgrade replica2 to 8.2

update replica2 to 8.2 SP1

update replica2 to 8.2 SP1 HF5

install replica1 new hardware with replica package

situation now:

3 appliances, primary on old hardware, replica1 on new hardware(finished), replica2 on new software and with successful replication status

next steps:

backup primary appliance database, then shutdown old appliance

restore primary database on fresh hardware appliance

hopefully getting replica1 and replica2 back into a successful replication to the new primary appliance instance.

[EdwardDavis · Accepted solution]

Your plan needs to change and must follow this: upgrade primary to [whatever patch] then upgrade replica to the same patch, then move on to the next replica, until all replicas are patched. Only then install the next patch on primary. All patches must be done on primary, then replicas. Then you can go to the next patch.

[AndreasDietrich]

Hey many thanks,

good Point I forgot.

Will Change it according to your Point.

[EricaChalfin]

Thanks, pFAX8dqXawUTDxZ4I3nhT1XEt83rjtLgTslU9FLYwZU=‌!

Regards,

Erica

[EricaChalfin]

Thanks, FmiIY33bxyzB6p9oYMYNJuc8PuIAlmAZXPFCinHYpUg=‌!

Regards,

Erica