Announcements

SecurID® Discussions

Browse the SecurID discussion board to get product help and collaborate with other SecurID users.
vereinigtehagel
New Contributor
New Contributor

Download of RSA Authentication Manager 8.6 Pre-Upgrade Check Tool not possible

Jump to solution

Hello,

like stated in the Upgrade path documentation under Upgrading RSA Authentication Manager - RSA Community - 629298 I wanted to download the RSA Authentication Manager 8.6 Pre-Upgrade Check Tool, but cannot do it because of missing rights!?

I can download every update of the Appliance I needed (I'm currently still running a very old 8.1.1 appliance and need to upgrade to 8.6 to be able to import new User licenses), from 8.1 to 8.2 and so on up to 8.7 without problems on the my.rsa.com Portal.

But there I cannot find this tool.. in the PDF documentation for this tool there is a link to the download which leads to community.securid.com (https://community.securid.com/t5/securid-authentication-manager/securid-authentication-manager-8-6-downloads/ta-p/633545) but I only get Access denied because of unsufficient privileges.

What and why the bloody hell!? I should not upgrade to 8.6 without this tool searching for possible errors on the appliance but cannot download it either, just genious.

So if anybody could help me out with this it would be great, thanks!

0 Likes
1 Solution

Accepted Solutions
EricaChalfin
Moderator Moderator
Moderator

@vereinigtehagel,

I have moved your post to the RSA SecurID discussions page where it will be seen by other users of Authentication Manager. Please bookmark this page and use it to participate in the forum and ask your own questions.

I am sorry that you ran into an issue when downloading the RSA Authentication Manger 8.6 Pre-Upgrade Check Tool. I placed the file on our RSA Authentication Manager 8.6 Pre-Upgrade Check Tool on SFTP server for you. Please let me know if you are able to download it successfully.

Some tips for you as you upgrade:

  • If you run into a warning with the following text when running the upgrade check tool, it can be safely ignored:

Changing SBR attribute named EAP-Message from octets to octets concat
Changing SBR attribute named state from string to octets

  • We have seen cases where users try to upgrade from very early versions of Authentication Manager, like 8.1 or 8.2 and run into issues. I would recommend contacting RSA support  to discuss the best way to upgrade your deployment. When  upgrading from these earlier version of Authentication Manager, you may run into an issue with database artifacts that can cause RADIUS or other components to no longer be manageable. Consider the following process that gives you new servers that can cleanly be upgraded to Authentication Manager 8.6 and then 8.7:
    1. From the Operations Console, take a backup of the current Authentication Manager primary server (Maintenance > Backup and Restore > Backup Now). Copy the backup to a different server for storage.
    2. Create a new replica with Authentication Manager 8.5. For continuity, create the replica with the old primary's IP address and hostname (do this on a different subnet). This would mean any RSA Authentications Agent machines would not need new sdconf.rec files.
    3. Promote this server to be the new primary.
    4. Bring this online as the primary and import your backup.
    5. Install all new replicas running 8.5.
    6. Attach new replicas to new primary.
    7. Delete old primary and old replicas.
    8. Run the RSA Authentication Manager 8.6 Pre-Upgrade Check Tool. Before continuing, resolve any issues that are listed in the report.
    9. Upgrade to Authentication Manager 8.6 then 8.7.
    10. Install new web tiers, if using.

Best regards,
Erica

View solution in original post

4 Replies
EricaChalfin
Moderator Moderator
Moderator

@vereinigtehagel,

I have moved your post to the RSA SecurID discussions page where it will be seen by other users of Authentication Manager. Please bookmark this page and use it to participate in the forum and ask your own questions.

I am sorry that you ran into an issue when downloading the RSA Authentication Manger 8.6 Pre-Upgrade Check Tool. I placed the file on our RSA Authentication Manager 8.6 Pre-Upgrade Check Tool on SFTP server for you. Please let me know if you are able to download it successfully.

Some tips for you as you upgrade:

  • If you run into a warning with the following text when running the upgrade check tool, it can be safely ignored:

Changing SBR attribute named EAP-Message from octets to octets concat
Changing SBR attribute named state from string to octets

  • We have seen cases where users try to upgrade from very early versions of Authentication Manager, like 8.1 or 8.2 and run into issues. I would recommend contacting RSA support  to discuss the best way to upgrade your deployment. When  upgrading from these earlier version of Authentication Manager, you may run into an issue with database artifacts that can cause RADIUS or other components to no longer be manageable. Consider the following process that gives you new servers that can cleanly be upgraded to Authentication Manager 8.6 and then 8.7:
    1. From the Operations Console, take a backup of the current Authentication Manager primary server (Maintenance > Backup and Restore > Backup Now). Copy the backup to a different server for storage.
    2. Create a new replica with Authentication Manager 8.5. For continuity, create the replica with the old primary's IP address and hostname (do this on a different subnet). This would mean any RSA Authentications Agent machines would not need new sdconf.rec files.
    3. Promote this server to be the new primary.
    4. Bring this online as the primary and import your backup.
    5. Install all new replicas running 8.5.
    6. Attach new replicas to new primary.
    7. Delete old primary and old replicas.
    8. Run the RSA Authentication Manager 8.6 Pre-Upgrade Check Tool. Before continuing, resolve any issues that are listed in the report.
    9. Upgrade to Authentication Manager 8.6 then 8.7.
    10. Install new web tiers, if using.

Best regards,
Erica

Hi @EricaChalfin and thanks a lot for the download! I just saved it on my Laptop 🙂

Thanks as well for the Tipps, on monday I successfully upgraded the Appliance from 8.1 to 8.5 and also noticed in the documentations for 8.6 that the Radius component changed, so I stopped at this point for now.

Thanks to you I can now properly test and further implement the newer versions in my next maintenance window.

Again, thanks a lot 🙂

Hi, can you share the path for the pre check script. Currently trying to upgrade to 8.6 from 8.5. 

thanks 

Elton

Andy-Bingaman
New Contributor New Contributor
New Contributor

@EltonHinds,

Here are the links to the download and the readme for the pre-migration tool:

https://community.rsa.com/t5/securid-authentication-manager/rsa-authentication-manager-8-6-pre-upgrade-check-tool/ta-p/673330

https://community.rsa.com/t5/securid-authentication-manager/rsa-authentication-manager-8-6-pre-upgrade-check-tool-readme/ta-p/672173

Please let us know if there is anything else you need and if you run into any trouble don't hesitate to open a support case.

Thanks,

-Andy