Topic
  • 7 replies
  • Latest Post - ‏2014-02-11T13:35:00Z by XI52Admin
lee86
lee86
12 Posts

Pinned topic Device Upgrade

‏2013-11-26T11:17:34Z |

Hi,

For upgrade from  XI50 to XI52 appliance,with 400+ services in each appliance,please suggest best way to move all the services from XI50 to XI52 in a single deployment per appliance. 

Also are there any issues faced when services are moved from XI50 to XI52.

Updated on 2013-11-26T11:17:59Z at 2013-11-26T11:17:59Z by lee86
  • kenhygh
    kenhygh
    1611 Posts

    Re: Device Upgrade

    ‏2013-11-26T13:56:42Z  

    put all your keys & certs on the new machne. then backup & restore

  • lee86
    lee86
    12 Posts

    Re: Device Upgrade

    ‏2013-11-28T06:41:04Z  
    • kenhygh
    • ‏2013-11-26T13:56:42Z

    put all your keys & certs on the new machne. then backup & restore

    Is secure backup a good approach to go from XI50 to XI52 or having domain wise backup a better approach?

  • HermannSW
    HermannSW
    4877 Posts

    Re: Device Upgrade

    ‏2013-11-28T09:06:26Z  
    • lee86
    • ‏2013-11-28T06:41:04Z

    Is secure backup a good approach to go from XI50 to XI52 or having domain wise backup a better approach?

    No, secure backup is always complete device backup.

    Hermann.

  • HermannSW
    HermannSW
    4877 Posts

    Re: Device Upgrade

    ‏2013-11-28T09:16:49Z  

    You should (and can!) do a secure backup of XI50 and restore on XI52.
    This does not leave any issue, and is the only mechanism to move certs&keys (securely) from one device to the other.

    From:
    http://www.ibm.com/developerworks/websphere/library/techarticles/1009_furbee/1009_furbee.html

    Cross-Product secure backup-restore

    Secure backup-restore is not supported across product types. In other words, you cannot take a secure backup from an XS40 DataPower appliance and restore it to an XI50 appliance. The only exceptions to this rules is when upgrading from a 9235 XI50 appliance to a 7199 XI52 appliance and from a 9235 XS40 appliance to a 7198 XG45 appliance.


    Hermann<myXsltBlog/> <myXsltTweets/> <myCE/> <myFrameless/>
     

  • lee86
    lee86
    12 Posts

    Re: Device Upgrade

    ‏2013-11-30T22:58:15Z  
    • HermannSW
    • ‏2013-11-28T09:16:49Z

    You should (and can!) do a secure backup of XI50 and restore on XI52.
    This does not leave any issue, and is the only mechanism to move certs&keys (securely) from one device to the other.

    From:
    http://www.ibm.com/developerworks/websphere/library/techarticles/1009_furbee/1009_furbee.html

    Cross-Product secure backup-restore

    Secure backup-restore is not supported across product types. In other words, you cannot take a secure backup from an XS40 DataPower appliance and restore it to an XI50 appliance. The only exceptions to this rules is when upgrading from a 9235 XI50 appliance to a 7199 XI52 appliance and from a 9235 XS40 appliance to a 7198 XG45 appliance.


    Hermann<myXsltBlog/> <myXsltTweets/> <myCE/> <myFrameless/>
     

    Hi Hermann,

     

    I just checked,the disaster recovery mode is not enabled in the current appliances.So i think secure backup is not possible.

     

     

  • HermannSW
    HermannSW
    4877 Posts

    Re: Device Upgrade

    ‏2013-12-01T00:33:26Z  
    • lee86
    • ‏2013-11-30T22:58:15Z

    Hi Hermann,

     

    I just checked,the disaster recovery mode is not enabled in the current appliances.So i think secure backup is not possible.

     

     

    You are right.

    So in that case there is no way to get keys&certs off the box, the best you can do now is full device backup or backup of domain(s).

    Whenever you (re)initialize a box you should enable disaster recover mode.


    Hermann<myXsltBlog/> <myXsltTweets/> <myCE/> <myFrameless/>

  • XI52Admin
    XI52Admin
    17 Posts

    Re: Device Upgrade

    ‏2014-02-11T13:35:00Z  
    • HermannSW
    • ‏2013-12-01T00:33:26Z

    You are right.

    So in that case there is no way to get keys&certs off the box, the best you can do now is full device backup or backup of domain(s).

    Whenever you (re)initialize a box you should enable disaster recover mode.


    Hermann<myXsltBlog/> <myXsltTweets/> <myCE/> <myFrameless/>

    Hi,

    What about Default Domain backup and restore? I'm asking this because I thing that importing the Default domain will not work (without secure backup) because it will not import user accounts and will not import Ethernet Interface configuration. They are different in name - eth0 is now eth10.

    Any suggestions on importing the Default Domain?