Identifying the correct upgrade path

The best approach for upgrading Guardium® depends on the version you are upgrading from, the hardware of your system, and any special partitioning requirements you might have.

Determine the current Guardium version and patch level by clicking the Help icon in the main user interface and selecting About Guardium. Use the following table for an overview of how to upgrade to the latest Guardium version.
Current Guardium version Upgrade path
Versions 10.0 to 10.5
  1. Apply health check patch 10.0p9997.
  2. Archive and purge system data.
  3. Create a system backup. Include both your data and configuration files.
  4. Apply the version 10.6 GPU and maintenance patches.
  5. Follow the version 10.6 upgrade path that is described in this document.
Version 10.6
  1. Apply health check patch 10.0p9998.
  2. Archive and purge system data.
  3. Create a system backup. Include both your data and configuration files.
  4. Apply the latest version 11 upgrade patch.
  5. Apply health check patch 11.0p9997.
  6. Apply the latest version 11 GPU and maintenance patches, if available.
Version 11.0 and later
  1. Apply health check patch 11.0p9997.
  2. Archive and purge system data.
  3. Create a system backup. Include both your data and configuration files.
  4. Apply the latest version 11 GPU and maintenance patches, if available.
Attention: The version 11 upgrade patch is incompatible with the following configurations:
  • Guardium systems with custom partitions.
  • Encrypted Logical Volume Management (LVM) disks.
  • Guardium systems with root partitions that are 10 GB or less.
  • Guardium systems that are deployed in cloud environments.
Use the backup-rebuild-restore procedure to upgrade these configurations.

Upgrade by using backup-rebuild-restore

  1. Apply the latest health check patch that is relevant to your version.
    • Version 10.6 or earlier, apply health check patch 10.0p9998.
    • Version 11.0 and later, apply health check patch 11.0p9997.
  2. Archive and purge system data.
  3. Create a system backup. Include both your data and configuration files.
  4. Rebuild the appliance by using the latest version 11 ISO.
  5. Apply the latest version 11 GPU.
  6. Apply the relevant maintenance bundle, sniffer, and security patches.
    Important: If a week or more has passed since you began applying maintenance patches, apply the version 11 health check patch (11.0p9997) to confirm that the system is ready before continuing to the next step.
  7. Restore the system backup. Include both your data and configuration files.

Notices

When you upgrade from Guardium versions 11.0 or 11.1 to versions 11.2 or up, the command-line parameter FIPSmode is restored to the default value "off". Reset the value by using the CLI command store system fipsmode on and restart the system to enable FIPSmode.

The FIPSmode value is preserved when you upgrade from version 11.2 to version 11.4 or up by using the backup and restore method. After you restore to version 11.4 or up, you must restart your Guardium system to enable FIPSmode.