Updating IBM MFA server and GUI
If you update to a newer version of IBM® MFA, your existing database and configuration settings are maintained.
Before you begin
When you update to a newer version of IBM MFA, your existing database and configuration settings are maintained. However, as a general best practice, you should back up your database before any update, as described in Backing up and restoring the IBM MFA database.
- Review the process context and tags associated with the postgresql and pkcsslotd services before enabling mfa.service dependencies on the postgresql and pkcsslotd services.
- After you have identified the required SELinux tags, implement the sample scripts in /opt/IBM/MFA/db/db-selinux-rhel.sh and /opt/IBM/MFA/db/db-selinux-sles.sh, respectively, to update the MFA SELinux settings and enable dependencies in mfa.service.
About this task
The IBM MFA server installs the mfa.service, which has dependencies on postgresql and pkcsslotd systemd services. systemd ensures that the dependent services are running before starting IBM MFA server.
Ensure that you are logged in as the root user.
# whoami root
Enter one of the following commands depending on the platform on which you are installing:
rpm -U mfa-server-2.2.0.latest.rhel8.s390x.rpm rpm -U mfa-server-2.2.0.latest.sles15.s390x.rpm
Verify that the IBM MFA server started and remained
systemctl status mfa ● mfa.service - AZF MFA Server Loaded: loaded (/etc/systemd/system/mfa.service; enabled; vendor preset: disabled) Main PID: 46413 (azfd) Tasks: 2 (limit: 50303) Memory: 3.5M CGroup: /system.slice/mfa.service ├─46413 /bin/bash /opt/IBM/MFA/bin/azfd └─46418 /opt/IBM/MFA/bin/azfServer