IBM Security Privileged Identity Manager, Version 2.1.0

Upgrading the IBM Security Privileged Identity Manager virtual appliance from a USB device

Install the firmware update to upgrade the IBM® Security Privileged Identity Manager virtual appliance.

Before you begin

Before you apply the firmware update to upgrade the IBM Security Privileged Identity Manager virtual appliance, back up your data tier, which is all the databases and the directory server.
Important:
  • When you upgrade the virtual appliance, all existing snapshots are deleted.
  • The upgraded virtual appliance cannot use snapshots that are created for older versions of the virtual appliance.

About this task

The virtual appliance has two partitions with separate firmware on each partition. The partitions are swapped during the firmware updates to roll back the firmware updates when required. Either partition can be active on the virtual appliance.

In the factory-installed state, Partition 1 is active and contains the firmware version of the currently released product. When you apply a firmware update, the update is installed on Partition 2, and your policies and settings are copied from Partition 1 to Partition 2.

The IBM Security Privileged Identity Manager virtual appliance restarts the system by using Partition 2, which is now the active partition.

You must use the command-line interface (CLI) to install the upgrade.

You can only upgrade the primary node in a clustered deployment. Member nodes have to be reinstalled and joined to the primary node. See Upgrading the cluster.

Procedure

  1. Download the ispim_*.pkg build.
  2. Access the command-line interface (CLI) of the virtual appliance by using either an ssh session or the console.
  3. Copy the ispim_*.pkg to a USB device.
  4. Attach the USB device to your virtual system.
  5. In the virtual appliance CLI, run the ispim command to display the ispim prompt.
  6. At the ispim prompt, complete the following steps.
    1. Run the firmware_update command.
    2. Run the list_firmware command to list the firmware updates from the USB device.
    3. Run the transfer_firmware command to transfer the firmware updates from the USB device to the virtual system.
    4. Run the install_firmware command.
    5. Select the index of the firmware update that you want to install to the virtual system and press Enter.
      The results are as follows.
      • The upgrade process formats Partition 2 and installs the new firmware.
      • When you apply the firmware update, your policies and settings are copied from Partition 1 to Partition 2.
      • On completion, the process indicates you must restart the virtual system.
    6. Type the reboot command and press Enter to restart the virtual system by using Partition 2. Partition 2 is now the active partition.
      The results are as follows.
      • After the virtual appliance restarts from the Partition 2, all Partition 1 configuration information is applied to the Partition 2.
      • After the configuration is applied to the virtual appliance, the process indicates you to restart the virtual appliance.
    7. Restart the virtual appliance to complete the upgrade process.
    8. Optional: Back up Partition 2 in to Partition 1 after the successful completion of the firmware upgrade. The backup process overwrites the information that is in Partition 1.
      Do the following actions:
      1. Check and fix any errors if the upgrade process failed.
      2. Use Partition 1 to set it as the active partition and restart it.

        Partition 1 now becomes the active partition.

Parent topic: Upgrade the virtual appliance

Feedback