Upgrading to the current version

Complete this task if you are upgrading an existing Access Manager for Web, Access Manager for Mobile, or Access Manager installation to the current version.

Before you begin

Important: See Technotes related to 9.0.3 upgrade for the latest upgrade information.

If you are installing the virtual appliance for the first time, download the .iso image and follow the installation instructions in the Virtual Appliance Quick Start Guide.

Review the following tasks and complete the tasks that are appropriate to your environment:

Clear the browser cache
As part of the upgrade process, clear your browser cache to reduce the likelihood of encountering issues with cached items.
USB drive for an update
If you use a USB drive for an update, it must be formatted with a FAT file system.
Risk engine reports
Any risk engine reports that you generated before you begin the upgrade task are not preserved. Export copies of the risk reports and save them locally by completing the following steps:
  1. Log in to the local management interface.
  2. Click Monitor Analysis and Diagnostics > Application Log Files.
  3. Expand access_control and select the risk reports to export.
  4. Click Export and save the files.
Database failover in a cluster
For information about how the upgrade affects database failover in a cluster, see the Database failover capabilities vary during a cluster upgrade section in Advanced Access Control known issues and solutions.

Procedure

Choose one of the following upgrade methods and complete the steps:
Use the online update server.
  1. Meet the following conditions:
    • A valid license is installed on the appliance.
    • The appliance has network connectivity to the online update server.
    • If you are upgrading a cluster, prepare the cluster as follows:
      1. Log in to the local management interface on the Primary Master.
      2. Select Manage System Settings > Cluster Configuration > General.
      3. Do not change the Primary Master setting.
      4. Remove the Quaternary Master, Tertiary Master, and Secondary Master settings if present. First remove the quaternary settings, then the tertiary, and finally the secondary.
        1. Select the IP address in the Quaternary Master field and delete it.
        2. Save and deploy the changes.
        3. Wait for all of the cluster members to synchronize.
        4. Repeat the above steps for the Tertiary Master and then the Secondary Master.
      5. On the primary node, continue with the remaining steps to install the upgrade.
      6. From the local management interface on the primary master node, update the cluster configuration to set the high-availability cluster members back to the settings you want.
      7. Wait for the cluster to synchronize. The firmware for each appliance in the cluster is now upgraded and the cluster is operational.
  2. Log in to the local management interface.
  3. Select Manage System Settings > Updates and Licensing > Available Updates.
  4. Click Refresh.
  5. Select the firmware update.
  6. Click Install. The firmware update might take a long time to complete, depending on the bandwidth that is available to the appliance. After the update is successfully applied, the appliance automatically restarts.
  7. If you installed the upgrade on a cluster, complete the installation:
    1. Repeat steps 1.b through 1.f on each appliance in the cluster.
    2. From the local management interface on the master node, update the cluster configuration to set the high-availability cluster members back to the settings you want.
    3. Wait for the cluster to synchronize. The firmware for each appliance in the cluster is now upgraded and the cluster is operational.
Use the local management interface for a single appliance not in a cluster.
  1. Download the .pkg file.
  2. Log in to the local management interface.
  3. Select Manage System Settings > Updates and Licensing > Available Updates.
  4. Click Upload. The New Update window opens.
  5. Click Select Update.
  6. Browse to the .pkg file.
  7. Click Open.
  8. Click Save Configuration. The upload process might take several minutes.
  9. Select the new firmware and click Install. The installation of the new firmware takes a few minutes. After the update is successfully applied, the appliance restarts automatically.
Use the local management interface for a cluster of appliances.
To upgrade a cluster configuration, you must change the cluster configuration temporarily before the upgrade so that changes can be written to the database.
  1. Download the .pkg file.
  2. Log in to the local management interface on the Primary Master.
  3. Select Manage System Settings > Cluster Configuration > General.
  4. Do not change the Primary Master setting.
  5. Remove the Quaternary Master, Tertiary Master, and Secondary Master settings if present. First remove the quaternary settings, then the tertiary, and finally the secondary.
    1. Select the IP address in the Quaternary Master field and delete it.
    2. Save and deploy the changes.
    3. Wait for all of the cluster members to synchronize.
    4. Repeat the above steps for the Tertiary Master and then the Secondary Master.
  6. Upload and install the firmware .pkg file on the primary node appliance. This step includes the automatic restart of the appliance.
  7. Upload and install the firmware .pkg file on each appliance in the cluster, and restart each one.
  8. From the local management interface on the primary master node, update the cluster configuration to set the high-availability cluster members back to the settings you want.
  9. Wait for the cluster to synchronize. The firmware for each appliance in the cluster is now upgraded and the cluster is operational.
Use a USB drive. (Only for upgrading a hardware appliance.)
  1. Download the .pkg file.
  2. Copy the firmware update from the .pkg file to a USB flash drive.
  3. Insert the USB flash drive into the hardware appliance.
  4. Log in to the appliance console as admin or use Secure Shell.
  5. Type updates and press Enter.
  6. Type install and press Enter.
  7. Select the following options:
    1. Type 1 for a firmware update.
    2. Type 1 to install the update from a USB drive.
    3. Type YES to confirm that the USB drive is plugged into the appliance.
    4. Type the index number to select the appliance firmware from the list.
    5. Type YES to confirm the update and start the update process.
    Note: The firmware update takes a few minutes to complete and the appliance automatically restarts.

What to do next

  • If you are upgrading an existing appliance, your Access Manager Platform is ready to use.
  • If you are upgrading an existing Access Manager for Mobile appliance or Advanced Access Control module to the current version, continue with the Upgrading configuration instructions.
  • If you are upgrading an existing Federation module to the current version, continue with the Upgrading configuration instructions.