IBM Support

Knowledge Collection: How to upgrade the firmware on an IBM WebSphere DataPower Gateway Appliance

Product Documentation


Abstract

Instructions on how to successfully upgrade the firmware on an IBM DataPower Gateway+ Appliance

Content

Follow these steps for a successful upgrade or downgrade of the firmware on your appliance.


  • - Step 1. Read this Important Information.



    You may also watch this YouTube example of the upgrade process
    https://youtu.be/pmIzTBlunuI

    IMPORTANT NOTE:

    If you are also running API Connect with your DataPower you MUST be at the same levels when running 2018.4.x or higher.
    For example if you want to upgrade your DataPower appliance to 2018.4.1.7 you must also upgrade your APIC to the same fixpack level for API Connect of 2018.4.1.7

    CD (Continuous Delivery) stream firmware’s

    IMPORTANT!! The firmware in this table are the Continuous Delivery (CD) Model

    • CD release approximately once per quarter
    • Only the most recent CD release is supported at a given time.

    (example the 7.7.1.3 will no longer be supported when the 7.7.1.4 level is released)

    • This is may not be suitable for production environments as new releases may contain new functions and behavior changes.
    • See this page for details:  Firmware Lifecycle page

    Appliance Type

    Desired Firmware

    Minimum Pre-Req firmware

    8441 DataPower Gateway X2

    7.7.x.x

    7.6.0.4

    8436 DataPower Gateway

    7.7.x.x

    7.1.0.x

    7198/7199/2426 XG45/XI52/XB62

    7.7.x.x

    7.0.0.x

    Virtual DataPower Gateway (IDG)

    7.7.x.x

    7.0.0.x

    Virtual XG45/XI52

    7.7.x.x

    Migrate to Virtual DataPower Gateway (IDG)

    Notes:

    • It is recommended to upgrade to the latest LTS firmware prior to upgrading to a CD firmware to allow for a rollback path if needed
    • A CD stream release will be used for the base of the next LTS release:
      Example: The 7.7.x.x release is the base for the 2018.4.1x LTS release
    • See these links for migrating the virtual XG45/XI52 to virtual DataPower Gateway (IDG):

    https://www.ibm.com/support/docview.wss?uid=swg22004117 )

    https://developer.ibm.com/answers/questions/446462/how-to-upgrade-datapower-including-xi52-to-idg/

    DwAnswer for issues with migration tool
    https://developer.ibm.com/answers/questions/418194/trying-to-update-xi52-to-idg-76-failing-after-usin/

    LTS (Long Term Support) stream firmware’s

    IMPORTANT!! The firmware in this table are the Long Term Support (LTS) Model

    • Long Term Support (LTS) Major release every 12 months
    • LTS releases are for customer seeking enhanced stability and do not wish to upgrade on the CD schedule, while CD releases are intended for customers seeking the latest features.
    • The first LTS release post 7.6 GA will be within two years. Subsequent LTS releases will occur every 12 months.
    • LTS releases will be supported for a minimum of 2 years.
    • The naming of the firmware has changed please note the naming now contains the release date (year.quarter.release).type.fix pack
      For example: the 2018.4.1.0x was released in 2018 4th quarter and is release 1the "x" would be the fixpack release.
    • Example of the firmware image names that will be downloaded from fix central:
      idg2018410.lts.scrypt3
      This example is for a physical IDG appliance and is LTS
       

    Appliance Type

    Desired Firmware

    Minimum Pre-Req firmware

    8441 DataPower Gateway X2 2018.4.1 7.6.0.4
    8436 DataPower Gateway 2018.4.1 7.1.0.x
    7198/7199/2426 XG45/XI52/XB62 2018.4.1 7.0.0.x
    Virtual DataPower Gateway 2018.4.1 7.0.0.x
    Virtual XG45/XI52 2018.4.1 Migrate to Virtual DataPower Gateway (IDG)

    8441 DataPower Gateway X2

    7.6.0.4 and 7.6.0.8 and up

    7.6.0.4

    8436 DataPower Gateway

    7.6.0.x

    7.1.0.x

    7198/7199/2426 XG45/XI52/XB62

    7.6.0.x

    7.0.0.x

    Virtual DataPower Gateway (IDG)

    7.6.0.x

    7.0.0.x

    Virtual XG45/XI52

    7.6.0.x

    Migrate to Virtual DataPower Gateway (IDG)

    See these links for migrating the virtual XG45/XI52 to virtual DataPower Gateway (IDG):

    https://www.ibm.com/support/docview.wss?uid=swg22004117 )

    https://developer.ibm.com/answers/questions/446462/how-to-upgrade-datapower-including-xi52-to-idg/

    DwAnswer for issues with migration tool
    https://developer.ibm.com/answers/questions/418194/trying-to-update-xi52-to-idg-76-failing-after-usin/

    8436 DataPower Gateway

    7.5.x.x

    7.1.0.x

    7198/7199/2426 XG45/XI52/XB62

    7.5.x.x

    7.0.0.x

    Virtual DataPower Gateway

    7.5.x.x

    7.0.0.x

    Virtual XG45/XI52

    7.5.x.x

    7.0.0.x

    8436 DataPower Gateway

    7.2.0.x

    7.1.0.x

    7198/7199/2426 XG45/XI52/XB62

    7.2.0.x

    7.0.0.x

    Virtual DataPower Gateway

    7.2.0.x

    7.0.0.x

    Virtual XG45/XI52

    7.2.0.x

    7.0.0.x

    8436 DataPower Gateway

    7.1.0.x

    7.1.0.x

    7198/7199/2426 XG45/XI52/XB62

    7.1.0.x

    7.0.0.x

    Virtual DataPower Gateway

    7.1.0.x

    7.1.0.x

    Virtual XG45/XI52

    7.1.0.x

    7.0.0.x

    1. Scope: This technote does not cover how to upgrade a DataPower appliance to add an optional feature. Please reference our technote on this topic. <need new link for activating licenses>
    2. Plan: Create a firmware upgrade plan with all the stakeholders which includes a test plan to make sure the appliance works as expected after the upgrade.
      Review the release notes for the desired firmware and any intermediate major firmware releases for any new features or changes that may affect your environment.
      Supported firmware versions and recommended levels for IBM DataPower Gateways products.
    3. Critical planning information:

      a)
      Critical Information: Please create a privileged user id as a back up for the "admin" account on your appliances. This will allow you to restore the "admin" account password in case the "admin" account is locked out or the password is lost.

      b)
      Critical Fixes: Please read the list of critical updates documented by IBM Support in this flash: Critical updates for IBM WebSphere DataPower SOA appliances.
    4. Prerequisite Firmware Levels needed prior to upgrade

    V7.6 firmware information:
    Confirm the firmware image to download for the 7.6 firmware
    Prerequisite firmware:
    • All M/T 8436 IDG (IBM DataPower Gateway) must be running the 7.1.0.x or later firmware.
    • All M/T 7198/2426 and 7199/2426 appliances must be running the 7.0.0.x or later firmware.
    • Virtual DataPower Gateway must be running the 7.1.0.x or later firmware.
    • Virtual XG45/XI52 must be migrated to Virtual DataPower Gateway. From more information see Migration of a virtual DataPower SOA appliance to a virtual DataPower Gateway.
    To install a fix pack on a DataPower Gateway Virtual Edition product, the minimum RAM requirement is 5 GB. See this additional information about 7.6 fixpacks


    V7.5 firmware information:
    Confirm the firmware image to download for the 7.5 firmware
    Prerequisite firmware:
    • All M/T 8436 IDG (IBM DataPower Gateway) must be running the 7.1.0.x or later firmware.
    • All M/T 7198/2426 and 7199/2426 appliances must be running the 7.0.0.x or later firmware.
    • All Virtual Appliances must be running the 7.0.0.x or later firmware.


    V7.2.0 firmware information:
    Confirm the firmware image to download for the 7.2 firmware
    Prerequisite firmware:
    • All M/T 8436 IDG (IBM DataPower Gateway) must be running the 7.1.0.x firmware.
    • All M/T 7198/2426 and 7199/2426 appliances must be running the 7.0.0.x or later firmware.
    • All Virtual Appliances must be running 7.0.0.x or later firmware.


    V7.1.0 firmware information:
    Confirm the firmware image to download for the
    7.1 firmware
    Prerequisite firmware:
    • All M/T 8436 IDG (IBM DataPower Gateway) the 7.1.0.x firmware is the minimum supported firmware.
    • All M/T 7198/2426 and 7199/2426 appliances must be running the 7.0.0.x firmware.
    • All Virtual Appliances must be running 7.0.0.x firmware.

       

    • 1. All Firmware information:
      • Supported and Recommended firmware levels: Review the list of recommended, generally available firmware for IBM WebSphere DataPower SOA Appliances in this document: Supported firmware versions.
      • Release notes: Release notes are available for the major releases from the WebSphere DataPower Library page under Product Documentation. The appliance has firmware. The firmware is IBM Proprietary and IBM Confidential. The firmware is updated via one image to upgrade all features as purchased on the appliance.
      2. Determining the firmware level for your unique business solution: IBM publishes several technotes to help your team determine the appropriate firmware levels for your business solution:

     

  • - Step 2. Identify The Firmware Image File Which Matches Your Appliance


    The DataPower firmware image file names have the following format or pattern:
    zzNNNN.licenses.scrypt{3/4}.


    Otherwise, please follow the steps in this section of the technote.

    Using the information in this step you will resolve this pattern to the one image file name which matches your appliance, for example: idg7700.scrypt3 or idg7700.tibco.scrypt3 with the Tibco license. Fix Central has many image files for DataPower appliances; this will help you find the one file.

    The following steps will help you determine the firmware image file name which will work with your appliance.

    1. Determine the zz value in zzNNNN.licenses.scrypt{3/4}, which is the appliance model:
      1. You can use the DataPower WebGUI to obtain your appliance model. The DataPower model displays on the top left of the banner on every WebGUI page as XI52, XG45, XB62 or IDG.
      2. The first 2 characters of the model are the "zz" in the image format. Using this example throughout this section, for an idg model appliance, the image file name would start with IDG: idgNNNN.licenses.scrypt{3/4}.
    2. The NNNN value in the firmware image file name is the firmware release level.
      1. To display the current firmware select Status, look under System and select Firmware Information, or scroll to the bottom of the WebGUI page. The firmware level and model are listed at the end of the selections. Or you can issue the "show version" CLI command
      2. Read this technote to determine which firmware level you wish to install. Supported Firmware versions and recommended upgrade levels for IBM WebSphere DataPower SOA Appliances
      3. Next read the list of critical updates posted by IBM Support in this critical update flash to confirm your upgrade image choice has all critical updates included
      4. The firmware levels are listed in the form x.x.x.x, remove the '.', and this will be the "NNNN" in the firmware image. Using our example of xiNNNN.licenses.scrypt{3/4} , if you wish to install 7.6.0.4, NNNN would be 7604. This would be idg7604.licenses.scrypt{3/4} in our example.
    3. Determine if you need a scrypt3 or scrypt4 file. The scrypt{3/4} value is based on the machine type. To display the hardware generation (machine type), select Administration > Device > System Settings. In the Product ID value, the machine type is the first 4 numbers, For example, 843652X, is machine type or M/T 8436. Match the machine type or M/T:
      1. If the display shows "2426", "7199" or "7198", use scrypt of the form zzNNNN.licenses.scrypt3. M/T 7199 and M/T 7198 use scrypt3 files and run V4 or newer firmware.
      2. If the display shows "5725", use scrypt of the form zzNNNN.licenses.scrypt4. M/T 5725 is for Virtual Appliances.
      3. If the display shows "8436" use idgNNN.license.script3
    4. Check the licenses you purchased on the appliance. This is the "licenses" value and you may have more than one license on the appliance.
      1. To display the license information select Status, look under System and select "Device Features". Note which features are enabled.
      2. Several licenses will appear. The licenses which affect your choice of image file name (depending on firmware level) are TAM, SQL/ODBC, and TIBCO. Make a note of which of these 4 licenses are displayed to use in the following steps, along with the machine type (M/T) and scrypt{2/3/4} you found. If you have other licenses, they will be updated as appropriate.
        1. If TAM, SQL/ODBC, and TIBCO do not appear, then zzNNNN.scrypt3/4 is the image file name pattern and you can proceed to step 5 "Here are examples....", to look at examples.
        2. XB appliances do not have ODBC in the image file name.

    With this information you can proceed to the next steps.

     

  • - Step 3. Download The Image Which Matches Your Appliance

    1. Go to the Fix Central web site
    2. A user id and password is now needed to access downloads on Fix Central. Here is our technote with more information.
    3. From the Product Group drop-down list, select WebSphere.
    4. From the Product drop-down list, select IBM DataPower Gateways.
    5. For the Installed Version, choose 7.0.6 for example.
    6. Sign in with your IBM Account
    7. To limit the result to your DataPower model (XI52, IDG etc.), select the text radio button.
    8. In the text file field, use XI to find all the XI52 , XG45 or IDG
    9. Select the firmware level
    10. After you select Agree you will see a list of all the firmware files for an XI52 or the files will be download. Using the information in step 2 you will have identified the one correct image file to use.
    11. Check the size of the file you downloaded. The file size should be close to the same size as on Fix Central. They will not be exact, but should be very close.

    If the image files appears as binary in your browser, please right-click and choose Save As from the browser,

    For help with accessing the Fix Central site, or suggestions to improve Fix Central, click on the feedback button on the Fix Central web page.

     

     

  • - Step 4. Install The Firmware Image.



    When possible use the WebGUI for firmware upgrades as the WebGUI is easier than issuing several CLI commands. WebGUI/CLI commands are provided for each step where the command exists for both methods.

    1. IMPORTANT: Check the firmware on the appliance.
      • From the WebGUI, under Status, look under System and select Firmware Information, or scroll to the bottom of the WebGUI page.
      • From the CLI issue the show version command.
    2. Check if this will downgrade the appliance to an older major release level of firmware than currently installed.
    3. If you need to downgrade to a different major release such as from 7.7.x.x to 7.7.0.x:. The only supported procedure is first reinitallzie the appliance by following this technote Resetting an IBM WebSphere DataPower SOA Appliance to install the 7.6.0.x image. A major release is identified by the first three points of the version such as: 7.5.0, 7.6.0 and 7.7.0 which are all separate major releases.
    4. Back up the appliance's configuration in a safe location off the appliance. Reference our technote on backup and import features of the appliance.
    5. Confirm you have a working "admin" user ID.
    6. IMPORTANT: Create or confirm you have a back up privileged user id which can change the "admin" password if needed. See part 2 item 1 in our technote on lost passwords.
    7. Confirm the passwords for both user IDs have recently been changed and tested to ensure you can access the appliance with each user ID.
    8. IMPORTANT: Download and save to another computer any extra or unneeded files. You will want to delete the files from the appliance to make room for the upgrade.

      Freeing space and saving off unneeded files is important. When you upgrade the firmware the appliance creates a "roll back image" which includes the files (for example any logs you might be writing on the appliance), user ids, passwords, etc. This will take up file space on the appliance. The appliance manages file space and you cannot determine all the file space used by a roll back image or other files which the appliance maintains.
      1. Read our technote: DataPower File system explained for more information. You will want to delete the files off the appliance to make room for the upgrade. This will also reduce your "rollback (boot switch) image size", Firmware upgrade process creates a boot switch image in case you want to return to previous configuration, firmware, and user files. You should remove unneeded files prior to an upgrade, thus allowing for more space in future upgrades. The amount of file system space needed to upgrade depends on the history of the appliance and previous firmware upgrades.
      2. Using the WebGUI File management option or CLI commands, remove any unneeded files you might have added from the local, store, and LogStore directories. The WebGUI will be easier to use for this step:
        • In the WebGUI navigate to File Management. You can download and delete from the menu options. Click on Help for more information.
        • From the CLI, issue for each directory and each file to obtain output of the files:
          config
          dir local:

          Review the output completely to determine what you can save then delete. See our technote on copying files to and from the appliance.
          After the files have been safely stored, remove the files from the appliance using the delete command. For example if you have a file called oldfile in the local directory, then delete local:\\\oldfile
      3. Check if you have enough space.
        • From the WebGUI select: "Status->Filesystem Information".
        • Use the CLI: "show filesystem" command
      4. If you are not able to free up enough space by backing up or deleting unneeded files, double check again. You will need a backup of the appliance stored on a computer or server before using these options:
        1. From the CLI issue these commands to remove the rollback image to free up more space.
          config
          flash
          boot delete
        2. You can delete domains, and then import the back-up zip after you have upgraded, via the WebGUI which provides options on what to import.
        3. You can "reinit" the appliance. See: Our resetting an IBM WebSphere DataPower SOA Appliance technote. This will clear the appliance and upgrade the firmware image.
    9. Save the configuration.
      • In the WebGUI, use the “Save Config” option from the top pull down.
      • From the CLI: write mem
    10. IMPORTANT: Remove the appliance from the business solution or other environment, so that no traffic is flowing to the device and only the user who is performing the upgrade is logged on.
      1. Remove the appliance from load balancers or network environment to stop traffic from going to the appliance.
      2. Check that there is no traffic flowing on the interfaces.
        • In the WebGUI, select Status > IP-Network > Ethernet Interfaces
        • From the CLI:
          show int
          show int mode
      3. Quiesce the appliance to stop services from processing traffic
    11. Reboot the appliance to free up resources.
      • In the WebGUI navigate to System Control, then under Shutdown reboot the system by setting the mode to Reboot system. Click the Shutdown button, read the pop-up prompts and click the appropriate button. Be sure to wait if the pop-up message informs you to wait before taking any actions.
      • From the CLI. issue shutdown reboot
    12. Wait for the appliance to reboot.
    13. When the appliance reboots, completes, and you have access to the WebGUI, or CLI, upload the firmware image:
      • In the WebGUI: navigate to System Control. Next in the Boot Image section click Upload or Fetch to load the image file to the appliance.
      • From the CLI: use the best copy method to move the image file to the image directory. See our technote on copying files to and from the appliance.
    14. Make sure that the firmware image file is loaded and boot (install) the image:
      • In the WebGUI, in the Boot Image section pull down and install the new Firmware by clicking on the "Accept License" check box and then click Boot Image, Read the pop-up prompts and click the appropriate button. Be sure to wait if the pop-up message informs you to wait before taking any actions. Do not click on the Close button on the pop-up status notices. The status pop-up will change to a complete status, and you can then click OK.
      • From the CLI:
        config
        dir image:
        if the image is found, then you can issue:
        flash
        boot image accept-license <image name>
    15. Wait for the appliance to reboot and for the appliance to restart.
    16. Verify the firmware upgrade was successful:
      • In the WebGUI navigate to "version information".
      • From the CLI, use the show version command.
    17. Un-quiesce the appliance to bring the services online
    18. Add the appliance back to the business solution (add back to the load balancers or network environment).
    19. Test and verify the appliance operates correctly per your company's procedures.

    Note: If, for some reason, you need to go back to the previous firmware level and its configuration, you can toggle between releases by rolling back and forth between the current and the previous image. This includes rolling back between major releases.
    • In the WebGui:
      1. from the Control Panel, choose System Control.
      2. in the Firmware Roll-Back section click the "Firmware Roll-Back" button to toggle between images.
    • Using the CLI:
      1. Enter the command "CO".
      2. Enter the command "flash" press enter.
      3. Enter the command "boot switch" press enter.
     

     

  • - Resolution To Common Problems


    If the firmware did not upgrade or you have experienced problems after upgrading. Review this information.


    • A. Check the following first.
      1. IMPORTANT: After any failed upgrade attempts, reboot (shutdown reboot) the appliance.
      2. Check that you followed each step in the section "Step 4. Install The Firmware Image". Perform a reboot (shutdown reboot) and try all the steps again.
      3. When upgrading the firmware on an appliance, make sure you wait until the firmware upgrade completes before entering other commands. In some cases the new majore release
      4. If the upgrade is not working, check the throttle settings and turn them off temporarily while uploading the image file and upgrading the firmware in Objects -> System Settings-> Throttle Settings. Perform a shutdown reboot, then follow the steps in "Step 4. Install The Firmware Image".
      B. Memory and File space
      • Memory: In step 4, there are steps to make sure the appliance is not being used, no traffic, domains disabled, only the person doing the upgrade is logged on, and various times were a reboot is required. This will reduce memory usage.
      • File system space: In Step 4 there are suggestions on which directories to look at with all the stakeholders which use the appliance. There is a link to a technote on looking at file system use. With your team you can determine which files to store off the appliance or are no longer needed.
      • For virtual appliances upgrading to some major releases you may not have the space to upload the new image and in this case contact support for a tool to expand the temporary space on the appliance.
      C. Did you receive an error message?
      1. "extracting firmware firmware parsing error":
        If you see a message indicating " extracting firmware firmware parsing error": Download the image file again. The file size should be close to the same size as on Fix Central. They will not be exact, but should be very close. Another possibility is that theWebGui session timed out before the firmware image was completely uploaded. Try increasing the WebGui time out and uploading the image file again.Perform a shutdown reboot, then follow the steps in "Step 4. Install The Firmware Image".
      2. "Error while processing Action ... Validate boot image failed "Validation Failed":
        If you see this message, the image file might not have downloaded completely from Fix Central. Download a new copy of the file. The file size should be close to the same size as on Fix Central. Another possibility is that theWebGui session timed out before the firmware image was completely uploaded. Try increasing the WebGui time out and uploading the image file again. Perform a shutdown reboot, then follow the steps in "Step 4. Install The Firmware Image".
      3. Warnings have been detected: Would you like to continue? Firmware does not contain supported feature '_____':
        This message indicates that the firmware image is not a match to the appliance. See section 2 "Step 2. Identify The Firmware Image File Which Matches Your Appliance". Download a matching image. Perform a shutdown reboot, then follow the steps in "Step 4. Install The Firmware Image".
      4. Upgrade failure in dynamic loader: Preserve user modified data failed The dynamic loader failed to upgrade the system (-1):
        If the upgrade did not work and you see this message, the resident loader will be used instead. Confirm that the firmware upgrade was successful by checking the appliance firmware level via the WebGUI or "show version" CLI command. This message is informational.
      5. Upgrade failure in dynamic loader: Switch active firmware failed The dynamic loader failed to upgrade the system (-1):
        If you see this message after upgrading, the resident loader will be used instead ...": Confirm that the firmware upgrade was successful by checking the appliance firmware level via the WebGUI or "show version" CLI command. This message is informational.
      6. Loading firmware failed: Preserve user modified data failed: Insufficient flash space available Could not install firmware image. The system will not reboot. ",
        There is not enough space available to upgrade the appliance. Follow the steps in "Step 4. Install the Firmware Image" which describe how to save files and free up space. Additional symptom: Preserve user modified data failed
      7. Wed Oct 15 2008 22:27:01 [crypto][error] certificate( yourcertname): tid(123): certificate 'pubcert:///yourcertname.pem' is expired":
        See this technote: Public certificates and the DataPower Gateway.
      8. % Loading firmware failed: Internal receive API error (3)
        The API error (3) is due to a time-out. The time-out happens when copying files for the rollback feature, when there is a large number of files to process. When the device reboots, the upgrade will continue and should be successful. Use the WebGUI or the CLI commands " show version" and "show license" to confirm upgrade was complete. If the upgrade is not successful, you might need more space. Perform a shutdown reboot, then follow the steps in "Step 4. Install The Firmware Image".
      9. % Loading firmware failed: Extract firmware failed: Archive extraction
        There is not enough space available to upgrade the appliance. Follow the steps in "Step 4. Install the Firmware Image" which describe how to save files and free up space.
      D. Objects not showing after an upgrade?
      1. Domains do not show:
        If after upgrading the firmware, the domains you have configured do not appear: From the WebGUI create each domain with the same name again. The domains and services previously configured should now appear. Otherwise follow these steps to contact IBM WebSphere DataPower SOA Appliance Support.
      2. Folders and files:
        Unable to access the folders/files on particular domain after upgrading firmware:
        While upgrading DataPower firmware, you might notice that the following message does not show up on a particular domain in an error report.
        For example, on the "yourTestDomainName" domain:
        [yourTestDomainName][mgmt][info] raid-volume(raid0): trans(12345): Installed storage volume access link logstore://ondisk
        This missing ondisk subdirectory is caused by an asynchronous issue due to a race condition during boot time. A work around method is to issue the 'shutdown reboot' command. The hard disk folders/files should be available after the appliance restarts.
      E. Connection problems after upgrade:
      1. SSL connection errors after upgrade to firmware V4. If you are upgrading to V4 firmware see this technote to change your configuration: SSL connection problems. Examples of connection errors are: http error 0x80e00130 or "SSL client refused to connect to an insecure SSL Server"
      2. Unable to connect using WebGUI or ssh after upgrading firmware:
        This can occur if you are using a custom cert or authentication for the management services, if any of the associated certs have expired. Expired certs are removed at upgrade time.
        The first step is to verify that the network is functioning correctly using these commands:
        show int
        show int mode
        show route

        These commands will show if there is any network activity as well as the connection details such as link speed. Once the network is confirmed the quickest way to recover the web management (WebGUI) and ssh services is to delete them and recreate them with the default settings using the serial console. These commands will reset the RBM's, ACL's, WebGUI and ssh services all to the default settings. Note: If the ssh is working you may omit any commands containing ssh.

        config
        web-mgmt
        no ssl
        exit
        write mem
        y
        no web-mgmt
        no ssh
        rbm
        reset
        exit
        acl web-mgmt
        reset
        exit
        acl ssh
        reset
        exit
        write mem
        (key step to remove the current settings)
        y
        web-mgmt
        <ip to listen on or 0.0.0.0 for all> <port to use default is 9090>
        ssh <ip to listen on or 0.0.0.0 for all> <port to use default is 22>
        write mem
        y

        Once complete, test the service and confirm you can now access the appliance. Then you may work to configure any custom certs or authentication settings desired.
      F. Other problems during upgrade:
      1. If you are following all the steps in this technote using the WebGUI and the upgrade is still not successful, reboot the appliance, then upload the image via the WebGUI, and use the following CLI commands to upgrade the firmware. (Note: When uploading the firmware image you may rename it to make typing it into the CLI command easier.) If the upgrade fails, save any messages from this session to assist in troubleshooting the upgrade issue.
        config
        flash
        boot image
        accept-license <image name>
     

     

  • - Considerations when using scripts or programs

    1. If you are using scripts or programs to upgrade the appliance firmware, the programs should be designed to follow the same steps a person would perform to prepare the appliance for an upgrade. See Step 4 in this technote.
    2. See Step 4 for information on prerequisite firmware or other upgrade actions.

     

Original Publication Date

02 June 2012

Internal Use Only


http://www.ibm.com/support/docview.wss?rs=2362&uid=swg21497539
Firmware 4.0.0 changes the default behavior for DataPower SSL connectivity

Firmware
============

Replaced the V6 firmware information section:

V6 firmware information:

  • Prerequisite firmware: If you are upgrading to V6 firmware the appliances and Virtual Appliance must have a pre-req firmware image installed first.
  • All M/T 9235, 7198, and 7198 must be running 3.8.2.18, 4.0.1.16, 4.0.2.12, 5.0.0.0, or later.
  • All Virtual Appliance must be running 5.0.0.8 or later.
  • M/T 4195 with the DCO license must be running 4.0.1.17, 4.0.2.13, 5.0.0.8, or later.
  • M/T 4195 without the DCO license must be running 3.8.2.18, 4.0.1.16, 4.0.2.12, 5.0.0.0, or later.
  • Limitation: Upgrading using AMP, WAMT, WAMC might not work. This limitation will be removed in a future fix pack with APAR IC92167.

[{"Business Unit":{"code":"BU004","label":"Hybrid Cloud"},"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateways"},"Component":"General","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"7.7;7.6;7.5.2;7.5.1;7.5;7.2;7.1;2018.4","Edition":"Edition Independent"}]

Document Information

Modified date:
04 September 2019

UID

swg27015333