Filter
Top Products
18 EncrypTight Manager Installation Guide
Optional - Verify the downloaded upgrade bin file.
• Download and scp the public key pubkey.txt over to the ETM server.
# scp pubkey.txt root@192.168.X.X:/opt/upgrade/
• Scp the external signature for the upgrade bin:
# scp policyserver-upgrade-<VERSION>.bin.asc root@192.168.X.X:/opt/upgrade/
• Import the public key and verify the upgrade bin:
# cd /opt/upgrade
# gpg --import pubkey.txt
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during
this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 9B705669: public key "Black Box (Policy Server)
<support@blackbox.com>" imported
gpg: Total number processed: 1
gpg: imported: 1
# gpg --verify policyserver-upgrade-<VERSION>.bin.asc policyserver-upgrade-
<VERSION>.bin
gpg: Signature made Mon 12 Dec 2011 03:19:38 PM EST using DSA key ID
9B705669
gpg: Good signature from "Black Box (Policy Server) <support@blackbox.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the
owner.
Primary key fingerprint: B7B6 1E4C EA5A 9FE0 19AB 6130 9830 42A5 9B70 5669
Execute the upgrade on the ETM server (Non-Cluster)
CAUTION
The ETM instance will be unavailable/restarted during the upgrade process.
• ssh to your ETM server as root
• Make sure the bin is executable:
# chmod +x policyserver-upgrade-<VERSION>.bin
• Run the desired policyserver-upgrade-<VERSION>.bin executable
• You will receive an Upgrade warning, type yes to continue
• When the upgrade has completed, the upgrade script will create a new directory, /opt/upgradebackup
where the previous instance is stored for rollback. If there is already a previously backed up
version(s), the new directory created will be /opt/upgradebackup_<TIMESTAMP>
EXAMPLE: Upgrade from 3.1.3451 to 3.2.3971:
[root@policyserver ~]# ./policyserver-upgrade-3.2.3971.bin
Verifying archive integrity... All good.
Uncompressing Upgrade to 3.2.3971........................................