33.3 Upgrading a Sentinel HA Appliance Installation

You can upgrade a Sentinel HA appliance installation by using the Zypper patch and also through WebYast.

33.3.1 Upgrading Sentinel HA Appliance by Using Zypper

You must register all the appliance nodes through WebYast before the upgrade. For more information, see Section 14.3.4, Registering for Updates. If you do not register the appliance, Sentinel displays a yellow warning.

  1. Enable the maintenance mode on the cluster.

    crm configure property maintenance-mode=true

    Maintenance mode helps you to avoid any disturbance to the running cluster resources while you update the Sentinel software. You can run this command from any cluster node.

  2. Verify whether the maintenance mode is active.

    crm status

    The cluster resources should appear in the unmanaged state.

  3. Upgrade the passive cluster node:

    1. Stop the cluster stack.

      rcopenais stop

      Stopping the cluster stack ensures that the cluster resources remain inaccessible and avoids fencing of nodes.

    2. Download updates for the Sentinel HA appliance.

      zypper -v patch

    3. (Conditional) If the installer displays a message that you must resolve dependency for the OpenSSH package, enter the appropriate option to downgrade the OpenSSH package.

    4. (Conditional) If the installer displays a message that indicates change in the ncgOverlay architecture, enter the appropriate option to accept the architecture change.

    5. (Conditional) If the installer displays a message that you must resolve dependency for some appliance packages, enter the appropriate option to uninstall the dependent packages.

    6. After the upgrade is complete, start the cluster stack.

      rcopenais start

  4. Repeat Step 3 for all the passive cluster nodes.

  5. Upgrade the active cluster node:

    1. Back up your configuration, then create an ESM export.

      For more information on backing up data, see Backing Up and Restoring Data in the NetIQ Sentinel Administration Guide.

    2. Stop the cluster stack.

      rcopenais stop

      Stopping the cluster stack ensures that the cluster resources remain inaccessible and avoids fencing of nodes.

    3. Download updates for the Sentinel HA appliance.

      zypper -v patch

    4. (Conditional) If the installer displays a message that you must resolve dependency for the OpenSSH package, enter the appropriate option to downgrade the OpenSSH package.

    5. (Conditional) If the installer displays a message that indicates change in the ncgOverlay architecture, enter the appropriate option to accept the architecture change.

    6. (Conditional) If the installer displays a message that you must resolve dependency for some appliance packages, enter the appropriate option to uninstall the dependent packages.

    7. After the upgrade is complete, start the cluster stack.

      rcopenais start

    8. Run the following command to synchronize any changes in the configuration files:

      csync2 -x -v

  6. Disable the maintenance mode on the cluster.

    crm configure property maintenance-mode=false

    You can run this command from any cluster node.

  7. Verify whether the maintenance mode is inactive.

    crm status

    The cluster resources should appear in the Started state.

  8. (Optional) Verify whether the Sentinel upgrade is successful:

    rcsentinel version

33.3.2 Upgrading Sentinel HA Appliance Through WebYast

You must register all the appliance nodes through WebYast before the upgrade. For more information, see Section 14.3.4, Registering for Updates. If you do not register the appliance, Sentinel displays a yellow warning.

  1. Enable the maintenance mode on the cluster.

    crm configure property maintenance-mode=true
    

    Maintenance mode helps you to avoid any disturbance to the running cluster resources while you update the Sentinel software. You can run this command from any cluster node.

  2. Verify whether the maintenance mode is active.

    crm status
    

    The cluster resources should appear in the unmanaged state.

  3. Upgrade the passive cluster nodes:

    1. Stop the cluster stack.

      rcopenais stop
      

      Stopping the cluster stack ensures that the cluster resources remain accessible and avoids fencing of nodes.

    2. Specify the URL of passive cluster node using port 4984 to launch WebYaST as https://<IP_address>:4984, where <IP_address> is the IP address of passive cluster node. Log in to the Sentinel appliance as an administrator.

    3. To check whether there are any updates, click Updates.

    4. Select and apply the updates.

      The updates might take few minutes to complete. After the update is successful, the WebYaST login page appears.

    5. After the upgrade is complete, restart the cluster stack.

      rcopenais start
      

      Repeat Step 4 for all passive cluster nodes.

  4. Upgrade the active cluster node:

    1. Back up your configuration, then create an ESM export.

      For more information on backing up data, see Backing Up and Restoring Data in the NetIQ Sentinel Administration Guide.

    2. Stop the cluster stack.

      rcopenais stop
      

      Stopping the cluster stack ensures that the cluster resources remain accessible and avoids fencing of nodes.

    3. Log in to the Sentinel appliance as an administrator.

    4. To upgrade the Sentinel appliance, click Appliance to launch WebYaST.

    5. To check whether there are any updates, click Updates.

    6. Select and apply the updates.

      The updates might take few minutes to complete. After the update is successful, the WebYaST login page appears.

      Before upgrading the appliance, WebYaST automatically stops the Sentinel service. You must manually restart this service after the upgrade is complete.

    7. Clear your web browser cache to view the latest Sentinel version.

    8. After the upgrade is complete, restart the cluster stack.

      rcopenais start
      
    9. Run the following command to synchronize any changes in the configuration files:

      csync2 -x -v
      
  5. Disable the maintenance mode on the cluster.

    crm configure property maintenance-mode=false
    

    You can run this command from any cluster node.

  6. Verify whether the maintenance mode is inactive.

    crm status
    

    The cluster resources should appear in the Started state.

  7. (Optional) Verify whether the Sentinel upgrade is successful:

    rcsentinel version