6.5 Applying Appliance Updates

You can apply updates in any of the following ways:

  • Using the Appliance Management Console.

  • Using Zypper on the Command Line Interface.

Further, in secured environments where the appliance must run without direct Internet access, you can configure the appliance with the Subscription Management Tool (SMT) to receive updates. For other offline appliance update options, you may contact Technical Support.

6.5.1 Applying Updates Using the Appliance Management Console

  1. Log in to the Change Guardian Appliance Management Console as the vaadmin or root user.

  2. Click Online Update.

  3. Select Needed Patches from the drop-down list and click Update Now.

  4. Verify whether updates are installed using CAF or Zypper.

6.5.2 Applying Updates Using Zypper

You can upgrade Change Guardian by using Zypper. Zypper is a command line package manager that allows you to perform an interactive upgrade of appliance. In instances where user interaction is required to complete the upgrade, such as an end user license agreement update, you must use Zypper to upgrade the Change Guardian appliance.

For information about which methods of upgrade are supported for a release, see the Release Notes.

NOTE:Ensure you apply updates only after upgrading Change Guardian, the operating system and then running the appliance configuration utility.

To update the appliance using zypper, perform the following steps:

  1. Ensure that you have upgraded Change Guardian to version 5.1 or later.

  2. Log in to the appliance as root.

  3. To check for available updates, run the command zypper lp.

  4. Install the updates by running the command zypper patch.

    WARNING:Always use the zypper patch command to upgrade the Change Guardian appliance. The zypper up command is not compatible with the Change Guardian appliance and might cause serious damage to your environment.

  5. Restart the Change Guardian appliance by running the command reboot.

For more information, see the Zypper Cheat Sheet.

For more information on appliance upgrade using SMT, see Configuring the Appliance with SMT

6.5.3 Configuring the Appliance with SMT and Applying Updates

SMT enables you to upgrade the appliance to the latest versions of Change Guardian as they are released. SMT is a package proxy system that is integrated with Customer Center and provides key Customer Center capabilities.

Prerequisites

Before you configure the appliance with SMT, ensure that you meet the following prerequisites:

  • Get the Customer Center credentials to get Change Guardian updates. For more information about getting the credentials, contact Technical Support.

  • Ensure that SLES 11 SP3 is installed with the following packages on the computer where you want to install SMT:

    • htmldoc

    • perl-DBIx-Transaction

    • perl-File-Basename-Object

    • perl-DBIx-Migration-Director

    • perl-MIME-Lite

    • perl-Text-ASCIITable

    • yum-metadata-parser

    • createrepo

    • perl-DBI

    • apache2-prefork

    • libapr1

    • perl-Data-ShowTable

    • perl-Net-Daemon

    • perl-Tie-IxHash

    • fltk

    • libapr-util1

    • perl-PIRPC

    • apache2-mod_perl

    • apache2-utils

    • apache2

    • perl-DBD-mysql

  • Install SMT and configure the SMT server. For more information, see the following sections in the SMT documentation:

    • SMT Installation

    • SMT Server Configuration

    • Mirroring Installation and Update Repositories with SMT

  • Install the wget utility on the appliance computer.

Configuring the Appliance with SMT

Perform the following steps to configure the appliance with SMT:

  1. Ensure you meet all Prerequisites

  2. Enable the appliance repositories by running the following commands in the SMT server:

    smt-repos -e Change-Guardian-Server-5-OS-Updates/sle-12-x86_64

    smt-repos -e Change-Guardian-Server-5-Prod-Updates/sle-12-x86_64

  3. Configure the appliance with SMT by performing the steps in the Configuring Clients to Use SMT section in the SMT documentation.

Applying Updates Using SMT

For secure environments where the appliance must run without direct Internet access, configure the appliance using the Subscription Management Tool (SMT).

  1. Ensure that the appliance is configured with SMT.

    For more information, see Configuring the Appliance with SMT and Applying Updates

  2. Back up your configuration.

    For more information, see Section 20.0, Backing Up and Restoring Data

  3. Log in to the appliance console as the root user.

  4. Refresh the repository for upgrade with the following command: zypper ref -s

  5. Check whether the appliance is enabled for upgrade with the following command: zypper lr

  6. Check the available updates for the appliance with the following command: zypper lu

  7. Check the packages that include the available updates for the appliance with the following command: zypper lp -r SMT-http_smt_server_fqdn:package_name

  8. Update the appliance with the following command: zypper up -t patch -r SMT-http_smt_server_fqdn:package_name

  9. Restart the appliance.