13.4 Upgrading the Appliance Installation

This section provides the following information:

13.4.1 Running the Appliance Configuration Utility

The appliance configuration utility migrates alerts data from MongoDB to PostgreSQL

To run the utility:

  1. Download the migration file changeguardian_appliance_configuration_utility_6000-01.tar.gz from Change Guardian downloads page.

  2. Log in to the server as root.

  3. Extract the files to your local server:

    tar -zxvf changeguardian_appliance_configuration_utility_6000-01.tar.gz

  4. Change to the directory where the file was extracted.

  5. Run the migration utility:

    ./cg6000_appliance_configuration.sh

  6. To select the desired migration option, enter 1, 2, or 4.

  7. (Conditional) If data migration is not successful, clean up data from PostgreSQL.

  8. (Conditional) The data in MongoDB is redundant because Change Guardian 6.0 stores data only in PostgreSQL. To remove redundant data from MongoDB, clear the disk space:

    ./mongodb_cleanup.sh

WARNING:After you migrate data, you must upgrade Change Guardian before you start or restart Change Guardian.

13.4.2 Applying Updates

The following are the two methods in which you can apply updates:

Applying Updates By Using the Change Guardian Appliance Console

To apply updates:

  1. Register to the Change Guardian appliance update channel.

  2. Get the Change Guardian and the operating system updates from the appliance update channel.

  3. Log in to the Change Guardian Appliance Console as vaadmin or root user using the following URL: https://IP_Address_Change_Guardian_server:9443.

  4. Click Online Update.

  5. Select Needed Patches from the drop-down list and click Update Now.

  6. Select Needed Patches from the drop-down list to ensure that there are no pending updates.

  7. Log in to the Change Guardian server as root.

  8. Install the operating system package updates:

    zypper up

Applying Updates Using Zypper

Zypper is a command-line package manager that allows you to perform an interactive upgrade of the Change Guardian appliance.

To update the appliance:

  1. Register to the Change Guardian appliance update channel.

  2. Get the Change Guardian and the operating system updates from the appliance update channel.

  3. Log in to the Change Guardian server as root.

  4. Check for available updates:

    zypper lp

  5. Run the following command:

    zypper patch

    This checks the installed packages and resolves any file conflicts.

  6. Rerun the command to install appliance updates:

    zypper patch

  7. Install the operating system updates:

    zypper up

  8. Restart the Change Guardian appliance:

    reboot

For more information about Zypper, see Zypper Cheat Sheet.

Performing Offline Updates

You can perform an update by using an offline ISO file under the following conditions:

  • When there is no internet access and you are unable to register the appliance.

  • When you prefer not to download the latest release available in the appliance download repository, but an earlier release. For more information, see Product Support Lifecycle.

  • When the current version that you are running is incompatible with the latest version, download a version that is compatible and then upgrade it to the latest version. For more information, see Product Support Lifecycle.

While applying the patch, if you encounter registry/repository issues, clear the registry and repository entries in your system.

To clean up the registration and repository details on the appliance:

  • Take a backup of the files before clearing the registry entries and create a backup directory. For example: mkdir /etc/zypp/backup

  • Copy the following registry files to the backup directory. For example:

    • cp /etc/zypp/credentials.d /etc/zypp/backup

    • cp /etc/zypp/repos.d/* /etc/zypp/backup

    • cp /etc/zypp/services.d/* /etc/zypp/backup

  • Delete the following registry files:

    rm -fr /etc/zypp/credentials.d

    rm -fr /etc/zypp/repos.d/*

    rm -fr /etc/zypp/services.d/*

For more information, contact Technical Support.

Applying the ISO Patch

Pre-requisites:

Download and run the utility change_guardian_appliance_configuration_utility-<version>.tar.gz from Change Guardian downloads page.

  1. Download the patch to a directory. For example: <directoryname>/change_guardian_offline_appliance-<version>.iso

  2. Create a directory for mounting the CD using a command. For example: mkdir -p /opt/trial

  3. Mount the patch CD locally using a command. For example:

    mount <directoryname>/change_guardian_offline_appliance-<version>.iso /opt/trial

  4. Add the product and operating system repositories. For example:

    zypper ar -c -t plaindir "/opt/trial/product-repo" "<product repository>"

    zypper ar -c -t plaindir "/opt/trial/osupdate-repo" "<operating system repository>"

  5. (Optional) Confirm if the repos are added successfully using the command: zypper repos

  6. Check if the patches are bundled in the patch CD using the command: zypper lp

  7. Run command zypper patch. This checks the installed packages and resolves any file conflicts.

  8. Rerun the command to install appliance updates: zypper patch

  9. Install the operating system updates: zypper up

  10. Clean up the repositories list using the following command:

    zypper rr "<product repository>"

    zypper rr "<operating system repository>"

  11. Start Change Guardian services before reboot: rcsentinel start

  12. After the update is complete, reboot the machine using the command: reboot