28.4 Upgrading the Operating System

This version of Sentinel includes a set of commands to use during the operating system upgrade procedure. These commands ensure Sentinel works correctly after you upgrade the operating system.

NOTE:You must upgrade Sentinel before you upgrade the operating system.

Use the following steps to upgrade your operating system:

  1. On the Sentinel server where you want to upgrade your operating system, log in as one of the following:

    • root user

    • Non-root user

  2. Open a command prompt and change to the directory where the Sentinel install file was extracted.

  3. Stop the Sentinel services:

    rcsentinel stop

  4. (Conditional) If Sentinel was in FIPS mode before the operating system upgrade, NSS database files must be manually upgraded by running the following command:

    certutil -K -d sql:/etc/opt/novell/sentinel/3rdparty/nss -X

    Follow the on-screen instructions to upgrade the NSS database.

    Give full permissions to novell user for the following files:

    cert9.db
    key4.db 
    pkcs11.txt 
  5. Upgrade your operating system.

  6. (Conditional) If you use Mozilla Network Security Services (NSS) 3.29, two dependent RPM files libfreebl3-hmac and libsoftokn3-hmac are not installed. Manually install the following RPM files: libfreebl3-hmac and libsoftokn3-hmac.

  7. (Conditional) For RHEL 7.x, run the following command to check whether there are any errors in the RPM database:

    rpm -qa --dbpath <install_location>/rpm | grep novell

    Example: # rpm -qa --dbpath /custom/rpm | grep novell

    1. If there are any errors, run the following command to fix the errors:

      rpm --rebuilddb --dbpath <install_location>/rpm

      Example: # rpm --rebuilddb --dbpath /custom/rpm

    2. Run the command mentioned in Step 7 to ensure that there are no errors.

  8. Repeat this procedure on the following:

    • Collector Managers

    • Correlation Engines

    • NetFlow Collector Managers

  9. Restart the Sentinel service:

    rcsentinel restart

    This step is not applicable for Sentinel HA.