SecureTransprt Versin 5.3.6 25 January 2018 Upgrade Guide
Cpyright 2017 Axway All rights reserved. This dcumentatin describes the fllwing Axway sftware: Axway SecureTransprt 5.3.6 N part f this publicatin may be reprduced, transmitted, stred in a retrieval system, r translated int any human r cmputer language, in any frm r by any means, electrnic, mechanical, magnetic, ptical, chemical, manual, r therwise, withut the prir written permissin f the cpyright wner, Axway. This dcument, prvided fr infrmatinal purpses nly, may be subject t significant mdificatin. The descriptins and infrmatin in this dcument may nt necessarily accurately represent r reflect the current r planned functins f this prduct. Axway may change this publicatin, the prduct described herein, r bth. These changes will be incrprated in new versins f this dcument. Axway des nt warrant that this dcument is errr free. Axway recgnizes the rights f the hlders f all trademarks used in its publicatins. The dcumentatin may prvide hyperlinks t third-party web sites r access t third-party cntent. Links and access t these sites are prvided fr yur cnvenience nly. Axway des nt cntrl, endrse r guarantee cntent fund in such sites. Axway is nt respnsible fr any cntent, assciated links, resurces r services assciated with a third-party site. Axway shall nt be liable fr any lss r damage f any srt assciated with yur use f third-party cntent.
Cntents Preface 4 Wh shuld read this guide 4 Related dcumentatin 4 Get mre help 5 Training 6 Accessibility 7 Dcumentatin accessibility 7 Keybard-nly navigatin 7 Screen reader supprt 7 Supprt fr high cntrast and accessible use f clrs 7 1 Plan the upgrade 8 Shuld I upgrade? 8 Minimum versin requirement 8 Upgrade methds 8 Prduct dwntime cnsideratins 9 Acquire a license 9 Dwnlad the upgrade pack 9 Incmpatibilities 9 2 Upgrade prerequisites 12 Back up the existing installatin befre upgrading 13 3 Upgrade 16 Upgrade SecureTransprt n a UNIX-based platfrm 16 Upgrade SecureTransprt n Windws 17 Upgrade frm SecureTransprt 5.3.3 r abve using the cnsle 18 Upgrade frm SecureTransprt 5.3.3 r abve using the GUI 18 Upgrade in Streaming, Standard Cluster, and Enterprise Cluster envirnments 20 Streaming 20 Standard Cluster 20 Enterprise Cluster 21 4 After yu upgrade SecureTransprt 22 5 Recver yur previus SecureTransprt installatin 23 Axway SecureTransprt 5.3.6 Upgrade Guide 3
Preface This guide prvides instructins fr upgrading the SecureTransprt sftware and prvides infrmatin n the fllwing tpics: Upgrade tasks and upgrade prerequisites Upgrading SecureTransprt frm previus versins f SecureTransprt These tasks are cvered fr all supprted platfrms: Axway Appliances, IBM AIX, Micrsft Windws, Oracle Linux, Oracle Slaris (previusly Sun Slaris), Red Hat Enterprise Linux (RHEL), and SUSE Linux Enterprise Server (SLES). This chapter prvides general infrmatin abut SecureTransprt, a descriptin f the dcumentatin set, and cntact infrmatin fr btaining technical supprt fr SecureTransprt. Wh shuld read this guide This guide is intended fr system administratrs wh upgrade SecureTransprt. As a persn respnsible fr upgrading SecureTransprt, yu must have a wrking knwledge f system platfrms and netwrks used by yur SecureTransprt instances. Yu must have administrative privileges n the cmputers where yu will upgrade SecureTransprt and apprpriate access t systems that SecureTransprt depends n, such as an external database and file system. This guide is als intended fr enterprise persnnel invlved in upgrading sftware and Axway Prfessinal Services persnnel. Familiarity with Axway prducts is recmmended. This guide presumes yu have knwledge f: Yur cmpany s business prcesses and practices Yur cmpany s hardware, sftware, and IT plicies The Internet, including use f a brwser Others wh may find parts f this guide useful include netwrk r systems administratrs and ther technical r business users. Related dcumentatin SecureTransprt prvides the fllwing dcumentatin: SecureTransprt Administratr's Guide This guide describes hw t use the SecureTransprt Administratin Tl t cnfigure and administer yur SecureTransprt Server. The cntent f this guide is als available in the Administratin Tl nline help. Axway SecureTransprt 5.3.6 Upgrade Guide 4
Preface SecureTransprt RE API dcumentatin The prtal published API dcumentatin derived frm the API swagger dcuments. T access the administratr API dcumentatin, g t SecureTransprt Administratr API v1.4. T access the end-user API dcumentatin, g t SecureTransprt End-User API v1.4. SecureTransprt Appliance Guide This guide prvides the SecureTransprt Appliance installatin, cnfiguratin, and peratin instructins. It als prvides SecureTransprt installatin and upgrade instructins fr Axway Appliances. SecureTransprt Capacity Planning Guide This guides prvides infrmatin useful when planning yur prductin envirnment fr SecureTransprt. SecureTransprt Develper's Guide This guide prvides the descriptins and usage f the plug-able infrmatin fr the SecureTransprt Pluggable Transfer Site and hw t implement a Pluggable Transfer Site. It als prvides Swagger RE API integratin instructins and custm Address Bk surce implementatin instructins. SecureTransprt Getting Started Guide This guide explains the initial setup and cnfiguratin f SecureTransprt using the SecureTransprt Administratr setup interface. SecureTransprt Installatin Guide This guide explains hw t install and uninstall SecureTransprt n UNIX-based platfrms and Micrsft Windws. SecureTransprt Release s This dcument cntains infrmatin abut new features and enhancements, infrmatin received after the finalizatin f the rest f the dcumentatin, and a list f knwn and fixed issues. SecureTransprt Security Guide This guide prvides security infrmatin necessary fr the secure peratin f the SecureTransprt prduct. SecureTransprt Sftware Develpment Kit (SDK) A set f sftware develpment tls and examples that allw extending SecureTransprt by cnsuming and implementing available APIs. SecureTransprt Upgrade Guide (This dcument) This guide explains hw t upgrade SecureTransprt n UNIX-based platfrms and Micrsft Windws. Web Client Cnfiguratin Guide - This guide describes hw t cnfigure and custmize the Web Client user interface. Web Client User Guide This guide describes hw t use the Web Client. G t Axway Supprt at supprt.axway.cm t view r dwnlad dcumentatin. The website requires lgin credentials and is fr custmers with active supprt cntracts. Get mre help G t Axway Supprt at supprt.axway.cm t get technical supprt, dwnlad sftware, dcumentatin, and knwledgebase articles. The website requires lgin credentials and is fr custmers with active supprt cntracts. The fllwing supprt services are available: Official dcumentatin Prduct dwnlads, service packs, and patches Axway SecureTransprt 5.3.6 Upgrade Guide 5
Preface Infrmatin abut supprted platfrms Knwledgebase articles Access t yur cases When yu cntact Axway Glbal Supprt with a prblem, be prepared t prvide the fllwing infrmatin fr mre efficient service: Prduct versin and build number Database type and versin Operating system type and versin Service packs and patches applied Descriptin f the sequence f actins and events that led t the prblem Symptms f the prblem Text f any errr r warning messages Descriptin f any attempts yu have made t fix the prblem and the results Training Axway ffers training acrss the glbe, including n-site instructr-led classes and self-paced nline learning. axway.cm/supprt-services/training Axway SecureTransprt 5.3.6 Upgrade Guide 6
Accessibility Axway strives t create accessible dcumentatin fr users. The fllwing describes the accessibility features f SecureTransprt dcumentatin. Dcumentatin accessibility The prduct dcumentatin prvides the fllwing accessibility features: Keybard-nly navigatin n page 7 Screen reader supprt n page 7 Supprt fr high cntrast and accessible use f clrs n page 7 The accessibility f the dcumentatin has been tested with JAWS. Keybard-nly navigatin The dcumentatin surce cde cntains ARIA (Accessible Rich Internet Applicatins) t imprve the natural tab rder and add fcus where needed. ARIA landmarks are used t identify the main elements f the nline help windws. Screen reader supprt The dcumentatin structure is clear and the surce cde f the nline help can be interpreted by JAWS. Alternative text is prvided fr images whenever necessary. The PDF dcuments are tagged t prvide a lgical reading rder. Supprt fr high cntrast and accessible use f clrs The dcumentatin can be used in high-cntrast mde. There is sufficient cntrast between the text and the backgrund clr. The graphics have the right level f cntrast and take int accunt the way clr-blind peple perceive clrs. Axway SecureTransprt 5.3.6 Upgrade Guide 7
Plan the upgrade 1 If yu are respnsible fr upgrading an existing SecureTransprt installatin t SecureTransprt 5.3.6, read this sectin t help yu plan yur upgrade activities. Shuld I upgrade? Befre yu upgrade, determine if upgrading is apprpriate fr yur envirnment and prductin requirements: Review the SecureTransprt Release s fr: New features Fixed issues Knwn limitatins Evaluate the effrt required fr this upgrade. Yu shuld cnsider: Length and impact f prduct dwn time Basic upgrade effrt Specific actins that might be required due t incmpatibilities r limitatins. See Incmpatibilities n page 9. Initial validatin and nn-regressin testing Upgrading yur different perating envirnments, fr example, test, and preprductin Minimum versin requirement T upgrade directly t SecureTransprt 5.3.6, yu must have SecureTransprt 5.3.3 with the latest patch installed r SecureTransprt 5.3.5 with the latest patch installed. See Incmpatibilities n page 9 fr a cmplete list f supprted upgrade paths. Upgrade methds There is currently ne methd fr upgrading t SecureTransprt 5.3.6 frm an earlier versin: Apply an upgrade pack When yu apply the upgrade pack, the upgrade lgic aut-detects and cnfigures settings and prepares the upgraded installatin fr use withut any additinal cnfiguratin. This includes the upgrading f clustered implementatins. Fr upgrade instructins using an upgrade pack, refer t Upgrade n page 16. Axway SecureTransprt 5.3.6 Upgrade Guide 8
1 Plan the upgrade See Incmpatibilities n page 9 t learn abut incmpatibilities between earlier versins f SecureTransprt and this versin. Prduct dwntime cnsideratins This sectin lists cnsideratins and prvides strategies fr perfrming upgrades with the minimal disruptin f yur prductin prcesses. Cnsideratins: Hw much time des the upgrade require? What scheduling cnstraints exist? Hw lng will it take t check the upgrade results? Hw lng will it take t rll back t the previus state if the upgrade fails? Strategies t reduce dwntime: Review the upgrade prerequisites. Refer t Upgrade prerequisites n page 12. Upgrade during a lw vlume time perid. Acquire a license A new license is nt required when upgrading SecureTransprt. Dwnlad the upgrade pack After reviewing Incmpatibilities n page 9, g t the Axway supprt site and dwnlad the upgrade pack fr yur perating system. Incmpatibilities This sectin describes incmpatibilities and upgrade paths between SecureTransprt 5.3.6 and: Other prducts that yu may be using with previus versins. Earlier versins f SecureTransprt. The supprted upgrade paths are: Axway SecureTransprt 5.3.6 Upgrade Guide 9
1 Plan the upgrade SecureTransprt versin (Appliance Platfrm versin) Upgrade path Prerequisites Step 1 Step 2 Step 3 Step 4 Step 5 5.1 any SP (AP Upgrade t 5.3.0 6.7.0) 5.1 SP 3 (AP 5.3.0 Patch 14 5.3.1 5.3.3 5.3.6 6.7.0) (AP 6.7.1) 6.7.1) 7.0.1) 7.0.1) 7.1.1) 5.2.1 any SP Upgrade t 5.3.0 (AP 6.7.0) 5.2.1 SP 6 r 5.3.0 Patch 14 5.3.1 5.3.3 5.3.6 latest (AP 6.7.0) (AP 6.7.1) 6.7.1) 7.0.1) 7.0.1) 7.1.1) 5.3.0 any Upgrade t 5.3.3 patch level (AP 5.3.0 latest patch 5.3.1 5.3.6 6.7.1) (AP 6.7.1) 7.0.1) 7.0.1) 7.1.1) 5.3.1 any Upgrade t 5.3.6 patch level (AP 5.3.1 latest patch 5.3.3 7.0.0) (AP 7.0.0) 7.1.1) 7.0.1) 5.3.3 any Upgrade t patch level (AP 5.3.3 latest patch 5.3.6 7.0.1) (AP 7.0.1) 7.1.1) 5.3.5 any Upgrade t patch level (AP 5.3.5 RA latest 5.3.6 7.0.3) patch (AP 7.0.3) 7.1.1) Review the upgrade infrmatin fr lder SecureTransprt versins in Axway Supprt at SecureTransprt dcumentatin. In case f questins, cntact Axway Glbal Supprt at supprt.axway.cm. s: Fr a cmplete list f supprted sftware, refer t Axway and third-party sftware supprt in the in the SecureTransprt Administratr's Guide. On upgrade t SecureTransprt 5.3.6, ciphers are added t and remved frm the existing cipher sets. Fr the SecureTransprt 5.3.6 list f ciphers, refer t SecureTransprt cipher suites in the SecureTransprt Administratr's Guide. Axway SecureTransprt 5.3.6 Upgrade Guide 10
1 Plan the upgrade After upgrade t SecureTransprt 5.3.6, when a prxy is cnfigured, direct cnnectins frm the SecureTransprt Backend are nt permitted even when the prxy is unreachable. T change the default behavir, set the Direct.Cnnectin.When.Prxy.Dwn server cnfiguratin parameter t true. Fr infrmatin n changing server cnfiguratin parameters, refer t View and change server cnfiguratin parameters in the SecureTransprt Administratr's Guide. In SecureTransprt 5.3.3 there is a structural change f database tables related t File Tracking. The data related t file transfers made befre upgrade, shuld be migrated t the new tables created after upgrade t SecureTransprt 5.3.3 fr them t be visible in File Tracking fr SecureTransprt 5.3.3 and abve. If the migratin is skipped, all the details related t the file transfers made befre the upgrade will NOT be visible n the Administratin Tl File Tracking page. Fr mre infrmatin, refer t Migratin f File Tracking entries after upgrade in the SecureTransprt 5.3.3 Installatin Guide. Axway SecureTransprt 5.3.6 Upgrade Guide 11
Upgrade prerequisites 2 Perfrm the fllwing befre yu upgrade: If SecureTransprt is already registered in Central Gvernance, disable integratin frm Admin Tl > Setup > Central Gvernance. Refer t the SecureTransprt Administratr's Guide, Central Gvernance cnfiguratin. Review the SecureTransprt Installatin Guide t ensure yur system meets all the preinstallatin requirements and yu have all the required infrmatin. Back up yur existing SecureTransprt installatin. T back up yur current SecureTransprt deplyment, fllw a backup prcedure applicable fr yur envirnment and make sure the backup is created at a time when all SecureTransprt services are stpped. In the rare case f an upgrade prcedure failure resulting in system instability f any kind, fllw the upgrade recvery prcedure. Security settings must als be backed up and reapplied after upgrade. The jdk.certpath.disabledalgrithms and jdk.tls.disabledalgrithms parameters in the Java/lib/security/java.security file must be backed up and reapplied. Transactin Manager rules and the <FILEDRIVEHOME>/brules/cnf/brules.xml settings file must als be backed and reapplied after upgrade. If yur SecureTransprt installatin uses an external database, upgrade the database prir t upgrading SecureTransprt. Refer t the dcumentatin fr yur database (Micrsft SQL Server r Oracle) fr the prcedure n upgrading the external database. Prir t upgrading the external database, backup the database. Refer t the dcumentatin fr yur database (Micrsft SQL Server r Oracle) fr the prcedure n backing up the external database. Make sure the prt number fr Tmcat JK2 is greater than 1024. (The default value is 8009.) Check the fllwing lcatins fr the prt numbers: In <FILEDRIVEHOME>/tmcat/admin/cnf/server.xml find Cnnectr prt= and jmvrute. If the Tmcat JK2 prt number shwn is less than r equal t 1024, change all ccurrences t a number greater than 1024. T ensure yur previus versin f SecureTransprt is nt running, execute the fllwing cmmand t stp all services: <FILEDRIVEHOME>/bin/stp_all Axway SecureTransprt 5.3.6 Upgrade Guide 12
2 Upgrade prerequisites Check fr leftver running prcesses and.pid files in the <FILEDRIVEHOME>/var/run flder. During a chained upgrade 5.2.1 > 5.3.1 > 5.3.3 > 5.3.6, remve the <AxwayHme>/Installer/xercesImpl-2.6.2.jar file befre launching the SecureTransprt 5.3.6 upgrade. Mve all flders and flders in the <FILEDRIVEHOME>/var/db/hist/* directry t utside the <FILEDRIVEHOME> path. The high vlume f files in the histry flders culd significantly slw dwn the upgrade prcess. Fr Windws upgrade, als perfrm the fllwing: Make sure the Cygwin cnsle and all Cygwin tls installed with yur previus SecureTransprt installatin, including the Cygwin crn service, are clsed. Check the Users tab in the Windws Task Manager t make sure n ne else is using Cygwin. If necessary, clse the Cygwin cnsle and tls manually. Make sure that n flder in <FILEDRIVEHOME> r <FILEDRIVEHOME>\..\cygwin is in use r pen in Windws Explrer r in a cmmand windw and that n file in thse flders is in use r pen in any applicatin. Clse Windws Explrer and any ther applicatin accessing the flders in questin. Make sure n SecureTransprt services, including Cygwin, are running Make sure yu have installed the Micrsft Visual C++ 2008 SP1 Redistributable Package (x64). Dwnlad the package at https://www.micrsft.cm/enus/dwnlad/details.aspx?id=2092 While it is nt recmmended t have antivirus sftware running n the same deplyment as SecureTransprt, in case yu are running as such, please make sure the antivirus sftware is stpped and disabled during the upgrade. Leaving the antivirus sftware running can cause the upgrade t fail. Fr IBM AIX appliance upgrades, als perfrm the fllwing: Lg nt the IBM AIX appliance as a superuser and execute the fllwing cmmands: n - udp_recvspace=65000 n - udp_sendspace=65000 The fllwing tpic prvides hw-t instructins fr backing up the existing installatin: Back up the existing installatin befre upgrading n page 13 - Prvides hw-t instructins fr backing up the existing installatin befre upgrading. Back up the existing installatin befre upgrading Back up yur previus installatin n UNIX-based platfrms befre upgrading. Fr UNIX-based platfrms including appliances: Axway SecureTransprt 5.3.6 Upgrade Guide 13
2 Upgrade prerequisites 1. Stp all the SecureTransprt services. <FILEDRIVEHOME>/bin/stp_all 2. Verify the all services are stpped by checking fr running prcesses and.pid files in the <FILEDRIVEHOME>/var/run directry. In rder t assure n prcesses are left running even in the rare case f missing files, check the prcess tree with the apprpriate OS tls fr running prcesses befre prceeding. 3. Back up the SecureTransprt directry by tarring the files r using anther backup methd. Name the backup archive SecureTransprt.tar. Yur backup must include the fllwing files: All files in <FILEDRIVEHOME> The fllwing file in the /etc directry and its subdirectries if present: /etc/rc.d/init.d/rc.stransprt The files in the /etc directry that end with the installatin name (Yu can use the find /etc -name "*<installatin name>" -print cmmand t find thse files.) The result f this cmmand may be empty if yu are using nn-rt deplyment, please prceed if this is the case. The rt crntab file r, fr a nn-rt installatin, the crntab file f the user wh runs SecureTransprt 4. Back up the Axway Installer directry by tarring the files r using anther backup methd. Name the backup archive Axway Installer.tar. 5. If an external database is used, the external database must be backed up accrding the apprpriate vendr's specific instructins. Fr Windws: 1. Stp all the SecureTransprt services. <FILEDRIVEHOME>\bin\stp_all Yu can als pen CMD as an administratr and run stp_all. 2. Verify the all services are stpped by checking fr running prcesses and.pid files in the <FILEDRIVEHOME>\var\run directry. In rder t assure n prcesses are left running even in the rare case f missing files, check the prcess tree with the apprpriate OS tls fr running prcesses befre prceeding. Axway SecureTransprt 5.3.6 Upgrade Guide 14
2 Upgrade prerequisites 3. Back up Windws registry entries. Run regedit.exe. a. Select each f the fllwing registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Axway Sftware HKEY_LOCAL_MACHINE\SOFTWARE\Micrsft\Windws\ CurrentVersin\Uninstall\ Axway_Installer_4.8.0 SecureTransprt01 HKEY_LOCAL_ MACHINE\SYEM\CurrentCntrlSet\services\cygwin_crn HKEY_LOCAL_ MACHINE\SYEM\CurrentCntrlSet\services\AxwaySecureTransprt* where AxwaySecureTransprt* represents all the registry entries that start with AxwaySecureTransprt. b. Right click each entry, select Exprt > Exprt Registry File, and save the registry entry t a safe lcatin. c. When yu are finished backing up the registry entries, exit regedit. 4. Back up files f the existing SecureTransprt installatin and installatin infrmatin by cpying the cntents f the fllwing directries, preserving the subdirectry structure, t a ZIP file r sme ther backup. Name the backup archive SecureTransprt.zip. C:\Axway\SecureTransprt 5. Back up the Axway hme directry. Name the backup archive Axway Installer.zip. 6. If an external database is used, the external database must be backed up accrding the apprpriate vendr's specific instructins. Axway SecureTransprt 5.3.6 Upgrade Guide 15
Upgrade 3 This tpic describes the upgrade prcedures fr SecureTransprt 5.3.6. The upgrade prcedure will require dwntime, s make sure yu plan fr it. The fllwing tpics describe the upgrade prcedures: Upgrade prerequisites n page 12 - Lists the SecureTransprt upgrade prerequisites. Upgrade SecureTransprt n a UNIX-based platfrm n page 16 - Prvides hw-t instructins fr upgrading SecureTransprt n a UNIX-based platfrm r Axway Appliance. Upgrade SecureTransprt n Windws n page 17 - Prvides hw-t instructins fr upgrading SecureTransprt n Windws. Upgrade in Streaming, Standard Cluster, and Enterprise Cluster envirnments n page 20 - Prvides hw-t instructins fr upgrading in Streaming, Standard Cluster, and EC envirnments. After yu upgrade SecureTransprt n page 22 - Prvides cleanup and access instructins after yu upgrade SecureTransprt. Upgrade SecureTransprt n a UNIX-based platfrm If yu are using an external database, the external database must be upgraded t a supprted versin (Micrsft SQL Server 2014 r Oracle 11g r 12c) prir t upgrading SecureTransprt t versin 5.3.6 r a new instance f the respective database shuld be deplyed and yu shuld migrate the existing SecureTransprt data t the new instance. Refer t the dcumentatin fr yur database (Micrsft SQL Server r Oracle) fr the upgrade r migratin prcedure. If additinal infrmatin is needed, cntact yur database vendr s supprt. Fr ROOT installatin, run the upgrade with ROOT user. After the upgrade finishes all binaries (bth SecureTransprt and Axway Installer) shuld be wned by the ROOT user. Fr NON-ROOT installatin, run the upgrade with NON-ROOT user. Attempts t run the upgrade with rt user will be successful and n errr message will be returned t yu. Hwever after the upgrade the permissins n installatin files will be wrng and yur installatin will be crrupt. If yu are upgrading an Axway Appliance, refer t the SecureTransprt Appliance Guide. 1. Lg n with the user that wns SecureTransprt services. 2. Dwnlad and cpy the SecureTransprt installer int a temprary directry. Axway SecureTransprt 5.3.6 Upgrade Guide 16
3 Upgrade SecureTransprt_5.3.6_UP1-frm-5.3.3_<OS>-<prcessr>_ <BuildNumber>.jar Where the variables represent the fllwing: <OS> is the perating system: aix (fr IBM AIX) r linux (fr RHEL and SUSE). <prcessr> is the type f prcessr running the perating system: pwer, sparc, r x86-64. <BuildNumber> is the actual build number listed in the installer executable file, fr example, Build1234. D nt place the binaries in the same flder where Axway Installer is installed. 3. Navigate t the Axway Installer directry in yur existing SecureTransprt installatin and run the fllwing cmmand t apply the update pack:./update.sh -i <path t the update pack named SecureTransprt_5.3.6_UP1-frm-5.3.3_<OS>-<prcessr>_ <BuildNumber>.jar> D nt run mre than ne instance f the SecureTransprt installer n a system at ne time. The upgrade fails when mre than ne instance is running. After this step, the SecureTransprt instance will be upgraded t 5.3.6. When the installatin is cmplete, a success message appears. When the installer cmpletes the installatin, it will start all services except fr TM. TM will need t be manually restarted. Als, all custm TM rules are disabled and need t be manually enabled. The lg file will be the <AxwayHme>/install.lg f the Axway Installer. Upgrade SecureTransprt n Windws If yu are using an external database, the external database must be upgraded t a supprted versin (Micrsft SQL Server 2014 r Oracle 11g r 12c) prir t upgrading SecureTransprt t versin 5.3.6 r a new instance f the respective database shuld be deplyed and yu shuld migrate the existing SecureTransprt data t the new instance. Refer t the dcumentatin fr yur database (Micrsft SQL Server r Oracle) fr the upgrade r migratin prcedure. If additinal infrmatin is needed, cntact yur database vendr s supprt. The fllwing tpics prvide instructins fr upgrading an existing SecureTransprt installatin: Upgrade frm SecureTransprt 5.3.3 r abve using the cnsle n page 18 - Prvides hw-t instructins fr upgrading frm SecureTransprt 5.3.3 using the cnsle. Axway SecureTransprt 5.3.6 Upgrade Guide 17
3 Upgrade Upgrade frm SecureTransprt 5.3.3 r abve using the GUI n page 18 - Prvides hw-t instructins fr upgrading frm SecureTransprt 5.3.3 using the GUI. Recver yur previus SecureTransprt installatin n page 23 - Prvides hw-t instructins fr recvering yur previus SecureTransprt installatin. Upgrade frm SecureTransprt 5.3.3 r abve using the cnsle On Micrsft Windws using the cnsle mde: 1. Execute the fllwing cmmand t stp all services: stp_all 2. Verify that the Cygwin cnsle and all Cygwin tls, including the Cygwin crn service, are clsed. 3. Dwnlad the file SecureTransprt_5.3.6_UP1-frm-5.3.3_win-x86-64_ <BuildNumber>.jar. Where the variable represent the fllwing: <BuildNumber> is the actual build number listed in the installer executable file, fr example, BN1234. 4. Navigate t the Axway Installer directry frm yur existing SecureTransprt installatin and run the fllwing cmmand t apply the update pack: update64.exe -i <path t the first update pack named SecureTransprt_ 5.3.6_UP1-frm-5.3.3_win-x86-64_<BuildNumber>.jar After Step 3 cmpletes, the SecureTransprt instance will be upgraded t 5.3.6. When the installatin is cmplete, a success message appears. When the installer cmpletes the installatin, it will start all services except fr TM. TM will need t be manually restarted. Als, all custm TM rules are disabled and need t be manually enabled. The lg file will be the <AxwayHme>/install.lg f the Axway Installer. Upgrade frm SecureTransprt 5.3.3 r abve using the GUI Fr Micrsft Windws using GUI mde: 1. Execute the fllwing cmmand t stp all services: stp_all Axway SecureTransprt 5.3.6 Upgrade Guide 18
3 Upgrade 2. Verify that the Cygwin cnsle and all Cygwin tls, including the Cygwin crn service, are clsed. 3. Dwnlad the file SecureTransprt_5.3.6_UP1-frm-5.3.3_win-x86-64_ <BuildNumber>.jar. Where the variable represent the fllwing: <BuildNumber> is the actual build number listed in the installer executable file, fr example, BN1234. 4. Select Start > All Prgrams > Axway Sftware > Axway <installatin_name> > Update. The Axway Installer starts in update mde and displays the Welcme page. 5. Click Next. The installer displays the Updates management page. 6. Click Select file. The installer displays the Select update file windw. 7. Brwse t and select the SecureTransprt_5.3.6_UP1-frm-5.3.3_win-x86-64_<BuildNumber>.jar file and click Open. 8. Click Next. The installer displays the Ready t update page. 9. Click Update t begin the update prcess. The installer displays a cnfirmatin windw. 10. If yu have stpped all SecureTransprt prcesses, click Yes. The installer displays the Update in Prgress page. When the update is cmplete, the installer displays the Update cmpleted page. 11. Click Next. The installer displays the Summary page. 12. Click Finish t exit the installer. After Step 11 cmpletes, SecureTransprt will be updated t versin 5.3.6. When the installatin is cmplete, a success message appears. When the installer cmpletes the installatin, it will start all services except fr TM. TM will need t be manually restarted. Als, all custm TM rules are disabled and need t be manually enabled. The lg file will be the <AxwayHme>/install.lg f the Axway Installer. Axway SecureTransprt 5.3.6 Upgrade Guide 19
3 Upgrade Upgrade in Streaming, Standard Cluster, and Enterprise Cluster envirnments This sectin describes the ptins fr upgrading in Streaming, Standard Cluster, and Enterprise Cluster (EC) envirnments. If yu are using an external database, the external database must be upgraded t a supprted versin (Micrsft SQL Server 2014 r Oracle 11g r 12c) prir t upgrading SecureTransprt t versin 5.3.6 r a new instance f the respective database shuld be deplyed and yu shuld migrate the existing SecureTransprt data t the new instance. Refer t the dcumentatin fr yur database (Micrsft SQL Server r Oracle) fr the upgrade r migratin prcedure. If additinal infrmatin is needed, cntact yur database vendr s supprt. Streaming In a streaming envirnment, stp all f the prtcl servers and services n all f the SecureTransprt Edges befre yu start upgrading. Update the SecureTransprt Server (backend) first and then update the SecureTransprt Edges. Once the upgrades are cmpleted, restart all servers and edges. Verify that an edge and server n different versins are never started tgether. Standard Cluster In a Standard Cluster envirnment, stp all f the prtcl servers and services n all f the ndes befre yu start updating. Fr Standard Clusters the fllwing tw ptins fr upgrade are supprted: Optin 1 (recmmended) Stp the ndes and upgrade the ndes ne at a time. After a nde is upgraded, stp all SecureTransprt services n the nde and prceed with the upgrade f the next nde in the cluster. Start all SecureTransprt services nly after the upgrade is applied n all the ndes in the cluster. After all nde upgrades are finished, d a manual sync. Only after yu have cmpleted a manual sync will yu have functinal and perating cluster. Optin 2: Dis-jin the cluster befre the upgrade by changing the cluster mde and deleting the nde entries in the servers file. Fr details, refer t the Remve a server frm an active/active cluster sectin in the SecureTransprt Administratr's Guide. Then upgrade all the ndes as standalne installatins. Axway SecureTransprt 5.3.6 Upgrade Guide 20
3 Upgrade Once the upgrades are cmpleted, jin the cluster back tgether and d a manual sync. The cluster is cnsidered upgraded and running nly after the successful manual sync. Fr details, refer t the Remve a server frm an active/active cluster sectin in the SecureTransprt Administratr's Guide. Enterprise Cluster The upgrade f an Enterprise Cluster (EC) cnsists f upgrading the ndes. The fllwing Enterprise Cluster upgrade ptin is supprted: Stp the ndes and upgrade the ndes ne at a time. After a nde is upgraded, stp all SecureTransprt services n the nde and prceed with the upgrade f the next nde in the cluster. Start all SecureTransprt services nly after the upgrade is applied n all the ndes in the cluster. Axway SecureTransprt 5.3.6 Upgrade Guide 21
After yu upgrade SecureTransprt 4 Fr nn-rt installatins, verify that all crntab entries are fr the user running the SecureTransprt installatin (this is the user as set in the user.txt file in yur FILEDRIVEHOME directry). Additinally, yu need t establish the Transactin Manager prtcl and prxy server cmmunicatin by starting the prtcl servers and services n the SecureTransprt Edges. Fr additinal infrmatin, refer t the SecureTransprt Administratr's Guide. Axway SecureTransprt 5.3.6 Upgrade Guide 22
Recver yur previus SecureTransprt installatin 5 If the upgrade fails, yu can recver yur backed-up SecureTransprt 5.3.3 r 5.3.5 installatin. Make sure yu uninstall SecureTransprt 5.3.6 befre yu attempt t recver. 1. Fr a SecureTransprt Server using an external Oracle database, restre the database using standard Oracle prcedures. Fr a SecureTransprt Server using an external Micrsft SQL Server database, restre the database using standard Micrsft prcedures. 2. Expand the SecureTransprt.zip file created during the backup prcedure and extract the files int the riginal installatin flder f yur previus SecureTransprt installatin. 3. Expand the Axway Installer.zip file created during the backup prcedure and extract the files int the riginal installer flder f yur previus installatin. 4. Run regedit.exe t start the Windws registry, and delete the fllwing registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Axway Sftware HKEY_LOCAL_MACHINE\SOFTWARE\Micrsft\Windws\CurrentVersin\ Uninstall\Axway_Installer_4.8.0 SecureTransprt01 5. Restre the registry entries that yu backed up. T imprt a registry entry int the Windws registry, duble-click the name f the respective.reg files yu saved when yu backed up yur installatin. 6. Make sure the file cygwin1.dll is included in yur PATH envirnment variable. Fr example: C:\Axway\SecureTransprt\cygwin\bin 7. Make sure the flder Server\bin is included in yur PATH envirnment variable. Fr example: C:\Axway\SecureTransprt\Server\bin 8. Install the SecureTransprt services: T install the services n a SecureTransprt Server installatin, navigate t the flder Server\bin, lcated in the SecureTransprt installatin flder, and duble-click the fllwing files: install_ftpd_service.cm install_httpd_service.cm install_sshd_service.cm Axway SecureTransprt 5.3.6 Upgrade Guide 23
5 Recver yur previus SecureTransprt installatin install_tm_service.cm install_admin_service.cm install_as2d_service.cm install_pesitd_service.cm T install SecureTransprt services n a SecureTransprt Edge installatin, navigate t the flder Server\bin, lcated in the SecureTransprt installatin flder, and duble-click the fllwing files: install_ftpd_service.cm install_httpd_service.cm install_sshd_service.cm install_admin_service.cm install_as2d_service.cm 9. Install Cygwin crn: a. Navigate t the cygwin\bin flder in the SecureTransprt installatin flder and duble-click the cygwin.bat file t start the Cygwin shell. b. In the Cygwin shell, execute the fllwing cmmand: cygrunsrv -I cygwin_crn -d \"Cygwin crn\" -p /usr/sbin/crn \ -a -D -f \"Cygwin Crn\" 10. Rebt yur system and start all SecureTransprt services. Fr mre infrmatin, refer t the SecureTransprt Administratr's Guide. Axway SecureTransprt 5.3.6 Upgrade Guide 24