See below for instructions on upgrading your installation to PKI Hub 1.3.
Performing previous upgrades
Cryptographic Security Platform 1.2.1 - PKI Hub 1.3.1 supports upgrading from the following versions.
- Cryptographic Security Platform 1.1.0 - PKI Hub 1.2.0
- Cryptographic Security Platform 1.2.0 - PKI Hub 1.3.0
If your installation version is earlier than these, follow the steps below to upgrade it.
Target version | Upgrade from | Upgrading guide |
|---|---|---|
Cryptographic Security Platform 1.0.0 - PKI Hub 1.1.0 | Entrust Deployment Manager 2.0.2 | |
Cryptographic Security Platform 1.1.0 - PKI Hub 1.2.0 | Cryptographic Security Platform 1.0.0 - PKI Hub 1.1.0 | |
Cryptographic Security Platform 1.2.0 - PKI Hub 1.3.0 | Cryptographic Security Platform 1.1.0 - PKI Hub 1.2.0 |
Configuring the solutions
If the Validation Authority or Timestamp Authority solutions are already deployed in the upgraded installation, ensure that the value of the following parameter is at least 4096.
Solution | Parameter | Section |
|---|---|---|
Validation authority | Max header bytes | |
Timestamping Authority | Max header bytes |
Upgrade process
See below for how to run the upgrade process.
To upgrade PKI Hub 1.2.0 to 1.3
- Follow the steps in Downloading the installation files to download the Cryptographic Security Platform 1.2.1 - PKI Hub 1.3.1 for VMWare vSphere, Hyper-V and Nutanix file. You need this ISO image file to upgrade any installation, ISO-based or non-ISO-based.
Back up the installation state as explained in section Backing up of the PKI Hub 1.2.0 guide.
- Repeat the following steps on each PKI Hub node sequentially, ensuring that the steps are not performed on different nodes simultaneously.
- Use an SFTP client to copy the PKI Hub ISO image file to the
/home/sysadminnode folder. - Run the clusterctl upgrade command and wait for it to complete (around 2 hours) before proceeding to the next node.
- Use an SFTP client to copy the PKI Hub ISO image file to the
- Reboot each node sequentially, with at least 15 minutes before each reboot.
- Back up the installation state as explained in section Backing up of this guide.