Executed when: Upgrading.
Upgrades a PKI Hub installation to 1.5.
clusterctl upgrade --iso-path <iso> [--yes]The command will prompt the following messages.
PKI Hub installation | Command prompt | Requested value |
|---|---|---|
PKI Hub 1.3.1 | A database is required to store authentication information. What type of database will you be using? | "1" to select a third-party database meeeting the Database requirements "2" to select PKI DB Appliance |
PKI Hub 1.3.1 connected to an LDAP provider. | LDAP user DN: | The Distinguished Name (DN) of an LDAP user with access to user data. |
LDAP user password: | The password for logging into the LDAPS server | |
PKI Hub 1.4 | — | — |
For example:
$ clusterctl upgrade --iso-path /home/sysadmin/pki-hub-1.5.0.isoA database is required to store authentication information. What type of database will you be using?1) Generic external PostgreSQL database.2) Entrust Database Appliance.(1/2)? 2If the installation meets all Requirements, the command takes around 2 hours to complete. Otherwise, the command throws an error.
See below for a command reference.
-f, --iso-path <iso>
Apply the <iso> upgrade, where <iso> is the path of the ISO installation file for PKI Hub 1.5.
Mandatory: Yes.
--yes
Automatically trust the CA certificate chain of the Cryptographic Security Platform Database Appliance TLS certificate.
Mandatory: No. This value is required only when using a Cryptographic Security Platform Database Appliance appliance and is prompted to the user if omitted. For example:
The authenticity of the Database Appliance must be established.Database Appliance settings: - IP address: 10.1.141.30 - Server Name (SNI/hostname verification): dbappliance - Trusted root certificate fingerprint: (sha256:f647eecf7a5e6903030052a8ca4dbb3...) - Trusted root subject: CN=CSP Database Manager Certificate Authority,O=Hytrust Inc., C=USVerify out-of-band before trusting.Do you want to trust this Database Appliance? [Y/n]: YResponding "n" to this prompt aborts the installation.