This section explains how to perform the following upgrade.

Follow the steps below in the indicated order.

Creating the cluster database

You need a cluster database. As explained in Starting up the database, you can alternatively:

• Use a third-party DBMS (Database Management System) that meets the PKI Hub third-party database requirements. Either a new one or an existing one that already hosts databases for deployed solutions, such as Certificate Authority or Certificate Hub.  

  Do not merge tables from different solutions or from tables required by the product during installation into a single database, as each solution component requires its own database. 

• Download and install PKI DB Appliance.

Running the upgrade process

Upgrade to Cryptographic Security Platform 1.4.2 - PKI Hub 1.5.1 as explained below.

To upgrade to CSP 1.4.2 - PKI Hub 1.5.1

1. Follow the steps in Downloading the installation files to download the following file: 

   Cryptographic Security Platform 1.4.2 - PKI Hub 1.5.1 for VMware vSphere, Hyper-V and Nutanix

    You need this ISO image file to upgrade any installation, ISO-based or non-ISO-based. ​

2. Back up the installation state as explained in the "Backing up PKI Hub" section of the PKI Hub Guide for the version you are upgrading from.
3. Repeat the following steps sequentially on each PKI Hub node; do not perform them simultaneously on multiple nodes. 
   1. Use an SFTP client to copy the PKI Hub ISO image file to the /home/sysadmin node folder. 
   2. Run the clusterctl upgrade command and wait for it to complete (around 2 hours) before proceeding to the next node.
4. Reboot each node sequentially, allowing at least 15 minutes between reboots.
5. Back up the installation state as explained in section Backing up PKI Hub of this guide.

Reviewing user role changes

After completing the upgrade, users who previously held the following discontinued roles are assigned the new IdpRole.

• Manage Users
• Manage Roles
• Manage Identity Providers