Dell Powerconnect W-ClearPass Hardware Appliances W-ClearPass Policy Manager 6 - Page 316

Upgrade the Image on a Single Policy Manager Appliance Perform these steps to upgrade the image on a single Policy Manager appliance: 1. From the ClearPass Policy Manager UI, navigate to Administration > Agents and Software Updates > Software Updates. l If a Subscription ID has been entered, then the server can communicate with the webservice. Available upgrades will be listed in the Firmware & Patches table. Download and install the upgrade, and then reboot the server. l If the Subscription ID has not been entered, or if the appliance cannot communicate with the webservice, click Import Updates to upload the upgrade image that you received from Support (or through other means). The upgrade file is now available and can be specified in the system upgrade CLI command. Alternatively, transfer the image file to a Policy Manager external machine and make it available via http or SSH. 1. Login to the Policy Manager appliance as appadmin user. 2. Use the command system upgrade, which will upgrade your second partition, then reboot. Policy Manager boots into the upgraded image. NOTE: If you access the appliance via serial console, you should also be able to boot into the previous image by choosing that image in the Grub boot screen. 3. Verify that all configuration and session logs are restored and all services are running. Also verify that nodespecific configuration such as the server certificate, log configuration and server parameters are also restored. Upgrade the Image on All Appliances Perform these steps to upgrade the image on all appliances in an Policy Manager cluster. 1. Upgrade publisher Policy Manager first, and reboot into the new image. 2. On the first boot after upgrade, all old configuration data is restored. Verify that all configuration and services are intact. In the cluster servers screen, all subscriber node entries are present but marked as Cluster Sync=false (disabled for replication). Any configuration changes performed in this state do not replicate to subscribers until the subscribers are also upgraded (effectively no configuration changes are possible on subscribers in this state). NOTE: You can add a subscriber to the cluster from the User Interface: Configuration > Administration > Server Configuration (page) > Make Subscriber (link). 3. One node at a time, upgrade the subscriber nodes to the same Policy Manager version as the publisher, using the same steps as for a single Policy Manager server. On the first boot after upgrade, the node is added back to the cluster (the publisher node must be up and available for this to work). 4. Login to the UI and verify that the node is replicating and "Cluster Sync" is set to true. NOTE: If the publisher is not available when the subscriber boots up after the upgrade, adding the node back to the cluster fails. In that case, the subscriber comes up with an empty database. Fix the problem by adding the subscriber back into the cluster from the CLI. All node configuration, including certificates, log configuration and server parameters are restored (as long as the node entry exists in the publisher with Cluster Sync=false). 316 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide