Sidechain “How To”
Upgrading your KeySecure system can be done efficiently, without needing to dismantle the entire cluster. Whether you’re running a cluster or a standalone system, the upgrade process is straightforward. Below are the steps to ensure a smooth upgrade.
Cluster Upgrade Process
- No Need to Dismantle the Cluster: The upgrade can be done one server at a time.
- Compatibility: Compatibility is tested for up to three major versions, and you can upgrade across up to three versions. However, if you are upgrading within a cluster, you must go through each major upgrade sequentially.
Standalone System Upgrade
- For a system that is not in a cluster, the upgrade can be handled without any dependency on other systems.
Step-by-Step Upgrade Process
1. SSH to the CM (Cluster Manager)
Begin by logging into the Cluster Manager (CM) via SSH as the ksadmin user using certificates.
ssh -i /path/to/privatekey [email protected]
2. Verify the File System
Once logged in, you should confirm if there are any existing upgrade packages on the server.
Use the following commands to check:
ls
If there are any upgrade packages found, remove them using the rm command:
rm <file_name>
3. Download the Upgrade Package
Use wget to fetch the upgrade package from the Thales repository or your own URL repository.
wget http://example.com/sample.php
Ensure you are downloading the correct upgrade file before proceeding.
4. Initiate the Upgrade
To initiate the upgrade, run the upgrade script while specifying the path to the downloaded upgrade package.
sudo /opt/keysecure/ks_upgrade.sh -f ./<file>
The upgrade process will start and should complete successfully if everything is in order. The system will report “completed” when the upgrade has been installed.
5. Confirm the Upgrade
To verify that the upgrade was successful, confirm that the services have started:
- Check the Web UI: Visit the CM’s IP address via a browser. For example:
http://<CM_IP>
- Check Running Services: Alternatively, you can check the services by running:
sudo docker ps | wc
The number of processes should equal 47, which confirms all services are running correctly.
6. Reboot the System
Once all services are confirmed to be running, perform a reboot to finalize the upgrade:
sudo reboot
Troubleshooting
- Disk Usage Check Fails: If you encounter issues with disk usage during the upgrade, attempt a reboot and try the installation process again. This often resolves issues related to system resources.
Conclusion
By following this guide, you can successfully upgrade your KeySecure system, whether it’s standalone or part of a cluster.
Always ensure to check that services are running after the upgrade and that the system has been properly rebooted to ensure a smooth transition.
Let us know if you need further assistance with any step of the process! Contact Sidechain
More Information:
Thales — moving from Vormetric to CipherTrust
Reach out to us if you need help managing your data protection needs:
