Your suggested change has been received. Thank you.

close

Suggest A Change

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

Thales Logo

All

  • All
back

CipherTrust Manager Administration

System Upgrade/Downgrade

search

Please Note:

System Upgrade/Downgrade

You can upgrade/downgrade your CipherTrust Manager by securely downloading and applying a new/older system archive file.

Note

Refer to Cluster Upgrade for details on cluster upgrades.

System Upgrade

To download a system upgrade file

System upgrades are supplied in the form of a signed archive file available from the Support Portal.

  1. Download the archive file to CipherTrust Manager:

    $ scp -i <ssh private key path> <update file name> ksadmin@<ip>:.

    Note

    The signature of the archive file is verified before the upgrade/downgrade is performed.

To upgrade your CipherTrust Manager

Note

Upgrades keep all the data and may migrate the data and configuration. Therefore, as a precaution, it is recommended to take a backup before upgrading.

  1. SSH into the CipherTrust Manager as "ksadmin".

  2. Upgrade the CipherTrust Manager:

    $ sudo /opt/keysecure/ks_upgrade.sh -f <~/filename>

    Here, <~/filename> specifies path to the signed CipherTrust Manager installer file.

System Downgrade

CipherTrust Manager 2.0.0 can be downgraded to 1.10.0. For release-specific upgrade/downgrade information, refer to the release notes for your release.

To downgrade your CipherTrust Manager

Note

Downgrades perform a CipherTrust Manager reset, which wipes all data except the backup files that already exist.

  1. SSH into the CipherTrust Manager as "ksadmin".

  2. Downgrade the CipherTrust Manager:

    $ sudo /opt/keysecure/ks_downgrade.sh -f <~/filename> -y

Usage: ks_downgrade.sh -f <FILE> [-o] [-y]

*  `-f`: Path to the signed ${cm} installer file.

*  `-o`: Clustered node cannot be downgraded. Use this flag to override this behavior.

*  `-y`: Skip the confirmation prompt for ${cm} reset.

On this page