Supported Upgrade Paths
Supported upgrade paths are presented for the latest Feature Release (FR) and Long Term Support (LTS) CipherTrust Manager software versions. Consult the release model page for details about these release types. Release Notes for individual release versions also contain supported upgrade paths to that version, alongside any special instructions or considerations.
Upgrade path support follows some general patterns, with exceptions identified for particular cases:
You can upgrade a standalone, unclustered appliance up to three minor versions at one time.
You can upgrade cluster nodes in the cluster remove/rebuild method up to three minor versions at one time.
You can upgrade cluster nodes in the in-place online cluster upgrade up to one minor version at one time.
If you are starting at a version below 2.8.x, you must upgrade to 2.8.1 before upgrading to higher versions.
Upgrade to the latest patch of the minor version for any starting, intermediate, or destination minor version.
Upgrade to Latest Long Term Support Version
Upgrade procedures for latest LTS Version are included in software documentation for that version.
The supported cluster upgrade methods to LTS releases are online in-place, offline in-place, and cluster remove/rebuild.
Note
- Upgrade paths from 2.8.0-TCT and 2.11.2-TCT are not presented here. This release is only found on the Thales TCT k160 small form factor appliance and is preloaded at time of manufacture. Consult Release Notes for a desired target version to see if upgrade on the Thales TCT k160 appliance is supported.
Upgrade to Latest Feature Release Version
Upgrade procedures for latest FR Version are included in software documentation for that version.
The supported cluster upgrade methods to FR versions are online in-place and cluster remove/rebuild.
Note
Upgrade paths from 2.8.0-TCT and 2.11.2-TCT are not presented here. This release is only found on the Thales TCT k160 small form factor appliance and is preloaded at time of manufacture. Consult Release Notes for a desired target version to see if upgrade on the Thales TCT k160 appliance is supported.
This section presents upgrade paths to the latest FR version only. It is not intended to present paths to any earlier version. Consult release notes for earlier versions for upgrade paths.
To upgrade 2.11.6 patch with the cluster online in-place method, you must use the force flag,
-o
to upgrade to 2.12.2. The upgrade command issudo /opt/keysecure/ks_upgrade.sh -f <archive_file_path> -o
.To upgrade 2.12.2 to 2.15.0 with a standalone cluster, or with the cluster rebuild/remove method, you must use the force flag,
-o
. The upgrade command issudo /opt/keysecure/ks_upgrade.sh -f <archive_file_path> -o
.