CTE Scheduled Upgrade

Scheduled upgrade allows you schedule an upgrade of the CTE agent to occur after the next time the server hosting the agent reboots normally. Scheduled upgrade can minimize CTE service interruptions. Also, scheduled upgrade can reduce coordination issues in organizations where the security roles are separated.

Prerequisites

The following prerequisites are mandatory for a successful upgrade of a CTE agent node:

1. Install all Microsoft update patches before scheduling a CTE Agent upgrade.

2. Make sure that your Windows version is Windows Server 2008 R2 and subsequent versions. The CTE scheduled upgrade feature is not compatible with previous versions.

3. For all types of upgrades, including interactive (GUI-based) and scheduled upgrades, the CTE client must be able to connect to the CipherTrust Manager to which it is registered.

4. When upgrading from a CipherTrust Transparent Encryption version that is prior to v7.1, you must first upgrade to v7.1 before scheduling an upgrade to subsequent versions from v7.1.

If you are upgrading CTE agents in an LDT Communication Group, the following prerequisites are also mandatory for a successful upgrade:

1. Disable the GuardPoints on the nodes to be upgraded:

   1. Go to the CipherTrust Manager UI.

   2. In the GuardPoint window, click the ellipsis on the right side of a GuardPoint and select disable to disable the GuardPoint.

   3. Repeat the steps for all of the GuardPoints on the nodes to be upgraded.

2. Stop CTE Services on the nodes to be upgraded:

   1. Go to Control Panel > Services (local).

   2. Select secfsd.

   3. Select Stop the Service.

Scheduling a CTE Upgrade on the Command Line

To schedule CTE to upgrade the next time the system reboots, type:

voradmin upgrade schedule <CTE setup executable path> UPGRADE_NO_CIFSGP=Yes

Note

You must set the UPGRADE_NO_CIFSGP variable to yes after ensuring that all CIFS GuardPoints are disabled. This is mandatory. The upgrade fails if any CIFS GuardPoints are enabled. The UPGRADE_NO_CIFSGP variable checks that LDT CIFS GuardPoints are disabled, or not present, in v7.5.0 and subsequent versions. For v7.4.0 and previous versions, it cannot verify the GuardPoint status.

Self-extracting .exe Example

voradmin upgrade schedule C:\<Release.build-number>\vee-fs-7.7.0-87-win64.exe UPGRADE_NO_CIFSGP=Yes

Minor MSI Upgrades Only (Patches)

1. Before running voradmin upgrade schedule, check and remove any existing MSI packages from C:\ProgramData\Vormetric.

2. Type:

   voradmin upgrade schedule C:\<Release.build-number>\vee-fs-7.7.0-87-win64.msi MINOR_UPGRADE=Yes REINSTALL=ALL REINSTALLMODE=vomus UPGRADE_NO_CIFSGP=Yes

   Copy

System Response

Creating and installing service to upgrade. CTE agent will be upgraded on next reboot.

Alternative MSI Method

1. Rename the package named: vee-fs-7.7.0-87-win64.msi to the previous install package name, ex: vee-fs-7.7.0-87-win64.msi

2. Type:

   voradmin upgrade schedule C:\vee-fs-7.7.0-87-win64.msi REINSTALL=ALL REINSTALLMODE=vomus UPGRADE_NO_CIFSGP=Yes

   Copy

Major MSI Installations

For a major MSI upgrade, the command is the same as that for the . exe file.

• Type:

  voradmin upgrade schedule <CTE MSI installer path> UPGRADE_NO_CIFSGP=Yes

  Copy

Example

voradmin upgrade schedule C:\vee-fs-7.7.0-87-win64.msi UPGRADE_NO_CIFSGP=Yes

Warning

If you have scheduled an upgrade on reboot and the system crashes or is not shutdown gracefully, you must restart the system again to upgrade the agent.

Scheduling a CTE Upgrade Interactively (self-extracting .exe only)

When you open the self-extracting .exe CTE installation binary and a version of CTE is already installed, you have the option of upgrading immediately or initiating a scheduled upgrade. See the procedure below for details. This is an alternative to scheduling an update on the command line using voradmin (see Scheduling a CTE Upgrade on the Command Line).

1. Move the self extracting .exe CTE installation binary to the computer on which you want to initiate the scheduled upgrade.

2. Double-click the self extracting .exe CTE installation binary to run it.

3. Click through the standard initial dialog boxes like the license dialog box.

4. On the UPGRADE - Install now or Later dialog box, click Schedule Upgrade on next reboot and then click Next.

5. Click Schedule on the confirmation dialog box.

   The next time the computer reboots, the upgrade will occur.

This interactive method of scheduling an update is not available for MSI CTE installation binaries. You must use the voradmin command line scheduled upgrade method.

Show Scheduled CTE Upgrades

To display all scheduled CTE agent upgrades, type:

voradmin upgrade show

System Response

Current version:         6.0.3.12
Target upgrade version:  6.0.3.15
Upgrade on reboot:       Enabled

Cancel a Scheduled CTE Upgrade

To cancel/cleanup a scheduled CTE agent upgrade, type:

voradmin upgrade cancel

System Response

CTE agent upgrade canceled successfully.