Do not run the upgrade procedure on a HA Secondary machine. It is to be run only on the EFS 2.0 HA Primary machine.
To upgrade an EFS 2.0 HA System, you must:
Upgrade the EFS 2.0 HA Primary machine.
To upgrade the EFS 2.0 Primary machine, follow the procedure "To Upgrade to SunScreen EFS 3.0 in Routing Mode With Local Administration".
Upgrade the EFS 2.0 HA Secondary machine.
To upgrade an HA Secondary machine, you must:
Remove the EFS 2.0 software packages
Install the EFS 3.0 software packages on the machine that will be an HA Secondary
Configure your HA cluster
For more information on configuring and managing HA clusters, see the SunScreen EFS 3.0 Administration Guide.
On the machine that is the EFS 2.0 Secondary, become root, if necessary.
Remove the EFS 2.0 software packages by typing:
# pkgrm SUNWicgSS SUNWicgEF SUNWicgSA SUNWicgSD SUNWicgSM SUNWHJicg |
If you did not originally install any of these packages, omit them from the string or else remove the packages one at a time.
Remove the SKIP software packages by typing:
# pkgrm SICGcrc2 SICGcrc4 SICGes SICGkeymg SICGkisup SICGbdcdr |
If needed, remove any SKIP crypto upgrades by typing:
# pkgrm SICGcdes SICGc3des SICGcsafe SICGkdsup SICGkusup |
Remove all old EFS 2.0 certificates, configurations, and logfiles by typing:
# rm -rf /var/opt/SUNWicg /etc/opt/SUNWicg |
Reboot your machine to complete the removal of the EFS 2.0 installation by typing:
# sync; init 6 |
After you have upgraded the SunScreen EFS 2.0 HA primary Screen to SunScreen EFS 3.0, you must perform this procedure to define your HA primary Screen's HA interface. This is done only on the HA primary Screen and not on any of the HA secondary Screens. Before proceeding, you must know the following information:
the machine name of the HA primary Screen
the IP addresses on your dedicated HA network
the network interface that connects to that network
the name of the SunScreen EFS 2.0 active configuration
In this example:
the name of the HA primary Screen is "haprimary"
the addresses of the dedicated HA network are 129.129.129.0 to 129.129.129.255
the network interface that connects them is qfe0
the name of the SunScreen EFS 2.0 active configuration is "Initial"
After you have completed the upgrade program on the HA primary Screen and have rebooted:
On the HA primary Screen, open a terminal window and become root.
Type the following:
# ssadm edit Initial edit> add address qfe0 RANGE 129.129.129.0 129.129.129.255 edit> delete interface qfe0 edit> add interface SCREEN haprimary qfe0 HA qfe0 edit> save edit> quit |
Activate the configuration by typing:
# ssadm activate Initial |
See the SunScreen EFS 3.0 Administration Guide for instructions.
See the SunScreen EFS 3.0 Administration Guide for instructions on setting up an EFS 3.0 HA cluster.