SunScreen EFS Release 3.0 Installation Guide

Upgrading an EFS 2.0 High Availability (HA) System


Note -

Do not run the upgrade procedure on a HA Secondary machine. It is to be run only on the EFS 2.0 HA Primary machine.


To upgrade an EFS 2.0 HA System, you must:

  1. Upgrade the EFS 2.0 HA Primary machine.

To upgrade the EFS 2.0 Primary machine, follow the procedure "To Upgrade to SunScreen EFS 3.0 in Routing Mode With Local Administration".

  1. Upgrade the EFS 2.0 HA Secondary machine.

To upgrade an HA Secondary machine, you must:

  1. Remove the EFS 2.0 software packages

  2. Install the EFS 3.0 software packages on the machine that will be an HA Secondary

  3. Configure your HA cluster

For more information on configuring and managing HA clusters, see the SunScreen EFS 3.0 Administration Guide.

To Upgrade an EFS 2.0 HA Secondary Machine
  1. On the machine that is the EFS 2.0 Secondary, become root, if necessary.

  2. Remove the EFS 2.0 software packages by typing:


    # pkgrm SUNWicgSS SUNWicgEF SUNWicgSA SUNWicgSD SUNWicgSM SUNWHJicg
    


    Note -

    If you did not originally install any of these packages, omit them from the string or else remove the packages one at a time.


  3. Remove the SKIP software packages by typing:


    # pkgrm SICGcrc2 SICGcrc4 SICGes SICGkeymg SICGkisup SICGbdcdr
    

  4. If needed, remove any SKIP crypto upgrades by typing:


    # pkgrm SICGcdes SICGc3des SICGcsafe SICGkdsup
    SICGkusup
    

  5. Remove all old EFS 2.0 certificates, configurations, and logfiles by typing:


    # rm -rf /var/opt/SUNWicg /etc/opt/SUNWicg
    

  6. Reboot your machine to complete the removal of the EFS 2.0 installation by typing:


    # sync; init 6
    

To Complete the Upgrade of an HA Primary Screen From SunScreen EFS 2.0

After you have upgraded the SunScreen EFS 2.0 HA primary Screen to SunScreen EFS 3.0, you must perform this procedure to define your HA primary Screen's HA interface. This is done only on the HA primary Screen and not on any of the HA secondary Screens. Before proceeding, you must know the following information:

In this example:

After you have completed the upgrade program on the HA primary Screen and have rebooted:

  1. On the HA primary Screen, open a terminal window and become root.

  2. Type the following:


    # ssadm edit Initial
    edit> add address qfe0 RANGE 129.129.129.0 129.129.129.255
    edit> delete interface qfe0
    edit> add interface SCREEN haprimary qfe0 HA qfe0
    edit> save
    edit> quit
    

  3. Activate the configuration by typing:


    # ssadm activate Initial
    

To Install the SunScreen EFS 3.0 Software on the HA Secondary

See the SunScreen EFS 3.0 Administration Guide for instructions.

To Configure The Upgraded HA Cluster

See the SunScreen EFS 3.0 Administration Guide for instructions on setting up an EFS 3.0 HA cluster.