18.1 Upgrading Access Gateway Appliance

18.1.1 Upgrading from Access Gateway Appliance 4.4.x

Access Gateway Appliance is packaged as an OVF installer. Therefore if you are using Access Gateway Appliance 4.4 Service Pack 4 Hotfix 1 or earlier supported versions, you must migrate to latest version of Access Gateway Appliance. For information about how to migrate, see Section Migrating Access Gateway Appliance.

If you are using Access Gateway Appliance 4.4, ensure to upgrade to any of the following supported upgrade versions of Access Gateway Appliance before migrating to the latest version:

  • 4.4 Service Pack 4 Hotfix 1

  • 4.4 Service Pack 4

For information about upgrading from 4.4 to any of the supported upgrade version of Access Gateway, see Upgrading Access Gateway Appliance in the NetIQ Access Manager 4.4 Installation and Upgrade Guide.

NOTE:You cannot directly upgrade from Access Gateway Appliance 4.4.x to the latest version.

18.1.2 Upgrading from Access Gateway Appliance 4.5.x

From Access Manager 5.0 onwards, in order to upgrade Access Manager Gateway Appliance you must complete the following actions:

  1. Upgrade the base operating system using Online Update. For more information, see Upgrading the base Operating System and Common Appliance Framework.

  2. Run the product upgrade script. For more information, see Steps to upgrade from 4.5.x to the latest version of Access Gateway Appliance:.

NOTE:You can use the latest upgrade file to upgrade from 4.5.x to the latest version of Access Gateway Appliance.

If you are using Access Gateway Appliance 4.4 Service Pack 4 Hotfix 1 or earlier supported versions, see Section 18.1.1, Upgrading from Access Gateway Appliance 4.4.x.

Upgrading the base Operating System and Common Appliance Framework

You must update the base operating system and CAF before upgrading Access Gateway Appliance to the 5.0 version. Perform the following steps:

  1. Log in to the Configuration console (https://<access_gateway_appliance-IP address>:9443) as a root user.

  2. Click Online Update.

  3. Click Update Now to apply all patches.

    IMPORTANT:For Upgrading Access Gateway Appliance from Access Manager 5.0 to Access Manager 5.0 Service Pack 1 only steps 1-3 are required.

    NOTE:Some of the updates might require rebooting Access Gateway Appliance. It is recommended to reboot Access Gateway Appliance in the following scenarios:

    • When Configuration console displays the Reboot Needed option in the upper right corner of the Appliance Configuration pane.

    • When Configuration console displays a message or a warning to reboot.

  4. Click Product Upgrade > Start.

  5. Review and accept the License Agreement.

  6. Register for the Online Update Service. For registering for the Online Update Service, see To register for the Online Update Service:.

  7. Click OK to install all the required updates.

  8. In the upper right corner of the Appliance Configuration pane, click Reboot.

Verifying the version of the base Operating System and Common Appliance Framework

(Applicable for upgrading Access Gateway Appliance to 5.0)

  1. Open a terminal window and log in as the root user.

  2. Use the following command to check the version of the operating system:

    cat /etc/os-release

    Ensure that the version is SLES 12 SP5.

    The output is similar to the following:

    cat /etc/os-release
    NAME="SLES"
    VERSION="12-SP5"
    VERSION_ID="12.5"
    PRETTY_NAME="SUSE Linux Enterprise Server 12 SP5"
    ID="sles"
    ANSI_COLOR="0;32"
    CPE_NAME="cpe:/o:suse:sles:12:sp5"

    NOTE:If the SLES version points to SLES 12 SP4, run the zypper up command to perform upgrade to grub2-x86_64-xen-2.02-12.47.1.noarch, sles-release-12.5-1.171.x86_64, and sles-release-POOL-12.5-1.171.x86_64 RPMs. Reboot the system after the upgrade and check the operating system version again using cat /etc/os-release command.

  3. Use the following command to check the CAF version:

    cat /etc/Novell-VA-base

    Ensure that the version is 2.1.

    The output is similar to the following:

    cat /etc/Novell-VA-base
    product=Micro Focus Base Appliance
    version=2.1
    arch=x86_64

    NOTE:However, the actual CAF version is 2.0.3. The Configuration console also displays the version number as 2.0.3. The mismatch in version numbers occurs because of the updated vabase-datamodel-15.1.1-14.1.x86_64 rpm.

Steps to upgrade from 4.5.x to the latest version of Access Gateway Appliance:

  1. Back up any customized JSP pages and related files.

    Even though the upgrade program backs up the JSP directory and its related files in the /root/nambkup folder, it is a good practice to backup these files.

  2. Open a terminal window.

  3. Log in as the root user.

  4. Download the upgrade file from Micro Focus Downloads or from your purchased build, and then extract the tar.gz file using the following command:

    tar -xzvf <filename>

    NOTE:For information about the name of the upgrade file, see the specific Release Notes on the Access Manager Documentation website.

  5. Change to the directory where you unpacked the file, then enter the following command in a terminal window:

    ./ma_upgrade.sh
  6. A warning message regarding backup and restore is displayed followed by the message for including security settings.

    If you have customized any files, take a backup and restore them after installation.

  7. Would you like to continue this upgrade? Type Y to continue.

    If you do not want to include the security configurations, then type n. This stops the upgrade.

  8. Do you want to restore custom login pages? Type Y to confirm.

  9. Enter the Access Manager Administration Console user ID. For example, admin

  10. Enter the Access Manager Administration Console password

  11. Re-enter the password for verification

  12. The system displays the following message when the upgrade is complete:

    Upgrade completed successfully.
  13. Restore any customized files from the backup taken earlier. To restore files, add or merge the backed up files and folders to the respective locations as appropriate using Advanced File Configurator:

    • /opt/novell/nam/mag/webapps/nesp/WEB-INF/web.xml

    • /opt/novell/nam/mag/webapps/nesp/jsp

    • /opt/novell/nam/mag/webapps/nesp/html

    • /opt/novell/nam/mag/webapps/nesp/images

    • /opt/novell/nam/mag/webapps/agm/WEB-INF/config/current

    • /opt/novell/nam/mag/webapps/nesp/config

    • /opt/novell/devman/jcc/scripts/presysconfig.sh

    • /opt/novell/devman/jcc/scripts/postsysconfig.sh

      For information about how to merge or modify files, see Modifying Configurations in the NetIQ Access Manager 5.0 Administration Guide.

18.1.3 Upgrading from Access Gateway Appliance 5.0.x

  1. Register to Access Gateway Appliance 5.0 update service on the Common Appliance Framework user interface using https://<IP>:9443 URL. Ignore this step if you have already registered to this service.

    NOTE:For information on registration, see Upgrading the base Operating System and Common Appliance Framework.

  2. Log in to the Access Gateway terminal as a root user.

  3. Run command zypper install nam-ag-channel-meta.

  4. Navigate to the /opt/novell/channel directory.

  5. Run the./upgrade_nam.sh command.

  6. Follow the on-screen prompts to complete the upgrade.