Previous Topic: Upgrade CA DirectoryNext Topic: Provisioning Server Troubleshooting


Upgrade the CA Provisioning Server and CA IAM Connector Server

After you upgrade the CA Directory server, upgrade the CA Provisioning Server and CA IAM Connector Server. If the Provisioning Server and CA IAM Connector Server are running on the same system, running the upgrade will upgrade both components. If the Provisioning Server and CA IAM Connector Server are installed on separate systems, upgrade the Provisioning Server system before you upgrade CA IAM Connector Server.

Follow these steps:

  1. SSH into the machine to be upgraded.
  2. Verify that a backup of the /tmp/properties.sh file from the previous version exists.
  3. Enter the following commands:
    su - root
    
    mv /dev/random /dev/random.orig 
    
    ln -s /dev/urandom /dev/random
    
  4. Unzip the new kit for the machine being upgraded into the root file system folder. For example, enter the following commands:
    cd /
    
    unzip -o CAM-IMPS_kit-version.zip
    
  5. Update the tmp/properties.sh file in the kit with information from the backup version of properties.sh:
    1. Diff the original properties.sh file and the temp/properties file by entering the following command:
      diff -y /serverkit/properties.sh /tmp/properties.sh
      
    2. Make appropriate changes to the /tmp/properties.sh file as required.
  6. Run the upgrade by entering the following commands:

    Note: If this directory has a file named upgradeBackupList.sh, it will have an environment variable named BACKUP_LIST. This variable is an array of file names that will be backed up before the upgrade, and then restored after the upgrade. You may add or remove file names from this list as necessary.

    cd /opt/CA/saas/repo/application/
    
    ./appliance_local.sh   config
    

    Note: Verify the soft link exists:

    mv /dev/random /dev/random.orig
    ln -s /dev/urandom /dev/random
    

Verify the upgrade:

  1. Verify that all DSAs are running:
    su - dsa
    
    dxserver status
    

    The ProvServerhost-imps-router should be started.

  2. Verify that the Provisioning Server is running:
    1. Login as imps user (su – imps)
    2. cd /opt/CA/IdentityManager/ProvisioningServer/bin
    3. ./imps status
    4. Verify that the message "im_ps is running" appears.

    Note: The following is for JCS only.

  3. Verify that CA IAM Connector Server is running by entering the following commands:
    su - root
    
    service im_jcs status
    

    The message "jcs is running" should appear.