Upgrade Guide › Upgrade Procedures › Secure Proxy Server Upgrade

Secure Proxy Server Upgrade

After you upgrade the CA SiteMinder Policy Server, upgrade the CA Secure Proxy Server.

Follow these steps:

1. Verify that a backup of the /tmp/properties.sh file from the previous version exists.
2. SSH into the system to be upgraded.
3. Navigate to this directory.

   /opt/CA/saas/repo/application/
   

   If this directory has an upgradeBackupList.sh file, it includes a BACKUP_LIST environment variable. This variable defines files that are backed up before the upgrade and restored after the upgrade. You can add or remove file names from this list as necessary.

4. Unzip the new kit, for the system being upgraded into the root file system folder:

   cd / 
   unzip -o CAM-SPS_kit-version.zip
   

5. Update the tmp/properties.sh file in the kit with information from the backup version of properties.sh:
   1. Diff the original properties.sh file and the temp/properties file by entering the following command:

      diff /serverkit/properties.sh /tmp/properties.sh
      

   2. Make appropriate changes to the /tmp/properties.sh file as required.
6. Run the upgrade by running the following commands:

   cd /opt/CA/saas/repo/application/
   ./appliance_local.sh   config
   

   Note: If your internal and external hostnames are different from SPS, set redirectrewritablehostnames="internalname.ca.com, externalname.ca.com" in /opt/CA/secure-proxy/proxy-engine/conf/server.conf.

Upgrade Verification

1. Putty to the Secure Proxy Server.
2. Enter the following command:

   ps -ef|grep httpd 
   

   You should see a message similar to the following:

   /opt/CA/secure-proxy/httpd/bin/httpd -d /opt/CA/secure-proxy/httpd -k startssl

3. Verify you can log into a tenant environment through the Secure Proxy Server. If you cannot log into a tenant environment, restart the Secure Proxy Server as follows:

   service S98sps stop 
   service S98sps startssl