Upgrade Guidelines

The following guidelines apply to upgrading to CA Enterprise Log Manager with FIPS support:

If you have more than one CA Enterprise Log Manager server in a federation, upgrade the primary or Management CA Enterprise Log Manager server to r12.1 SP1 first. Then you can upgrade all other servers in any order. The upgraded server starts in non-FIPS mode only. Enabling FIPS mode requires an Administrator user to set the operating mode manually.
Important! Do not switch to FIPS mode on any secondary CA Enterprise Log Manager server during subscription processing. This can cause subscription processing to fail.
CA Enterprise Log Manager servers at r12.1 SP1 can communicate with r12.1 agents, but agent-level FIPS support is not available until you upgrade to r12.1 SP1.
When you enable FIPS mode, only r12.1 SP1 FIPS-enabled agents and later can communicate with the CA Enterprise Log Manager server. When you enable non-FIPS mode, the CA Enterprise Log Manager server is fully backward compatible with older agents, but FIPS mode operation is not available. We recommend that you install only r12.1 SP1 agents after upgrading your CA Enterprise Log Manager servers to r12.1 SP1.
Agents associated with a CA Enterprise Log Manager server automatically detect server mode changes and restart themselves in the corresponding mode.
Adding a new CA Enterprise Log Manager server to an existing federation running in FIPS mode requires special handling. See the Implementation Guide section on adding a new CA Enterprise Log Manager server to an existing federation for more information.