Implementation Guide › Installing CA Enterprise Log Manager › Upgrade Existing CA Enterprise Log Manager Servers and Agents for FIPS Support

Upgrade Existing CA Enterprise Log Manager Servers and Agents for FIPS Support

You can upgrade existing CA Enterprise Log Manager servers and agents for FIPS support using the Subscription Service. This upgrade process assumes the following:

• You installed CA Enterprise Log Manager r12.1, or upgraded to that level from r12.0 SP3.
• You want to enable FIPS mode for your CA Enterprise Log Manager federation.

Use the following process to upgrade your servers:

The upgrade and FIPS enablement process includes the following steps:

1. Upgrade the primary or Management server to r12.1 SP1.

   If you use a remote CA EEM server, ensure that it is at a release level that supports FIPS operation. See the CA EEM Release Notes for more information about upgrading for FIPS support.

   Detailed instructions for using the Subscription Service to upgrade both CA Enterprise Log Manager servers and agents are available in the Administration Guide section on subscription.

2. Upgrade all other CA Enterprise Log Manager servers in the federation to r12.1 SP1.
3. Upgrade all the agents to r12.1 SP1 and update the connector log sensors as needed.

   Important! If you deployed a connector that uses the syslog log sensor on a Windows host, update all of these connector configurations to use the latest syslog sensor for this release, when running in FIPS mode. Refer to the CA Enterprise Log Manager Product Integration Matrix for the latest list of integrations that use the syslog log sensor.

4. Disable ODBC and JDBC access to the event log store.
5. Enable FIPS mode on each of the secondary CA Enterprise Log Manager servers in the federation.

   Agents automatically detect the operating mode from the CA Enterprise Log Manager server that manages them.

6. Enable FIPS mode on the primary or Management server.
7. Verify that the agents are running in FIPS mode using the Agent Explorer dashboard.

   You can also verify that the agents are sending events using a query or report, or by examining the self monitoring events tab in the System Status Service area.

When you upgrade an existing agent to r12.1 SP1, the subscription processing updates the agent in non-FIPS mode by default. You set the FIPS mode for the CA Enterprise Log Manager server that manages an agent. An agent detects the FIPS mode of its managing server and restarts itself in the corresponding mode as needed. Use the Agent Explorer dashboard in the CA Enterprise Log Manager user interface to view the FIPS mode for an agent, if you have Administrator user privileges. See the upgrade information in the Implementation Guide section on installing CA Enterprise Log Manager, or the online help for agent management tasks for more information.

More information:

Subscription

Apply Subscription Updates to Agents and Connectors

Enable FIPS Mode Operation

View Agent Dashboard