Upgrade Guide › Upgrade Procedures › Secure Proxy Server Upgrade

Secure Proxy Server Upgrade

After you upgrade the CA SiteMinder Policy Server, upgrade the CA Secure Proxy Server.

Follow these steps:

1. SSH into the system to be upgraded.
2. Become the root user:

   su -root
   

3. Install the 32-bit version of the libkeyutils.so.1 library.
4. Verify that a backup of the /tmp/properties.sh file from the previous version exists. The properties.sh file is replaced when you unzip the kit. Therefore, make a backup now if no backup copy exists.
5. Navigate to this directory.

   /opt/CA/saas/repo/application/
   

   If this directory has an upgradeBackupList.sh file, it includes a BACKUP_LIST environment variable. This variable defines files that are backed up before the upgrade and restored after the upgrade. You can add or remove file names from this list as necessary.

6. Unzip the new kit, for the system being upgraded into the root file system folder:

   cd / 
   unzip -o CAM-SPS_kit-version.zip
   

7. Copy the following Kits to the /root directory:
   • jdk-7u40-linux-x64.tar.gz
   • jdk-7u40-linux-i586.tar.gz
   • UnlimitedJCEPolicyJDK7.zip
8. Update the tmp/properties.sh file in the kit with information from the backup version of properties.sh:
   1. Diff the original properties.sh file and the temp/properties file by entering the following command:

      diff /serverkit/properties.sh /tmp/properties.sh
      

   2. Make appropriate changes to the /tmp/properties.sh file as required.
   3. Modify the following properties in /tmp/properties.sh to match the following lines:

      JAVA64_KIT=/root/jdk-7u40-linux-x64.tar.gz; export JAVA64_KIT
      JAVA32_KIT=/root/jdk-7u40-linux-i586.tar.gz; export JAVA32_KIT
      _jce_zip_file=/root/UnlimitedJCEPolicyJDK7.zip; export _jce_zip_file
      

   4. Make sure the existing cert and key values are in the properties file so that the cert and key files are used; otherwise, new values are generated.
9. If you are upgrading a system at a disaster recovery site, set DR mode to live as follows:

   /opt/CA/saas/repo/application/DR_mode.sh mode=live
   

10. Run the upgrade by executing the following commands:

    cd /opt/CA/saas/repo/application/
    ./appliance_local.sh   config