This section contains the following topics:
Mixed-Version Upgrade Considerations
Perform an Option Pack Upgrade
To simplify migrations and upgrades, the Web Agent Option Pack can operate with Policy Servers of different, compatible versions. This mixed-version support allows you to keep Web Agents at their current version while you upgrade Policy Servers and other Web Agents. However, mixed-version environments are not recommended for permanent use because they limit the federation functionality to that of the lesser of the two components.
Version-dependent functional limitations exist when upgrading environments that use hardware load balancers for distributing requests between web servers. Consider a deployment where two Web Agents with Web Agent Option Packs and a Policy Server are at the same older version, as shown in the following diagram:
During a rolling upgrade, the administrator upgrades the Policy Server and only one Web Agent and Option Pack to 12.51. The upgraded agent and option pack supports SAML 2.0 user consent at the IdP. Partnership B is reconfigured to require user consent at the IdP and Partnership A security configuration remains unchanged.
Partnership A functionality continues to work regardless of the option pack to which it is routed because it is not using new functionality. However, Partnership B requests (which require user consent at the IdP) fail whenever the load balancer directs the request to the older version option pack.
To prevent Partnership B request failures until both web agents are upgraded, the administrator must configure the load balancer to route Partnership B requests solely to the current option pack. This configuration is shown in the following diagram:
Consider the following points before upgrading the Web Agent Option Pack:
Important! When upgrading, the program automatically creates new back-up configuration files and overwrites the existing configuration files.
To upgrade the Web Agent Option Pack
For more information, see the installation instructions.
Copyright © 2015 CA Technologies.
All rights reserved.
|
|