Installation and Upgrade Guides › SiteMinder Upgrade Guide › Upgrading from r6.x › How to Migrate from r6.x › Administrator Authentication › UNIX Console

UNIX Console

To upgrade the Policy Server

1. Exit all applications that are running.
2. Execute the following script in a ksh shell from the SiteMinder installation directory:

   ../ca_ps_env.ksh
   

   Note: Be sure that there is a space between the periods (. .) when running the script.

3. Open a shell and navigate to the installation executable.
4. Enter the following command:

   ./installation_media -i console
   

   installation_media

   Specifies the Policy Server installation executable.

   The Policy Server installer starts.

   Note: For a list of installation media names, see the Policy Server Release Notes.

5. Considering the following when running the installer:
   • The installer prompts you to select SiteMinder components. Each component is prefixed with a number. Type numbers separated with a comma (,) to select one or more components. Enter only a comma to select none of the features. When selecting components:
     • Reconfigure components that had been previously configured for the environment. Be sure to select the respective components.
     • If you are upgrading a Federation Security Services environment or plan on using the SiteMinder Information Card Authentication Scheme, select Create SM Key Database/Change SM Key Database Password.
     • Only select Policy Store if you are configuring a new policy store. You do not have to reconfigure existing policy store settings. An upgraded Policy Server retains the policy store settings. You manually upgrade an existing policy store.
   • If you selected Create SM Key Database/Change SM Key Database Password:
     • Create an r12.0 SP3 key database if you are migrating your existing key database data into this repository.
     • Change the password if you are upgrading an existing key database. Changing the password re–encrypts the database password and existing encrypted data using FIPS–compliant algorithms.
6. Review the installation settings and press Enter.

   The Policy Server is upgraded. The selected components are configured for use with the Policy Server.

   Note: The upgrade can take several minutes.

7. Press Enter and reboot the system.

   Note: The FSS Administrative UI was installed during the Policy Server upgrade. The FSS Administrative UI is for managing Federation Security Services. Register the FSS Administrative UI with the Policy Sever after upgrading the policy store and installing the Administrative UI. For more information about registering the FSS Administrative UI, see the Policy Server Installation Guide.

If you experience problems during the upgrade, you can locate the Policy Server installation log file in siteminder_home/siteminder/install_config_info.

siteminder_home

Specifies the Policy Server installation path.

More information:

Installation Media Names

After You Upgrade the Policy Server

If your Policy Server audit log is configured to include administrator changes to policy store objects, consider the following:

• You receive a message instructing you to disable this type of administrator auditing when you open the Policy Server Management Console for the first–time.
• You receive this message because there have been changes to how this type of administrator event is included in the Policy Server audit log. You use the XPSConfig utility, not the Policy Server Management Console, to include this type of administrator event in the audit log. By default, the XPSConfig utility enables the logging of Administrator changes to policy store objects.

You continue to receive the message until you change the Administrator Changes to Policy Store Objects setting, which is located on the Logs tab, to Log No Events. The setting appears disabled after you change it, but administrator changes to policy store objects continue to be logged.

If you want to exclude this type of Administrator event from the Policy Server audit log, disable it using the XPSConfig utility.

Note: For more information about using the XPSConfig utility, see the Policy Server Administration Guide.