Implementation Guide › Installing CA User Activity Reporting Module › Upgrade Existing CA User Activity Reporting Module Servers and Agents for FIPS Support › Upgrade Guidelines

Upgrade Guidelines

The following guidelines apply to upgrading to CA User Activity Reporting Module with FIPS support:

• If you have more than one CA User Activity Reporting Module server in a federation, upgrade the primary or Management CA User Activity Reporting Module server to r12.1 SP1 first. Then you can upgrade all other servers in any order. The upgraded server starts in non-FIPS mode only. Enabling FIPS mode requires an Administrator user to set the operating mode manually.

  Important! Do not switch to FIPS mode on any secondary CA User Activity Reporting Module server during subscription processing. This can cause subscription processing to fail.

• CA User Activity Reporting Module servers at r12.1 SP1 can communicate with r12.1 agents, but agent-level FIPS support is not available until you upgrade to r12.1 SP1.
• When you enable FIPS mode, only r12.1 SP1 FIPS-enabled agents and later can communicate with the CA User Activity Reporting Module server. When you enable non-FIPS mode, the CA User Activity Reporting Module server is fully backward compatible with older agents, but FIPS mode operation is not available. We recommend that you install only r12.1 SP1 agents after upgrading your CA User Activity Reporting Module servers to r12.1 SP1.
• Agents associated with a CA User Activity Reporting Module server automatically detect server mode changes and restart themselves in the corresponding mode.
• Adding a new CA User Activity Reporting Module server to an existing federation running in FIPS mode requires special handling. See the Implementation Guide section on adding a new CA User Activity Reporting Module server to an existing federation for more information.