Previous Topic: View Self-Monitoring EventsNext Topic: Prerequisites for Upgrade for FIPS Support


Upgrade Existing CA User Activity Reporting Module Servers and Agents for FIPS Support

You can upgrade existing CA User Activity Reporting Module servers and agents for FIPS support using the Subscription Service. This upgrade process assumes the following:

Use the following process to upgrade your servers:

This illustration shows the steps in upgrading CA User Activity Reporting Module servers and agent for FIPS support.

The upgrade and FIPS enablement process includes the following steps:

  1. Upgrade the primary or Management server to r12.1 SP1.

    If you use a remote CA EEM server, ensure that it is at a release level that supports FIPS operation. See the CA EEM Release Notes for more information about upgrading for FIPS support.

    Detailed instructions for using the Subscription Service to upgrade both CA User Activity Reporting Module servers and agents are available in the Administration Guide section on subscription.

  2. Upgrade all other CA User Activity Reporting Module servers in the federation to r12.1 SP1.
  3. Upgrade all the agents to r12.1 SP1 and update the connector log sensors as needed.

    Important! If you deployed a connector that uses the syslog log sensor on a Windows host, update all of these connector configurations to use the latest syslog sensor for this release, when running in FIPS mode. Refer to the CA User Activity Reporting Module Product Integration Matrix for the latest list of integrations that use the syslog log sensor.

  4. Disable ODBC and JDBC access to the event log store.
  5. Enable FIPS mode on each of the secondary CA User Activity Reporting Module servers in the federation.

    Agents automatically detect the operating mode from the CA User Activity Reporting Module server that manages them.

  6. Enable FIPS mode on the primary or Management server.
  7. Verify that the agents are running in FIPS mode using the Agent Explorer dashboard.

    You can also verify that the agents are sending events using a query or report, or by examining the self monitoring events tab in the System Status Service area.

When you upgrade an existing agent to r12.1 SP1, the subscription processing updates the agent in non-FIPS mode by default. You set the FIPS mode for the CA User Activity Reporting Module server that manages an agent. An agent detects the FIPS mode of its managing server and restarts itself in the corresponding mode as needed. Use the Agent Explorer dashboard in the CA User Activity Reporting Module user interface to view the FIPS mode for an agent, if you have Administrator user privileges. See the upgrade information in the Implementation Guide section on installing CA User Activity Reporting Module, or the online help for agent management tasks for more information.

More information:

Subscription

Apply Subscription Updates to Agents and Connectors

Enable FIPS Mode Operation

View Agent Dashboard