Install patch/upgrade failed Clearpass

Aruba Employee

Introduction : This article provides alternate steps to install patch or upgrade Clearpass server in 6.x version.

 

Environment : Version tested 6.0.1 to 6.4.1

 

Configuration Steps :

 

 

Below are the different steps to install the patch or perform an upgrade:


To manually download the patch or upgrade image from Aruba Support site and installing it form GUI:

 

 

 

Note: Clearpass version prior to 6.1.3 or 6.2.0 download the 'Unsigned' patch. Version later it is mandate to download the signed patch in-order to upload it to Clearpass. 

 

  • Upload the signed/unsigned patch to Clearpass via GUI (under Administration-> Agent and Software Updates-> Software Updates) using the 'Import Updates' option. 

  • Once uploaded, in latest Clearpass version we will get the option to install from the GUI. Click on install button to proceed installation.

  • In older version of Clearpass, we have to perform the upgrade or patch installation from the CLI once uploaded the file to Clearpass. Below is the command to perform the upgrade from CLI

 

To perform a patch installation: 

 

#system update -i <file_name.bin>

 

Note: File name should have an extension with '.bin' and option 'i' is to install the patch. 

To perform an upgrade: 

 

 

#system upgrade <file_name.bin>

 


To perform CLI based patch or upgrade image to Clearpass: 

 


To perform the CLI based patch install or upgrade from the public web server. We may issue the command to as shown below to download and install the file directly from the server. 

 

 

To perform a patch installation: 

 

#system update -i http://<subscription_id>:<subscription_id>@Clearpass.arubanetworks.com/cppm/patches/CPPM-x86_64-20140820-clearpass-6.3-updates-5-63-patch.bin
 

 

Note: File name should have an extension with '.bin' and option 'i' is to install the patch. 

To perform an upgrade: 

 

 

#system upgrade http://<subscription_id>:<subscription_id>@Clearpass.arubanetworks.com/cppm/patches/CPPM-x86_64-6.4.0.66263-upgrade.bin 

 

  • The above command should download the file directly form the public server and install the patch.


    Verification :

Once the patch is installed, perform a restart from GUI (under Administration-> Server Manager-> Server Configuration-> select the server and click Reboot)

Alternative issue command '#system restart' to initiate a reboot. 

Note: Allow enough time for the server to migrate the DB at the back-end once rebooted. Manually restarting the server or initiating another re-boot would cause the server to crash. Server upgrade process can be determined by trying to login to Clearpass using SSH. If the server upgrade process is running, an warning message should appear before entering the password. 

 

Troubleshooting :

 

common upgrade/patch error: 

You are not signed up for live updates; enter your Subscription ID and save.

  • No valid subscription key is installed on the server. Please verify the license email sent form Aruba for the subscription key or contact Support with the license installed on the server to get the subscription key.

Error fetching firmware updates list from Webservice; check Event Viewer for details.

or 
 

No route to host
Check Subscription ID, Network Connectivity, http_proxy credentials.
Click on 'Check Status Now' after correcting the configuration.

  • Server is unable to reach Clearpass.arubanetworks.com web server to download the patches. From the Clearpass CLI verify whether the Clearpass server is able to reach the public server using '#network [ping | nslookup | tracerout Clearpass.arubanetworks.com'.
  • Verify any proxy configuration under Administration-> Server Configuration-> click on the appropriate server-> Service Parameters-> Clearpass System Services-> HTTP Proxy settings. 

Your subscription has expired, so you can no longer receive updates. Please contact your reseller to renew your subscription.
Check Subscription ID, Network Connectivity, http_proxy credentials.
Click on 'Check Status Now' after correcting the configuration.

  • Contact support to verify whether the provides subscription key is valid. 

Download is stuck or interrupted. Please run Check Status Now and retry. 

  • Connection is interrupted before Clearpass downloads the file.  Try to click on 'Check Status' button again to initiate the download. If Clearpass is unable to complete the download, try using the CLI based upgrade. 

Upload file is invalid: does not have the meta file or unrecognized ype or does not have a valid signature. 

 

 

Version history
Revision #:
2 of 2
Last update:
‎11-09-2014 10:46 AM
Updated by:
 
Labels (1)
Contributors
Comments
justink84

Just wanted to add some additional feedback with the error  "Upload file is invalid: does not have the meta file or unrecognized ype or doesnot have a valid signature".  

 

Current Firmware: 6.4.1

Targeted Firmware: 6.5.5

 

According to release notes you could go from 6.4.x -> 6.5.0, although it was recommened to install latest patch release.  Integrigity of the downloads were confirmed by md5. File extensions were also validated to confirm they were not altered during the download process. 

 

 

 

The error was corrected by performing an interim upgrade to 6.4.7, followed by 6.5.0. 

 

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.