Security

Reply
KDI
Contributor I
Posts: 25
Registered: ‎02-02-2015

Upgrading ClearPass from 6.36 to 6.5 Best Practices

We are upgrading ClearPass from 6.3.6 to 6.5.0. I have downloaded release notes for 6.5 and 6.4.5 and have reviewed.  I am looking for feedback on best practices, tips, and potential hazards...

Thanks

Guru Elite
Posts: 8,636
Registered: ‎09-08-2010

Re: Upgrading ClearPass from 6.36 to 6.5 Best Practices

If they're VMs, be sure to follow the new resource requirements.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Upgrading ClearPass from 6.36 to 6.5 Best Practices

  1. Backup your configuration and download it to your local computer
  2. Download the server certificates to your local computer
  3. Upgrade to 6.5.0
  4. Upgrade to 6.5.1

 

Keep in mind that the log database will not be restored during the upgrade to 6.5. You can restore it afterwards if you want the old access tracker information.

 

How many nodes are you upgrading? Make sure you wait until you see the upgrade complete notification in event viewer on the publisher before proceeding to upgrade the subscriber(s).

Thanks,

Zach Jennings
Aruba
Posts: 1,644
Registered: ‎04-13-2009

Re: Upgrading ClearPass from 6.36 to 6.5 Best Practices

In addition, you may consider using the Cluster Upgrade Tool to help you through the process.  You can then upgrade to 6.5.1 when complete.

 

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=16803

 

 

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Upgrading ClearPass from 6.36 to 6.5 Best Practices

I would only explore the Cluster Upgrade Tool if you have a large cluster to upgrade.

Thanks,

Zach Jennings
KDI
Contributor I
Posts: 25
Registered: ‎02-02-2015

Re: Upgrading ClearPass from 6.36 to 6.5 Best Practices

Zach

 

We are upgrading 1 publisher and 8 subscribers.  I suspect we will be going to 5.0 only however what is the benefit of pushing to 5.1?  Have you ever used the cluster upgrade tool and if so were there any hangups?   What was the overall time it took to upgrade per device.

 

Alos along with this we will be deploying the leap secon patch.

Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Upgrading ClearPass from 6.36 to 6.5 Best Practices

That is large enough that I would definitely use the Cluster Upgrade tool.

 

6.5.0 is a .0 release. I recommend going to 6.5.1. There are bugs that were fixed in 6.5.1. I recommend you read the release notes prior to upgrading to ANY version.

Thanks,

Zach Jennings
Search Airheads
Showing results for 
Search instead for 
Did you mean: