Security

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

Hi Matthias

I have had the same issue both on Eval and production licenses.

In the case of the eval licenses it was really strange as I planned to set up a cluster. Thus I had two licenses. One of them waw able to update the other had the same issue as you.

In my case I could cluster the servers, assigning the machine that was able to get the update as Publisher and then run the cluster update.

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

There is a known inconvenience that the check for active support is done at 23h55 every evening. That means that if you generated your token for support, you should be able to upgrade the next day. As mentioned, this is being worked at and should be resolved in a future version.

If you are stuck, Aruba Support can fix this without the wait for next day if you provide them access to the ClearPass appliance. But if you downloaded the update already, and try the next day, you should be able to upgrade without issues.

Hi Matthias

I have had the same issue both on Eval and production licenses.

In the case of the eval licenses it was really strange as I planned to set up a cluster. Thus I had two licenses. One of them waw able to update the other had the same issue as you.

In my case I could cluster the servers, assigning the machine that was able to get the update as Publisher and then run the cluster update.

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

The problem we´re facing is, that starting with version 6.11.0 ClearPass mentions:

NOTE: System Update/Upgrade is not allowed as Platform License does not have valid Support Contract.

We have two permanent licenses for our production environment and one EVAL license for the test environment.

There is a known inconvenience that the check for active support is done at 23h55 every evening. That means that if you generated your token for support, you should be able to upgrade the next day. As mentioned, this is being worked at and should be resolved in a future version.

If you are stuck, Aruba Support can fix this without the wait for next day if you provide them access to the ClearPass appliance. But if you downloaded the update already, and try the next day, you should be able to upgrade without issues.

Hi Matthias

I have had the same issue both on Eval and production licenses.

In the case of the eval licenses it was really strange as I planned to set up a cluster. Thus I had two licenses. One of them waw able to update the other had the same issue as you.

In my case I could cluster the servers, assigning the machine that was able to get the update as Publisher and then run the cluster update.

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

TAC is typically un-aware of the "immediate" work around, and we've had this not resolve after 24-48 hours. 

When you're in a production outage, as is essentially required when using hardware devices, waiting 24-48 hours isn't really an option even if the it did work. 

We've seen 2 ways to resolve; Install directly from the shell (Only do so with an Aruba TAC engineer), or create and apply a new trial license after you've activated the server. 

For the shell install you have to issue the install manually: 

/bin/platform-cli/install-update <install file>

Hopefully we'll get a 6.11.2 ISO with this removed, and the 6.11.0 will be pulled; Add the support check after a point release, like the Token generation was added, but not on the required full reload. 

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias

This whole process seems to require an internet connection, even considering the bug that requires us to wait until 23h55. 

What if our server doesn't have internet access? I've had a TAC case open for two weeks now and they don't seem to know what's happening.

Original Message:
Sent: Feb 27, 2023 08:46 PM
From: mholden
Subject: ClearPass 6.11.x EVAL no update possible

TAC is typically un-aware of the "immediate" work around, and we've had this not resolve after 24-48 hours. 

When you're in a production outage, as is essentially required when using hardware devices, waiting 24-48 hours isn't really an option even if the it did work. 

We've seen 2 ways to resolve; Install directly from the shell (Only do so with an Aruba TAC engineer), or create and apply a new trial license after you've activated the server. 

For the shell install you have to issue the install manually: 

/bin/platform-cli/install-update <install file>

Hopefully we'll get a 6.11.2 ISO with this removed, and the 6.11.0 will be pulled; Add the support check after a point release, like the Token generation was added, but not on the required full reload. 

Original Message:
Sent: Feb 16, 2023 11:00 AM
From: MatthiasP
Subject: ClearPass 6.11.x EVAL no update possible

Hi everybody,

till now we had a 6.10.x test environment, using an EVAL license. We were able to update the system to another version, using the EVAL license.

After updating the test environment to version 6.11.0 there is no way to update the system to another version (ex. 6.11.1).

Is this an expected behaviour? So the only way to update the system is to purchase a license?

Kind regards

Matthias