Upgrade the U-Series Appliance Software While Using High Availability

There are two upgrade options available, depending on your environment:

• Active / passive upgrade
• Active / active upgrade

High Availability with Database and Services Synchronization - Active / Passive Upgrade

Keep the following in mind when running an upgrade:

• Do not turn high availability OFF while doing upgrades.
• Any time an installer or login page for the U-Series Appliance recommends to reboot after installation, reboot before continuing.

Package Dependencies

Each new version of U-Series Appliance Management Software might require newer versions of dependent software included in the Supporting Software packages. This typically relates to newer versions of .NET and these should be updated whenever available, but before running any appliance management software updates.

• 2016 and 2022 Environment or Supporting Software packages often depend on a version of Security Update Package Installer (SUPI). It is best to upgrade SUPI to the latest version prior to upgrading the U-Series Appliance software.
• To determine the BeyondInsight upgrade path, visit the BeyondInsight release notes website: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm

Start the Upgrade

1. Log on to the active U-Series Appliance.
2. Go to the Backup and Restore page and run a backup. This backs up settings and the database.
3. Go to the High Availability page and click Suspend to prevent failover while upgrades are running.
4. Download Software and Security updates using BeyondTrust Updater. Open a case with BeyondTrust Technical Support if you need links to any software not available through BeyondTrust Updater or the Customer Portal.
5. Unlock Security Update packages and installer subscriptions in BeyondTrust Updater:
   • Security Patches for Windows Server 2016/2022
   • Security Patches for SQL 2016/2022
   • U-Series 2016/2022 Environment
   • U-Series 2016/2022 Supporting Software
   • Security Update Package Installer
6. Click Update Now to download all security packages.
7. If one download stops and another does not start, click Update Now again until all are complete.
8. Apply security updates downloaded in step 4.
   • Go to Software and Licensing > Security Updates.
   • Click the vertical ellipsis for the update, and then select + Schedule Security Udate.
   • Schedule updates. This provides two options, either to schedule now or at a later date and time.
     • If any new packages are downloaded after the schedule is made they are NOT included.
     • Updates are almost always required and the process resumes without intervention until all packages are installed.
     • Service may become unresponsive during the installation of updates.
     • Progress can also be viewed from this page.
9. Download and install the remaining products from BeyondTrust Updater.
   • Settings in BeyondTrust Updater allow you to configure specific hours to download and install packages.
10. Log in to the passive U-Series Appliance and repeat steps 2 through 7.
    • There is no need to perform a backup, because all the settings are still on the active U-Series Appliance.
    • The database is not accessible on the secondary U-Series Appliance. This is expected, due to SQL mirroring.
11. If needed, set the lock status on the Subscriptions page again.
12. Verify applications were upgraded.
13. Go to the High Availability page, click Resume, and verify database state returns to synchronized.

High Availability with Services Only Synchronization - Active / Active Upgrade

Keep the following in mind when running an upgrade:

• Do not turn high availability OFF while performing upgrades.
• Any time an installer or login page for the U-Series Appliance recommends to reboot after installation, reboot before continuing.

Package Dependencies

Each new version of U-Series Appliance Management Software might require newer versions of dependent software included in the Supporting Software packages. This typically relates to newer versions of .NET and these should be updated whenever available, but before running any appliance management software updates.

• 2016 and 2022 Environment or Supporting Software packages often depend on a version of SUPI, so it is best to upgrade SUPI to the latest version prior to upgrading the U-Series Appliance software
• To determine the BeyondInsight upgrade path, visit the BeyondInsight release notes website: https://www.beyondtrust.com/docs/release-notes/beyondinsight-password-safe/index.htm

Start the Upgrade

1. Go to the Backup and Restore page and run a backup. This backs up settings but NOT any remote databases.
2. Download Software and Security updates using BeyondTrust Updater. Open a case with BeyondTrust Technical Support if you need links to any software not available through BeyondTrust Updater or the Customer Portal.
3. Unlock Security Update packages and installer subscriptions in BeyondTrust Updater:
   • Security Patches for Windows Server 2016/2022
   • Security Patches for SQL 2016/2022 (may not be subscribed if SQL Server is not installed)
   • U-Series 2016/2022 Environment
   • U-Series 2016/2022 Supporting Software
   • Security Update Package Installer
4. Click Update Now to download all security packages.
5. If one download stops and another does not start, then click Update Now again until all are complete.
6. Apply security updates downloaded in step 4:
   • Go to Software and Licensing > Security Updates.
   • Click the vertical ellipsis for the update, and then select + Schedule Security Udate.
   • Schedule Updates. This provides two options, either to schedule now or at a later date and time.
     • New packages downloaded after the schedule is set are NOT included.
     • Updates are almost always required and the process resumes without intervention until all packages are installed.
     • Service may become unresponsive during the installation of updates.
     • Progress can also be viewed from this page.
7. Download and install the remaining products from BeyondTrust Updater.
   • Settings in BeyondTrust Updater allow you to configure specific hours to download and install packages.
8. Log in to the passive U-Series Appliance and repeat steps 2 through 7.
   • There is no need to perform a backup, because all the settings are still on the active U-Series Appliance.
   • The database is not accessible on the secondary U-Series Appliance. This is expected, due to SQL mirroring.
9. If needed, set the lock status on the Subscriptions page again.
10. Verify applications were upgraded.
11. Go to the High Availability page for both active or passive U-Series Appliance and confirm the state is correct (for example, active or passive).
12. If there are other Password Safe worker nodes pointing at the remote database, then those BeyondInsight installations also need to be upgraded.