Upgrade the U-Series Appliance Software

There are two upgrade options available, depending on your environment:

  • Active / passive upgrade
  • Active / active upgrade

High Availability with Database and Services Synchronization - Active / Passive Upgrade

Keep the following in mind when running an upgrade:

  • Do not turn high availability OFF while doing upgrades.
  • Any time an installer or login page for the U-Series Appliance recommends to reboot after installation, reboot before continuing.

Package Dependencies

  • U-Series Appliance software 3.2.6 and later require .NET Core 3.1.
  • The .NET Core installer is included in both 2012 Supporting software and 2016 Supporting software version 210201.
  • 2016 and 2012 Environment or Supporting Software packages often depend on a version of Security Update Package Installer (SUPI). It is best to upgrade SUPI to the latest version prior to upgrading the U-Series Appliance software.
  • BeyondInsight 6.9 can upgrade to the latest version. If the source is earlier than 6.9, contact BeyondTrust Technical Support.

Start the Upgrade

  1. Log on to the active U-Series Appliance.
  2. Go to the Backup page in the Maintenance application and run a backup. This backs up settings and the database.
  3. Go to the High Availability page and click Suspend to prevent failover while upgrades are running.
  4. Download Software and Security updates using BeyondTrust Updater. Open a case with BeyondTrust Technical Support if you need links to any software not available through BeyondTrust Updater or the Customer Portal.
  5. Unlock Security Update packages and installer subscriptions in BeyondTrust Updater:
    • Security Patches for Windows Server 2012/2016
    • Security Patches for SQL 2014/2016
    • U-Series 2012/2016 Environment
    • U-Series 2012/2016 Supporting Software
    • Security Update Package Installer
  1. Click Update Now to download all security packages.
  2. If one download stops and another does not start, click Update Now again until all are complete.
  3. Apply security updates downloaded in step 4.
    • Log in to the Maintenance page; the BeyondTrust Updates page loads first.
    • Click View Updates.
    • Schedule updates. This provides two options, either to schedule now or at a later date and time.
      • If any new packages are downloaded after the schedule is made they are NOT included.
      • Updates are almost required and the process resumes without intervention until all packages are installed.
      • Service may become unresponsive during the installation of updates.
      • Progress can also be viewed from this page.
  1. Download and install the remaining products from BeyondTrust Updater.
    • Settings in BeyondTrust Updater allow you to configure specific hours to download and install packages.
  1. Log in to the passive U-Series Appliance and repeat steps 2 through 7.
    • There is no need to perform a backup, because all the settings are still on the active U-Series Appliance.
    • The database is not accessible on the secondary U-Series Appliance. This is expected, due to SQL mirroring.
  1. If needed, set the lock status on the Subscriptions page again.
  2. Verify applications were upgraded.
  3. Log in to the High Availability page, click Resume, and verify database state returns to synchronized.

High Availability with Services Only Synchronization - Active / Active Upgrade

Keep the following in mind when running an upgrade:

  • Do not turn high availability OFF while performing upgrades.
  • Any time an installer or login page for the U-Series Appliance recommends to reboot after installation, reboot before continuing.

Package Dependencies

  • U-Series Appliance software 3.2.6 and later versions require .NET Core 3.1.
  • The .NET Core installer is included in both 2012 Supporting Software and 2016 Supporting software version 210201.
  • 2016 and 2012 Environment or Supporting Software packages often depend on a version of SUPI, so it is best to upgrade SUPI to the latest version prior to upgrading the U-Series Appliance software
  • BeyondInsight 6.9 can upgrade to the latest version. If the source is earlier than 6.9, contact BeyondTrust Technical Support.

Start the Upgrade

  1. Go to the Backup page in the Maintenance application and run a backup. This backs up settings but NOT any remote databases.
  2. Download Software and Security updates using BeyondTrust Updater. Open a case with BeyondTrust Technical Support if you need links to any software not available through BeyondTrust Updater or the Customer Portal.
  3. Unlock Security Update packages and installer subscriptions in BeyondTrust Updater:
    • Security Patches for Windows Server 2012/2016
    • Security Patches for SQL 2014/2016 (may not be subscribed if SQL Server is not installed)
    • U-Series 2012/2016 Environment
    • U-Series 2012/2016 Supporting Software
    • Security Update Package Installer
  1. Click Update Now to download all security packages.
  2. If one download stops and another does not start, then click Update Now again until all are complete.
  3. Apply security updates downloaded in step 4:
    • Log in to the Maintenance page. The BeyondTrust Updates page loads first.
    • Click View Updates.
    • Schedule Updates. This provides two options, either to schedule now or at a later date and time.
      • New packages downloaded after the schedule is set are NOT included.
      • Updates are almost always required and the process resumes without intervention until all packages are installed.
      • Service may become unresponsive during the installation of updates.
      • Progress can also be viewed from this page.
  1. Download and install the remaining products from BeyondTrust Updater.
    • Settings in BeyondTrust Updater allow you to configure specific hours to download and install packages.
  1. Log in to the passive U-Series Appliance and repeat steps 2 through 7.
    • There is no need to perform a backup, because all the settings are still on the active U-Series Appliance.
    • The database is not accessible on the secondary U-Series Appliance. This is expected, due to SQL mirroring.
  1. If needed, set the lock status on the Subscriptions page again.
  2. Verify applications were upgraded.
  3. Log in to the High Availability page for both active or passive U-Series Appliance and confirm the state is correct (for example, active or passive).
  4. If there are other Password Safe worker nodes pointing at the remote database, then those BeyondInsight installations also need to be upgraded.