Upgrade

This chapter details how to update an existing KeySafe 5 install to the latest version.

KeySafe 5 Service Deployment was introduced in KeySafe 5 v1.5.0. You may upgrade a 1.4 KeySafe 5 Local installation to the KeySafe 5 Service Deployment and keep the existing database contents.

Upgrade from 1.4 KeySafe 5 Local

Upgrading from KeySafe 5 Local will allow you to keep the existing database contents but does not migrate the service configuration. You will need to manually configure KeySafe 5 Service Deployment as detailed in Configuration Items and then update KeySafe 5 Agents.

  1. Stop any running KeySafe 5 Local instance on the machine.

  2. Optionally, backup %NFAST_DATA_HOME%\databases directory.

  3. Uninstall KeySafe 5 Local as per the KeySafe 5 v1.4 Installation Guide.

  4. Install KeySafe 5 Service Deployment. The install package can be found in the keysafe5-service directory of the KeySafe 5 release package.

    On Linux:

    1. Run sudo tar -C / -xf /path/to/keysafe5-server-1.5.0-Linux.tar.gz to unpack the KeySafe 5 Service binaries and associated scripts into the /opt/nfast/ directory.

    2. Run sudo /opt/nfast/bin/keysafe5-server-admin init to initialise new certificates to use for KeySafe 5 to use for communicating with the Agent Communications Interface. See Certificate Details.

    3. Run sudo /opt/nfast/keysafe5/server/sbin/install to install KeySafe 5 Server.

    On Windows:

    1. Double-click on keysafe5-server-1.5.0-windows.msi and follow the Installation Wizard.

    2. From an Administrator command prompt, run %NFAST_HOME%\bin\keysafe5-server-admin init -y to initialise new certificates to use for KeySafe 5 to use for communicating with the Agent Communications Interface. See Certificate Details.

    3. Restart KeySafe 5 Service using the standard Windows Services facility.

  5. Open the KeySafe 5 WebUI (by default at https://127.0.0.1:18080) and check you can see any existing KeySafe 5 data. Resources may be marked as unhealthy until the corresponding KeySafe 5 Agent’s are upgraded and configured to communicate with the updated Agent Communications Interface.

  6. Upgrade and generate new Agent communication certificates for each KeySafe 5 Agent. To upgrade KeySafe 5 Agents, see Agent Upgrade.