Identifying the correct upgrade path
The best approach for upgrading Guardium® depends on the version you are upgrading from, the hardware of your system, and any special partitioning requirements you might have.
Determine the current Guardium
version and patch level by clicking the icon in the main user interface and selecting About Guardium. Use the following table for an overview of how to upgrade to the latest Guardium
version.
Current Guardium version | Upgrade path |
---|---|
Versions 10.0 to 10.5 |
|
Version 10.6 |
|
Version 11.0 and later |
|
Attention: The version 11 upgrade patch is incompatible with the following configurations:
Use the backup-rebuild-restore procedure to upgrade these configurations.
- Guardium systems with custom partitions.
- Encrypted Logical Volume Management (LVM) disks.
- Guardium systems with root partitions that are 10 GB or less.
- Guardium systems that are deployed in cloud environments.
Upgrade by using backup-rebuild-restore
- Apply the latest health check patch that is relevant to your version.
- Version 10.6 or earlier, apply health check patch 10.0p9998.
- Version 11.0 and later, apply health check patch 11.0p9997.
- Archive and purge system data.
- Create a system backup. Include both your data and configuration files.
- Rebuild the appliance by using the latest version 11 ISO.
- Apply the latest version 11 GPU.
- Apply the relevant maintenance bundle, sniffer, and security patches.Important: If a week or more has passed since you began applying maintenance patches, apply the version 11 health check patch (11.0p9997) to confirm that the system is ready before continuing to the next step.
- Restore the system backup. Include both your data and configuration files.
Notices
When you upgrade from Guardium versions 11.0 or 11.1 to versions 11.2 or up, the command-line parameter FIPSmode is restored to the default value "off". Reset the value by using the CLI command store system fipsmode on and restart the system to enable FIPSmode.
The FIPSmode value is preserved when you upgrade from version 11.2 to version 11.4 or up by using the backup and restore method. After you restore to version 11.4 or up, you must restart your Guardium system to enable FIPSmode.