Upgrading ISIM virtual appliance with firmware update transfer utility

The IBM Security Identity Manager virtual appliance allows only firmware updates by USB device. Starting at firmware release 7.0.0.2 (7.0.0-ISS-SIM-FP0002), firmware (.pkg) files can be transferred with the attached Java™ utility. A USB device is no longer required to update the virtual appliance.

Install the firmware release 7.0.0.2 (7.0.0-ISS-SIM-FP0002) or later before we can install the firmware release 7.0.0.3 or later with this utility.

This utility performs the same function as the command-line interface (CLI) command of the virtual appliance.

1. Download the isim_*.zip package from the IBM Fix Central.

2. Extract the isim_*.pkg build to a location of your choice.
3. Copy the utility to a system where Java, Version 1.7 is installed.
4. Copy these files to the file system.
   • The .pkg firmware update file.

   • The keystore (jks) file.
5. Run the following Java command to upload the .pkg file.

   Usage:

   java -jar FileUpload.jar <Hostname> <AdminId> <AdminPassword> <Truststore_Filepath> <Truststore_Password> <Absolute path to pkg file> <sslProtocol>

   Example:

   java -jar FileUpload.jar isimva.us.ibm.com admin admin /work/temptrust.jks WebAS
         /Downloads/virtual_appliance.pkg TLSv1.2

6. Use the supplied temptrust.jks file if you did not update the default certificates.

   If you previously updated the default certificate on the virtual appliance, temptrust.jks does not work. Use an updated jks file that is based on your updated certificate.

7. Access the command-line interface (CLI) of the virtual appliance to install the firmware with the following command. Run this command after you transfer the .pkg file.
   • For upgrade from IBM Security Identity Manager virtual appliance 7.0.1 or later, run this command:

     isim > upgrade > install

   • For upgrade from earlier versions of IBM Security Identity Manager virtual appliance 7.0.1, run this command:

      isim > firware_update > install_firmware

8. Select the index of the firmware update to install to the virtual system and press Enter. The results are as follows:

   1. The upgrade process formats Partition 2 and installs the new firmware update on it.

   2. When you apply the firmware update, your policies and settings are copied from Partition 1 to Partition 2.

   3. On completion, the process indicates you to restart the virtual system.

9. Enter the reboot command and press Enter to restart the virtual system. Partition 2 is now the active partition.The results are as follows:
   1. After the virtual appliance restarts from the Partition 2, all the configuration that were part of Partition 1, is applied to the Partition 2.
   2. After the configuration is applied to the virtual appliance, the process indicates you to restart the virtual appliance.
10. For the Identity data store, clear the Service Integration Bus before you restart ISIM. See Clear the service integration bus.
11. Restart ISIM.

12. Configure the application interface only after you upgrade the primary node and all member nodes. We must configure application interface on the primary node first and then on the member nodes. See Manage the application interfaces.

13. Optional: Back up Partition 2 in to Partition 1 after the successful completion of the firmware upgrade. The backup process overwrites the information that is in Partition 1.Do the following actions:
    1. Check and fix any errors if the upgrade process failed.
    2. Use Partition 1 to set it as the active partition and restart it.
    Partition 1 now becomes the active partition.

Parent topic: Upgrade the virtual appliance