Users Guide

420 | Administration Dell Networking W-ClearPass Policy Manager 6.3 |User Guide
write operations are allowed only on this master node. The Policy Manager appliance defaults to a Publisher node
unless it is made a Subscriber node. A Policy Manager cluster can contain only one Publisher node. Cluster commands
can be used to change the state of the node, hence the Publisher can be made a Subscriber.
MySQL is supported in versions 6.0 and newer. Aruba does not ship MySQL drivers by default. If you require MySQL,
contact Aruba support to get the required patch. This patch does not persist across upgrades, so customers using
MySQL should contact support before they upgrade.
Upgrade the Image on a Single Policy Manager Appliance
Perform these steps to upgrade the image on a single Policy Manager appliance:
1. From the ClearPass Policy Manager UI, navigate to Administration > Agents and Software Updates > Software
Updates.
l If a Subscription IDhas been entered, then the server can communicate with the Web service. Available
upgrades will be listed in the Firmware & Patches table. Download and install the upgrade, and then reboot the
server.
l If the Subscription ID has not been entered, or if the appliance cannot communicate with the Web service, click
Import Updates to upload the upgrade image that you received from Support (or through other means).
Imported updates will appear in the table and can be installed by clicking the Install button. (The upgrade file is
now available and can be specified in the system upgrade CLI command.)
Alternatively, transfer the image file to a Policy Manager external machine and make it available via http or SSH.
1. Login to the Policy Manager appliance as appadmin user.
2. Use the command system upgrade, which will upgrade your second partition, then reboot. Policy Manager boots
into the upgraded image.
If you access the appliance via serial console, you should also be able to boot into the previous image by choosing that
image in the Grub boot screen.
3. Verify that all configuration and session logs are restored and all services are running. Also verify that node-
specific configuration such as the server certificate, log configuration and server parameters are also restored.
Upgrade the Image on all Appliances
Perform these steps to upgrade the image on all appliances in a Policy Manager cluster.
1. Upgrade publisher Policy Manager first, and reboot into the new image.
2. On the first boot after upgrade, all old configuration data is restored. Verify that all configuration and services are
intact.
In the cluster servers screen, all subscriber node entries are present but marked as Cluster Sync=false (disabled for
replication). Any configuration changes performed in this state do not replicate to subscribers until the subscribers
are also upgraded (effectively no configuration changes are possible on subscribers in this state).
You can add a subscriber to the cluster from the User Interface: Configuration > Administration > Server Configuration
(page) > Make Subscriber (link).
3. One node at a time, upgrade the subscriber nodes to the same Policy Manager version as the publisher, using the
same steps as for a single Policy Manager server. On the first boot after upgrade, the node is added back to the
cluster (the publisher node must be up and available for this to work).
4. Login to the UI and verify that the node is replicating and “Cluster Sync” is set to true.