Oracle Key Manager (OKM) - How to Upgrade OKM 2.0.2 to OKM 2.3 on a X2100 KMA

Asset ID:	1-71-2005807.1
Update Date:	2015-05-07
Keywords:

Solution Type Technical Instruction Sure

Solution 2005807.1 : Oracle Key Manager (OKM) - How to Upgrade OKM 2.0.2 to OKM 2.3 on a X2100 KMA

Applies to:

Sun StorageTek Crypto Key Management System - Version All Versions to All Versions [Release All Releases]
Information in this document applies to any platform.
The standard upgrade procedure from KMS 2.0.2 to OKM is not straightforward. A KMS 2.0.2 appliance must be upgraded to KMS 2.2 or 2.2.1 before it can be upgraded to OKM 2.3. The following procedure circumvents this procedure by replacing the KMA disk with another disk that is pre-loaded with OKM 2.3.

Goal

How to upgrade from OKM 2.0.2 to OKM 2.3

Solution

1. Upgrade the ELOM and BIOS firmware level ( Make sure the option "preserve current configuration" is selected during ELOM firmware upgrade )
2. Shutdown the KMA
3. Delete the KMA from the KMA List ( through a 2.3 GUI, by connecting to another KMA in the cluster )
4. Replace the disk with another disk pre-loaded with OKM 2.3
5. Boot up the KMA
6. From the ELOM, launch the OKM console and perform a QuickStart
  ( You should have gathered the network info needed for the QuickStart; such as:
  --- management (or Admin) network IP address
  --- service network IP address
  --- netmask
  --- gateway IP
  --- necessary passphrases for security officer and quorum
7. Create the KMA entry for this KMA ( was previously deleted )
8. Join this KMA to the cluster
9. From the OKM GUI, monitor the replication lag size.
10. Once the lag size is zero or close to zero,
  - connect to the new KMA
  - run a backup before unlocking the KMA ( This will prevent key requests from drives to go to this KMA while backup is running. )
  - unlock the KMA

Note: There is a new software replication version with OKM release 2.3. The user should "switch" the
Cluster to the new replication version in order to enable new features available in OKM 2.3.

You can download the X2100 firmware patch from MOS Patches & Updates -
---
Patch 10363259 : X2100 M2 SW 1.8.0 - Tools_Drivers
Sun Fire X2100M2 Server Software 1.8.0

Image Contents

  BIOS is version 3A21
  SP is updated to version 3.24 (ELOM)
  Chipset driver is updated to 9.27
----

OKM 2.3 requires the OKM 2.3 GUI to be installed on your desktop.
This is available from MOS Patches & Updates as
Patch 11846256: ORACLE KEY MANAGER (OKM) 2.3.1 GUI - WINDOWS

Attachments

This solution has no attachment