UPGRADE of Oracle AVDF (Audit Vault and Database Firewall) console from 12.2.0.11 to 20.3
1. Pre-Requisites
1. Backup the current Audit Vault console:
If the Audit vault server is installed in a VM, it is recommended to take a VM snapshot before starting the upgrade process.
2. Release Existing Tablespace that are retrieved manually:
If existing tablespaces are not released that will fail the pre-upgrade procedure.
To release the tablespaces follow this procedure:
I. Log in to the Audit Vault Server console as super administrator.
II. Navigate to Settings, and then to Archiving.
III. Click Retrieve.
IV. You will find a list of tablespaces retrieved.
V. Select and release all the tablespaces.
3. Pre-upgrade RPM Boot Device Greater than 2 TB:
The pre-upgrade RPM performs necessary space checks for the boot device. In case the boot device is greater than 2 TB, then the upgrade process may fail. The boot device should be less than 2 TB before the upgrade process can begin.
4. Pre-upgrade RPM Boot Partition Space Check Warning:
The pre-upgrade RPM performs necessary space checks in the boot partition. In case there is not enough space in the boot partition, the upgrade process may fail. The boot partition should have at least 500 MB before the upgrade process can begin.
2. Software Download
A. Download The Files :
A. Go to Oracle Support
B. Go to Patches and Updates
C. Select the Product or family (Advanced) in the left panel
D. Type Oracle Audit Vault and Database firewall in Product
E. Select 20.3 in the release drop down
F. Click search
G. Select the latest patch (32114482 for us)
H. Click the following .zip files to download them on your system:
a) 32114482_1of4.zip avdf-upgrade-20.3.0.0.0-part1.iso AVDF_20_3_readme.html
b) 32114482_2of4.zip avdf-upgrade-20.3.0.0.0-part2.iso
c)32114482_3of4.zip avdf-upgrade-20.3.0.0.0-part3.iso avdf-pre-upgrade-20.3.0.0.0.zip
d)32114482_4of4.zip avdf-20.3.0.0.0-utility.zip Deprecated- Cipher-Removal.zip
I. After unzipping the .zip files there will be two parts :
a) avdf-pre-upgrade-20.3.0.0.0.zip and
b) avdf-upgrade-20.3.0.0.0-part1.iso
c) avdf-upgrade-20.3.0.0.0-part2.iso
d) avdf-upgrade-20.3.0.0.0-part3.iso
J. Combine the three ISO files into one ISO file on a different machine other than the Audit Vault server
a) Linux:
# cat avdf-upgrade-20.3.0.0.0-part1.iso avdf-upgrade-20.3.0.0.0-part2.iso avdf-upgrade-20.3.0.0.0-part3.iso > avdf-upgrade-20.3.0.0.0.iso
b) Microsoft Windows:
copy /b avdf-upgrade-20.3.0.0.0-part1.iso+avdf-upgrade-20.3.0.0.0-part2.iso+avdf-upgrade-20.3.0.0.0-part3.iso avdf-upgrade-20.3.0.0.0.iso.
A. Install Oracle AVDF Pre-Upgrade RPM:
You must install the pre-upgrade RPM. It puts the system into a state that can be safely upgraded after it checks for suitable space on the file system. When the pre-upgrade RPM is installed, it re-arranges free space on the appliance so that there is enough room to copy the upgrade files to the appliance and start the installation. After the upgrade, the space for the upgrade files is given back to the file system.
The avdf-pre-upgrade-20.3.0.0.0.zip executable includes the upgrade prerequisites and also checks that the platform conditions are met prior to the upgrade
o Prerequisite
In case of high availability environment, before running the pre-upgrade RPM, check the failover status on the primary Audit Vault Server. The failover status should not be STALLED. If the failover status is STALLED, then wait for a while and check the status again. If the status is not changing, then contact Oracle Support.
Follow these steps to check the failover status on the primary Audit Vault Server:
Log in to the primary Audit Vault Server console as oracle user.
Run the following command:
/usr/local/dbfw/bin/setup_ha.rb --status
o Run Pre-Upgrade RPM
a) Unzip the bundle using the command
unzip avdf-pre-upgrade-20.3.0.0.0.zip
a) Run the following command to install the avdf-pre-upgrade-20.3.0.0.0-0_210128.0600.x86_64.rpm:
rpm -i /root/avdf-pre-upgrade-20.3.0.0.0-0_210128.0600.x86_64.rpm
- The following message appears:
SUCCESS: The upgrade media can now be copied to '/var/dbfw/upgrade'.
The upgrade can then be started by running: /usr/bin/avdf-upgrade
1. Upgrade Process
§ Transfer the ISO File To The Appliance
· Log in to the appliance as user support.
· Copy the avdf-pre-upgrade-20.3.0.0.0.zip file as follows:
scp remote_host:/path/to/ avdf-upgrade-20.3.0.0.0.iso
to “/var/dbfw/upgrade” dir which was newly created.
§ Start The Upgrade Script
The upgrade script mounts the ISO, changes to the correct working directory, executes the upgrade process, and then after the upgrade process is complete, unmounts the ISO.
If you use a network (ssh) connection to upgrade the appliance, ensure the connection is reliable. You may also need to set the connection to keepalive. If you are using ssh from the Oracle Linux command line, you can use the ServerAliveInterval option, for example as follows:
# ssh -o ServerAliveInterval=20
Run the screen command as user root. Using the screen command prevents network disconnections interrupting the upgrade. If the session terminates, resume as follows:
· Connect as user support.
· Switch to user root.
· Run command screen -r
· Press y to continue
· Reboot the VM
· This will ask for root user and password
This will start the installation process:
**This will upgrade all its components by its own including agents**
· After Upgrade completes verify the console version
· The appliance database will also be upgraded to 19c. Here the job is done ! It will take around 5 to 7 hours depending on the DB size.
NOTE:
The agents will be upgraded automatically, login to the console and verify the agent’s status and the audit trail status.
Comments
Post a Comment