Before You Begin 

  • Make sure that the Cryptographic Security Platform Compliance Manager nodes can communicate with one another on port TCP/8443 and TCP/5432.

  • We recommend backing up your Cryptographic Security Platform Compliance Manager cluster before you upgrade it. For details, see Backing Up Using the Cryptographic Security Platform Compliance Manager webGUI.

  • Please download your Admin Key and store it in a safe place before you upgrade. Cryptographic Security Platform Compliance Manager prompts for an admin key to recover your Cryptographic Security Platform Compliance Manager system. You must provide this admin key to proceed. For details, see Downloading your Admin Key.

  • We recommend enabling the support login on all cluster nodes before you start the upgrade. For details, see Enabling or Disabling the Support Login.

  • Make sure your internet connection to the Cryptographic Security Platform Compliance Manager node is as fast and as stable as possible. To begin the upgrade, upload the upgrade ISO image to the Cryptographic Security Platform Compliance Manager node in one continuous session. If the upload times out or if connectivity to the node is lost during the upload, you will see error messages in Cryptographic Security Platform Compliance Manager, and you must re-upload the file from scratch. Cryptographic Security Platform Compliance Manager cannot resume the upload from where it left off during a previous session.
  • We recommend having at least 250 GB available for a 220 GB system. To increase the size, see Increasing CSP Compliance Manager Storage in a VM.

You must upgrade your Cryptographic Security Platform Compliance Manager before upgrading Cryptographic Security Platform Vault.

To upgrade the current installation

  1. Log into the Cryptographic Security Platform Compliance Manager web GUI on your master node with your standard account credentials.

  2. Click on Switch to Appliance Management.

  3. In the top menu bar, click Cluster.

  4. In the top menu bar, click Cluster and make sure the Status of the cluster is Healthy. If it is not, you must resolve those issues before you can upgrade the cluster.

  5. In the top menu bar, click Settings.

  6. In the System Settings section, click System Upgrade.

  7. Ensure you have at least 25 GB of available disk space under the Current Information section on the System Upgrade page.

  8. Click Browse, navigate to the Entrust ISO upgrade file, and click Open. 

    Cryptographic Security Platform Compliance Manager has separate ISO files for installation and upgrade. Please use the ISO upgrade file.

  9. Click Upload File. If the Upload File button is not active, make sure that you have selected an ISO file and that the one-node cluster is healthy.
    After Cryptographic Security Platform Compliance Manager uploads and validates the ISO file, it begins the automatic upgrade process.

  10. Cryptographic Security Platform Compliance Manager displays a status message stating that the upgrade is in progress, along with a Cancel Upgrade button if you want to stop the process. 

    If the Cryptographic Security Platform Compliance Manager upgrade fails, reboot each node one at a time. Ensure you can log in to the rebooted node’s webGUI, then retry the upgrade. If it fails again, then please contact hytrust.support@entrust.com.

  11. Click Finish Upgrade. Cryptographic Security Platform Compliance Manager displays a message stating that the cluster will enter maintenance mode during this procedure and that all nodes will be rebooted. 

    While in maintenance mode, you cannot make any Cryptographic Security Platform Compliance Manager changes.

  12. Click Proceed. Cryptographic Security Platform Compliance Manager displays a status message stating that the cluster nodes are being rebooted. 

    After the upgrade, even if the Cryptographic Security Platform Appliance Management web GUI shows the upgrade is complete, it may still take up to 30 minutes to restore full functionality.

  13. Install a new Cryptographic Security Platform Compliance Manager OVA. For more information, see Installing Cryptographic Security Platform Compliance Manager from an OVA.

  14. Follow the instructions above to increase the new node's disk size to 250 GB.

  15. Join the newly installed Cryptographic Security Platform Compliance Manager node to the upgraded node to create a two-node cluster.