PingIntelligence

Step-4 Upgrading ASE

Complete the following steps on all the ASE nodes in a cluster to upgrade to upgrade ASE 5.0 to 5.1.

Before you begin

  • Extract the upgrade scripts from the PingIntelligence upgrade package as explained in Common upgrade tasks section

  • Run the following command to disable ABS:

    # <ASE installation path>/ase/bin/cli.sh -u <username> -p <password> disable_abs

  • Run the following command and stop ASE.

    # /<ASE installation path>/pingidentity/ase/bin/stop.sh -u <username> -p <password>

    For example:

    # /home/pi-user/pingidentity/ase/bin/stop.sh -u admin -p pswd

    If ASE is running as a service, then run the following command.

    # systemctl stop pi-ase.service

  • Make sure all the access logs are uploaded. Navigate to /<ASE 5.0 installation path>/pingidentity/ase/log and run the following command.

    $ ls -lrt | sed -r "s/(.+\s+.+\s+.+\s+.+\s+0\s+.+)//g" | grep "http\|decoy"

About this task

Complete the following steps on all the ASE nodes in a cluster to upgrade to upgrade ASE 5.0 to 5.1.

Steps

  1. Download the ASE 5.1 binary. Copy the binary to a temporary directory and extract it.

    # cp pi-api-ase-rhel-5.1.tar.gz ~/pi-tmp/
# cd ~/pi-tmp/
# tar -xvf pi-api-ase-rhel-5.1.tar.gz

  2. Navigate to ~/pi-tmp/pingidentity/upgrade/ase/ and copy the ASE upgrade script to the ~/pi-tmp/pingidentity/ase/util/ directory in the temporary directory.

    # cd ~/pi-tmp/pingidentity/upgrade/ase/
# cp ase-upgrade.sh ~/pi-tmp/pingidentity/ase/util/

  3. Navigate to the /<ASE 5.0 installation path>/pingidentity/ase/config/ directory, and remove the existing ASE license from the directory.

  4. Copy the new PingIntelligence 5.1 license into /<ASE 5.0 installation path>/pingidentity/ase/config/ directory.

  5. Navigate to the ~/pi-tmp/pingidentity/ase/util/ directory and run the upgrade script.

    # cd ~/pi-tmp/pingidentity/ase/util/
# ./ase-upgrade.sh <ASE 5.0 installation path>

    For example:

    # ./ase-upgrade.sh /home/pi-user/pingidentity/ase
Step 5.0 is not running
Copying new binaries for ASE 5.1
Upgrade to ASE 5.1 is successful
Please start ASE using: /home/pi-user/pingidentity/ase/bin/start.sh
If systemctl service present, run command: systemctl restart pi-ase.service
.
.

    The ase-upgrade.sh script upgrades the Balancer and Controller binaries in ASE.

  6. Run the following command and verify the successful upgrade of the ASE node.

    # /<ASE installation path>/pingidentity/ase/bin/cli.sh version

    For example:

    # /home/pi-user/pingidentity/ase/bin/cli.sh version

  7. Start ASE nodes in a cluster setup one after the other.

    # /<ASE installation path>/pingidentity/ase/bin/start.sh

    For example:

    # /home/pi-user/pingidentity/ase/bin/start.sh

    If ASE is running as a service, then run the following command.

    # systemctl start pi-ase.service

  8. Run the following command to enable ABS:

    # <ASE installation path>/pingidentity/ase/bin/cli.sh -u admin -p <password> enable_abs

  9. Run the following command to check the status and verify the successful start of ASE node.

    # <ASE installation path>/pingidentity/ase/bin/cli.sh status

    For example.

    # /home/pi-user/pingidentity/ase/bin/cli.sh status

Next steps

Enter the following command and enable ABS on ASE node.

# <ASE installation path>/ase/bin/cli.sh -u <username> -p <password> enable_abs