How to upgrade Safeguard 2.6 to latest version.

Question

Hi Experts, 
 
 We are currently using safeguard 2.6 (SPS and SPP) and was advised by support team to upgrade it to the latest version 6.0. I'd like to ask if there's any procedure that I can follow on how to do the upgrade. 
 appreciate if anyone can help me or point me to the right direction. 
 
 regards, 
 JD

tim westcott · Accepted Answer

Hi JD 
 Have you checked out the release notes? 
 I know for SPP there is a section at the end of the release notes that covers the upgrade steps and I believe it is the same for SPS. 
 This may give you a starting point. 
 Process for SPP is fairly straight forward and process patches all the cluster members for you. 
 Best regards 
 Tim

tim westcott · Answer

Hi John 
 Yes you are correct the built in SPS has now been removed in favour of an additional virtual or physical appliance in later SPP code releases. 
 Sorry. I had assumed that you had already crossed this bridge. 
 You will need to confirm with your One Identity account manager but I believe if you have a Safeguard appliance(s) with the built in SPS and you upgrade to a later version where SPS has been removed, you can get a free license for a virtual appliance(s) to allow you to upgrade. 
 PLEASE CHCK THIS with One Identity direct though!!! Maybe someone from One Identity will see this and be able to confirm. 
 The built I SPS was an old version of SPS code with many features missing. This version was part of a deal One Identity did with Balabit to OEM their technology before they then purchased Balabit. So lots of features were missing and you could not use the analytics feature. 
 So while there is additional work to be carried out to provision the extra SPS appliance(s) you get a lot more supported connection types and features. 
 Best regards 
 Tim.

tim westcott · Answer

Hi John 
 If you check out the chapter "SPP 2.7 or later migration guidance" in the spp admin guide it will give you guidance on migrating to an external SPS. It is .Appendix B in the 6.0 admin guide 
 The SPS virtual requires a basic Linux machine to be defined. The you just open the ISO image and it will build the SPS for you. 
 SPS supports a cluster model as well as a High availability model BUT the High Availability is ONY AVAILABLE on physical SPS hardware. 
 If you deploy SPS virtually you need to plan to use the Hypervisor to provide resilience. 
 You will need to use the "Join" feature to link the SPP and SPS together. 
 If you cluster the SPS virtual appliances they will provide load balancing of sessions coming from SPP. 
 I know SPP quite well but am still learning about SPS. However I have been able deploy SPS using the defaults it is supplied with and the Join feature to allow me to get to a point where I can initiate sessions from SPP in the same way you could before they split the products. 
 You also pick up 2 extra proxies (telnet + mainframe) when you deploy the SPP joined to the SPS and I believe the number of prixies will increase as they take the product forward. 
 Good luck 
 Best regards 
 TIm

Endpoint Privilege Management

How to upgrade Safeguard 2.6 to latest version.

Top Replies