-
Title
Unable to activate SPS 5F10 firmware on 5F7 -
Description
When running Safeguard for Privileged Sessions 5F7, it is not possible to directly upgrade to 5F10 and the following error message is shown:
-
Cause
Because of a product error, SPS 5F7 compares its version to 5F10 wrongly and assumes that a downgrade is attempted.
This is an error in 5F7, not in 5F10. Also, this error is not present since 5F8 or any later version. -
Resolution
Upgrades from 5F7 to 5F10 is supported in one of the following ways:
- Switching to the Text Based Menu to activate the new firmware.
- Manually applying a hotfix before activating the new firmware from the Web UI.
1. Switching to the Text Based Menu to activate the new firmware
You should upload the 5F10 firmware by using the Web UI. Then log in to the SPS appliance using SSH, and select 2 Firmware management and then 3 Activate firmware.
2. Manually applying a hotfix before activating the new firmware from the Web UI.
In order to apply the hotfix, please upload the attached script (fix-5.7-upgrade.sh) to the /mnt/firmware/root directory by using SCP/SFTP. Then log in to the core shell via SSH, and issue the following command:
/root/fix-5.7-upgrade.sh
After the hotfix is applied, it is possible to activate the firmware by using the Web UI. Please note the following:
- the hotfix doesn't make your firmware tainted
- the hotfix is only effective until the next reboot, thus if you reboot before you activate the firmware, you would have to apply the hotfix again
IMPORTANT: After successfully activating the firmware, please proceed with the upgrade according to the upgrade guide.
Note: The above procedure is applicable to High Availability deployments as well. Shutting the the slave is required after activating the new firmware and before rebooting the master.
-
Attachments