The following describes how to upgrade a standalone One Identity Safeguard for Privileged Sessions (SPS) node to version 6.0.10.

• If you want to upgrade an SPS high-availability cluster, see Upgrading an SPS high-availability cluster to 6.0.10.

• If you want to upgrade an SPS central search or central management cluster, see Upgrading an SPS central cluster to 6.0.10.

To upgrade a standalone SPS node to version 6.0.10

1. Complete the prerequisites described in Prerequisites for upgrading SPS and upgrade SPS to the latest revision of the current version.

2. Login to your support portal, and download your license file.

   You need a new license file for every LTS release. If there is no license file for One Identity Safeguard for Privileged Sessions 6.0.10 under your account, contact our Licensing Team and Request a license key for a new version.

3. Download the SPS 6.0.10 firmware ISO file from the Downloads page.

4. If you are using a plugin (for example, a Credential Store plugin, or a multi-factor authentication plugin), download the version of the plugin from the Downloads page that is labeled as DEPRECATED.

   This version of the plugin is supported in SPS 6.0, but will not be supported in version 6.1. Before upgrading to SPS 6.1, you will have to start using a new implementation of the plugin, and update your configuration. For details, see Upgrading plugins for One Identity Safeguard for Privileged Sessions version 6.0.

   Upload the plugin to your SPS.

5. Upload the latest 6.0.10 firmware ISO file to your SPS. For details, see "Upgrading One Identity Safeguard for Privileged Sessions (SPS)" in the Administration Guide.

6. Click Test for the new firmware to check if your configuration can be upgraded to version 6.0.10. If the test returns any errors, correct them before continuing the upgrade process. If you encounter any problems, contact our Support Team.

   Select After reboot.

7. If the upgrade test is successful, activate the firmware.

8. Recommended step. To help troubleshoot potential issues following the upgrade, collect and save system information (create a support bundle) now.

   Navigate to Basic Settings > Troubleshooting > Create support bundle and choose Create support bundle.

9. Navigate to Basic Settings > System.

   Caution: Do NOT click Reboot cluster during the upgrade process unless explicitly instructed.

   Click System Control > This node > Reboot to reboot the machine. SPS will start with the new firmware and upgrade its configuration, database, and other system components. During the upgrade process, SPS displays status information and other data on the local console and on the web interface of SPS, at any of the Listening addresses configured at Basic settings > Local Services > Web login (admin and user).

   NOTE: If you are upgrading to version 6.0.10 from version 5.0.x, status information is displayed on the web interface only after the first boot to version 6.0.10. So during the upgrade to version 6.0.10, you will not be able to see any upgrade logs on the web interface.

   Caution: If the connection database is large and contains information about several thousands of sessions, the upgrade process can take about 15-20 minutes or more, depending on the actual hardware.

   Caution: After the reboot in 6.0.10, SPS will start importing large amounts of data from metadb. This process can take about 30-40 minutes or more. During the import process, the REST base search might not function properly, since the data to search in might still be incomplete.

10. After the reboot, login to the web interface and upload the new license file. For details, see "Upgrading One Identity Safeguard for Privileged Sessions (SPS)" in the Administration Guide.

    Caution: In case the SPS web interface is not available within 30 minutes of rebooting SPS, check the information displayed on the local console and contact our Support Team. If you experience any strange behavior of the web interface, first try to reload the page by holding the SHIFT key while clicking the Reload button of your browser to remove any cached version of the page.

    NOTE: In the unlikely case that SPS encounters a problem during the upgrade process and cannot revert to its original state, SPS performs the following actions: Initializes the network interfaces using the already configured IP addresses. Enables SSH-access to SPS, unless SPS is running in sealed mode. That way it is possible to access the logs of the upgrade process, which helps the Support Team to diagnose and solve the problem. Note that SSH access will be enabled on every active interface, even if management access has not been enabled for the interface.

11. Navigate to Basic Settings > System > Version details and verify that SPS is running version 6.0.10 of the firmware. If not, it means that the upgrade process did not complete properly and SPS performed a rollback to revert to the earlier firmware version. In this case, complete the following steps:

    1. Navigate to Basic Settings > Troubleshooting > Create support bundle and click Create support bundle.

    2. Save the resulting ZIP file.

    3. contact our Support Team and send them the file. They will analyze its contents to determine why the upgrade was not completed and assist you in solving the problem.

12. (Optional) If SPS was in a domain before the upgrade, navigate to RDP Control -> Domain membership and make sure that your domain-related settings are correct. In case of correct settings, you will see the following:

    • Fully qualified domain name (realm name): Host joined currently configured domain successfully.

    • Currently joined domains: <name.of.the.joined.domain>

    This is important because in rare cases, the appliance might fall out from the domain after an upgrade, and a manual rejoin might be required based on its status.

13. Upgrade your Safeguard Desktop Player installations to the latest version. For details, see Upgrading the Safeguard Desktop Player.

14. Upgrade your external indexer installations to the latest version. For details, see Upgrading the external indexer.