Up
Previous Next

Sheriff CSM™

Upgrading a Sheriff CSM Deployment Configured for High Availability

Prerequisites

To upgrade Sheriff CSM to a new version, you must first temporarily disable HA. See Disabling High Availability.

Order of Component Upgrade

You must upgrade Sheriff CSM Standard or Enterprise components in the following order, starting with the secondary and moving to the primary node:
  • Servers
  • Deputies

Upgrading Sheriff CSM

To upgrade Sheriff CSM
  1. Connect to the Sheriff Console on the secondary node through SSH and use your credentials to log in.

    The Sheriff Setup menu displays.

  2. Update the node by selecting System Preferences > Update Sheriff System > Update System.
  3. Press Enter (<Yes>) and wait until you see the following message:

    Your system has been updated successfully
  4. Press Enter (<OK>).
  5. On the Sheriff Setup main menu, select Jailbreak System to gain command line access.

    Select Yes when prompted. You will be in the root directory.

  6. Edit /etc/vigilante/vigilante_setup.conf and set ha_heartbeat_start=yes.

    Note: You need to do this step because ha_heartbeat_start was set to no when disabling HA before the update.

  7. Repeat steps #1 through #6 on the primary node.
  8. Re-enable HA.

    Run this command first on the secondary node, then on the primary node:

    screen sheriff-ha-assistant -e

    Note: Use screen to keep the process running in the background even when the session disconnects.

  9. (If and only if upgrading the Standard Deputies) On the primary node, swap the token with the secondary node, effectively making the primary node active:

    sheriff-ha-assistant –w
Topic revision: r10 - 02 May 2022, SheriffCyberSecurity
Copyright 2020 Sheriff Cyber Security, LLC. All rights reserved.