Upgrading ESM and the Active-Passive High Availability Module on an Appliance

This information guides you through the process of upgrading ESM and the APHA module on an appliance.

The APHA module supports B7700 (G10) and B7600 (G9) appliances running on RHEL 7.9.

If you are running ESM 7.2 on a G10 or G9 appliance that is running RHEL 7.7, you must upgrade the operating system to RHEL 7.8 before you upgrade to RHEL 7.9 and ESM 7.5.

Note: New appliance pairs have ESM 7.2 images. If you purchase a new appliance pair and want to run ESM 7.5 on it, first install ESM 7.2 and the APHA module. For more information, see the ESM 7.2 Active Passive High Availability Module User's Guide on the ESM Previous Releases documentation page. After you install ESM 7.2, follow the instructions in this guide to upgrade ESM and the APHA module to 7.5.

Upgrading ESM and the APHA Module on a G10 Appliance

This section describes upgrading ESM and the APHA module on a G10 appliance, including upgrading the operating system on the appliance.

To upgrade ESM and the APHA module on a G10 appliance:

From the Licensing and Downloads site, download ArcSight-ActivePassiveHighAvailability-7.5.0.xxxx.tar and ArcSightESMSuite-7.5.0.xxxx.tar to the primary system (where xxxx is the build number).

Do NOT place the installation binary or unpacked content on the shared disk partition (usually /opt/arcsight). The upgrade process might unmount the shared disk partition.
As user arcsight, untar ArcSight-ActivePassiveHighAvailability-7.5.0.xxxx.tar.
Copy the preUpgrade.sh file to the secondary system.
As user root, run preUpgrade.sh on the secondary system.
On the secondary system, copy esm_apha_support_rpms_rhel79_G10.tar.gz and esm_osupgrade_rhel79_20210421234330.tar.gz to the /tmp partition.
From the directory where you placed the archive, extract esm_osupgrade_rhel79_20210421234330.tar.gz.
Change directory:
```
cd rhel79-upgrade
```
Make the script executable:
```
chmod 0700 osupgrade
```
Start the operating system upgrade:
```
./osupgrade 2>&1 | tee osupgrade.log
```
After the script completes, ensure that the system is rebooted.
Verify the operating system version:
```
cat /etc/redhat-release
```
You should receive the following result:

Red Hat Enterprise Linux Server release 7.9

From the directory where you placed the archive, extract and install the APHA support RPMs:

tar -zxvf esm_apha_support_rpms_rhel79_G10.tar.gz

cd esm_apha_support_rpms_rhel79_G10

./install_apha_support_pkgs.sh

On the primary system, as user arcsight, untar ArcSightESMSuite-7.5.0.xxxx.tar.
On the primary system, as user root, run Tools/stop_services.sh to shut down ESM.
Repeat steps 3 through 12 on the primary system.
On the primary system, as user arcsight, run ArcSight-ActivePassiveHighAvailability-7.5.0.xxxx.x.bin to start the APHA Module Installation Wizard.
On the primary system, as user root, run the following command:
```
/usr/lib/arcsight/highavail/install/upgrade.sh
```
The log file for the APHA module upgrade is located at: /usr/lib/arcsight/highavail/logs/upgrade.log.
On the primary system, upgrade to the supported ESM version.

For detailed instructions, see the ESM Upgrade Guide. Because you have already stopped the ArcSight services, you do not need to run Tools/stop_services.sh.

IMPORTANT: The APHA module must be running before you begin upgrading ESM.

After the ESM upgrade is complete, the APHA module synchronizes the primary system and the secondary system.

As user root, start the ArcSight services:

/opt/arcsight/manager/bin/setup_services.sh

Ensure that the ArcSight services are running:
```
/etc/init.d/arcsight_services status
```
If you have not already done so, use the ArcSight Console to activate the ArcSight ESM APHA Monitoring Foundation Package.

For more information, see the ArcSight Administration and ArcSight System Standard Content Guide.

When the upgrade is complete, perform post-upgrade tasks as described in the ESM Upgrade Guide, and then continue to Verifying the Active-Passive High Availability Module and ESM Upgrade.

Upgrading ESM and the APHA Module on a G9 Appliance

This section describes upgrading ESM and the APHA module on a G9 appliance, including upgrading the operating system on the appliance.

To upgrade ESM and the APHA module on a G9 appliance:

From the Licensing and Downloads site, download ArcSight-ActivePassiveHighAvailability-7.5.0.xxxx.tar and ArcSightESMSuite-7.5.0.xxxx.tar to the primary system (where xxxx is the build number).

Do NOT place the installation binary or unpacked content on the shared disk partition (usually /opt/arcsight). The upgrade process might unmount the shared disk partition.
As user arcsight, untar ArcSight-ActivePassiveHighAvailability-7.5.0.xxxx.tar.
Copy the preUpgrade.sh file to the secondary system.
As user root, run preUpgrade.sh on the secondary system.
On the secondary system, copy esm_apha_support_rpms_rhel79_G9.tar.gz and esm_osupgrade_rhel79_20210421234330.tar.gz to the /tmp partition.
From the directory where you placed the archive, extract esm_osupgrade_rhel79_20210421234330.tar.gz.
Change directory:
```
cd rhel79-upgrade
```
Make the script executable:
```
chmod 0700 osupgrade
```
Start the operating system upgrade:
```
./osupgrade 2>&1 | tee osupgrade.log
```
After the script completes, ensure that the system is rebooted.
Verify the operating system version:
```
cat /etc/redhat-release
```
You should receive the following result:

Red Hat Enterprise Linux Server release 7.9

From the directory where you placed the archive, extract and install the APHA support RPMs:

tar -zxvf esm_apha_support_rpms_rhel79_G9.tar.gz

cd esm_apha_support_rpms_rhel79_G9

./install_apha_support_pkgs.sh

On the primary system, as user arcsight, untar ArcSightESMSuite-7.5.0.xxxx.tar.
On the primary system, as user root, run Tools/stop_services.sh to shut down ESM.
Repeat steps 3 through 12 on the primary system.
On the primary system, as user arcsight, run ArcSight-ActivePassiveHighAvailability-7.5.0.xxxx.x.bin to start the APHA Module Installation Wizard.
On the primary system, as user root, run the following command:
```
/usr/lib/arcsight/highavail/install/upgrade.sh
```
The log file for the APHA module upgrade is located at: /usr/lib/arcsight/highavail/logs/upgrade.log.
On the primary system, upgrade to the supported ESM version.

For detailed instructions, see the ESM Upgrade Guide. Because you have already stopped the ArcSight services, you do not need to run Tools/stop_services.sh.

IMPORTANT: The APHA module must be running before you begin upgrading ESM.

After the ESM upgrade is complete, the APHA module synchronizes the primary system and the secondary system.

As user root, start the ArcSight services:

/opt/arcsight/manager/bin/setup_services.sh

Ensure that the ArcSight services are running:
```
/etc/init.d/arcsight_services status
```
If you have not already done so, use the ArcSight Console to activate the ArcSight ESM APHA Monitoring Foundation Package.

For more information, see the ArcSight Administration and ArcSight System Standard Content Guide.

When the upgrade is complete, perform post-upgrade tasks as described in the ESM Upgrade Guide, and then continue to Verifying the Active-Passive High Availability Module and ESM Upgrade.