15.4 Upgrading the Appliance Installation

Beginning with Change Guardian 6.3.2, only traditional installations are supported, and appliance-based setups are no longer supported. To upgrade to this version, first update the underlying operating system (OS) to meet the required specifications, then proceed with the Change Guardian upgrade.

Ensure that NTP synchronized your computer time with the network time.

After completing the upgrade, perform the post upgrade configurations.

This section provides a unified procedure for upgrading the following Change Guardian 6.3.X appliances to Change Guardian 6.3.2:

  • Change Guardian 6.3.X OVF appliance

  • Change Guardian 6.3.X ISO appliance

  • Change Guardian 6.3.X Hyper-V appliance

NOTE:If you are upgrading from Change Guardian 6.3.0 to 6.3.1, and want to continue leveraging with appliance-based setups, refer to Change Guardian Server Appliance Installation section. However, it is recommended to upgrade to Change Guardian 6.3.2.

15.4.1 Upgrading Change Guardian to 6.3.2

To upgrade Change Guardian to 6.3.2, follow the steps provided in the Upgrading Change Guardian section.

15.4.2 Upgrading the OS from SLES 12 SP5 to SLES 15 SP6

  1. Run the following command to switch to the root user:

    su root

  2. Run the following command to change the working directory to /etc:

    cd /etc

  3. Run the following command to create a file named SUSE-brand in the /etc/ directory:

    vi SUSE-brand

  4. Copy the following content to the SUSE-brand file that you created in the previous step and save the file:

    SLE

    VERSION = 15

  5. Run the following command to change the working directory to /etc/products.d:

    cd /etc/products.d

  6. Run the following command to delete the files in the /etc/products.d/ directory:

    rm *

  7. Run the following command to create a file named SLES.prod in the /etc/products.d/ directory:

    vi SLES.prod

  8. Copy the following content to the SLES.prod file that you created in the previous step and save the file:

    <?xml version="1.0" encoding="UTF-8"?>

    <product schemeversion="0">

    <vendor>SUSE</vendor>

    <name>SLES</name>

    <version>12.5</version>

    <baseversion>12</baseversion>

    <patchlevel>5</patchlevel>

    <release>0</release>

    <endoflife></endoflife>

    <arch>x86_64</arch>

    <cpeid>cpe:/o:suse:sles:12:sp5</cpeid>

    <productline>sles</productline>

    <codestream>

    <name>SUSE Linux Enterprise Server 12</name>

    <endoflife>2024-10-31</endoflife>

    </codestream>

    <register>

    <target>sle-12-x86_64</target>

    <updates>

    <repository repoid="obsrepository://build.suse.de/

    SUSE:Updates:SLE-SERVER:12-SP5:x86_64/update" />

    <repository repoid="obsrepository://build.suse.de/

    SUSE:Updates:SLE-SERVER:12-SP5:x86_64/update_debug" />

    <repository repoid="obsrepository://build.suse.de/

    SUSE:Updates:SLE-SERVER-INSTALLER:12-SP5:x86_64/update" />

    </updates>

    </register>

    <upgrades/>

    <updaterepokey>A43242DKD</updaterepokey>

    <summary>SUSE Linux Enterprise Server 12 SP5</summary>

    <shortsummary>SLES12-SP5</shortsummary>

    <description>SUSE Linux Enterprise offers a comprehensive

    suite of products built on a single code base.

    The platform addresses business needs from

    the smallest thin-client devices to the world's

    most powerful high-performance computing

    and mainframe servers. SUSE Linux Enterprise

    offers common management tools and technology

    certifications across the platform, and

    each product is enterprise-class.</description>

    <linguas>

    <language>cs</language>

    <language>da</language>

    <language>de</language>

    <language>en</language>

    <language>en_GB</language>

    <language>en_US</language>

    <language>es</language>

    <language>fi</language>

    <language>fr</language>

    <language>hu</language>

    <language>it</language>

    <language>ja</language>

    <language>nb</language>

    <language>nl</language>

    <language>pl</language>

    <language>pt</language>

    <language>pt_BR</language>

    <language>ru</language>

    <language>sv</language>

    <language>zh</language>

    <language>zh_CN</language>

    <language>zh_TW</language>

    </linguas>

    <urls>

    <url name="releasenotes">https://www.suse.com/releasenotes/x86_64/SUSE-SLES/12-SP5/release-notes-sles.rpm</url>

    </urls>

    <buildconfig>

    <producttheme>SLES</producttheme>

    </buildconfig>

    <installconfig>

    <defaultlang>en_US</defaultlang>

    <datadir>suse</datadir>

    <descriptiondir>suse/setup/descr</descriptiondir>

    <releasepackage name="sles-release" flag="EQ" version="12.5" release="1.171"/>

    <distribution>SUSE_SLE</distribution>

    </installconfig>

    <runtimeconfig/>

    <productdependency relationship="provides" name="SUSE_SLE" baseversion="12" patchlevel="5" flag="EQ"/>

    <productdependency relationship="provides" name="SUSE_SLE-SP5" baseversion="12" patchlevel="5" flag="EQ"/>

    </product>

  9. Run the following command to create a symbolic link:

    ln -s SLES.prod baseproduct

  10. Unregister from NCC (Novell Customer Center).

    Do the following steps to unregister from NCC:

    1. Erase local registration data.

      Run the following commands:

      suse_register -Erm -fr /etc/zypp/credentials.drm -fr /etc/zypp/repos.d/*rm -fr /etc/zypp/services.d/*

  11. Mount the SLES 15 SP6 ISO to your CD drive and restart your machine to initiate the upgrade process.

    NOTE:Upgrading the OS to SLES 15 SP6 will remove the following:

    • The CAF (Common Appliance Format) related rpm packages.

    • Appliances button from the Change Guardian Main UI.

  12. During the upgrade process, ignore the mounted-partition warning and proceed to configure the following extensions and modules:

    1. Basesystem Module

    2. Legacy Module

    3. Development Tools Module

    4. SUSE Linux Enterprise Live Patching

    5. Python 3 Module

    6. SUSE Linux Enterprise High Availability Extension 15 SP6 (If you are opting for a high availability deployment).

  13. After the upgrade, run the following command to make sure that the OS has been upgraded:

    cat /etc/os-release

  14. Run the following command to create a symbolic link:

    ln -s SLES.prod baseproduct

    NOTE:If you encounter an error related to the symbolic link, run the command again.

15.4.3 Post Operating System Upgrade Tasks

After upgrading the operating system, perform the following steps:

  1. Run the following command to verify that the repositories selected at the time of the OS upgrade are enabled:

    zypper lr

    • (Conditional) If a repository has not been enabled, run the following command to enable it:

      zypper mr -e <repository_serial_number>

  2. With the offline CD mounted, run the following command to install SUSEConnect:

    zypper in suseconnect-ng

  3. Register SLES15 SP6 by following the procedure outlined in the "How to register SLES using the SUSEConnect command line tool" on the SUSE support website.

  4. Run the following command to create a backup of the existing firewall configuration file:

    cp /etc/sysconfig/SuSeFirewall2 /etc/sysconfig/SuSeFirewall2_pre15upgr

  5. Run the following command to install the firewalld package:

    zypper in firewalld

  6. Download the SuSeFirewall2 to firewalld migration package:

    zypper in susefirewall2-to-firewalld

  7. Run the following command to migrate SuSeFirewall2 configuration to firewalld:

    /usr/sbin/susefirewall2-to-firewalld

  8. Run the following command to uninstall SuSeFirewall2 package:

    rpm -e --nodeps SuSeFirewall2