Update of an existing installation

This page describes how to upgrade security.manager NEXT version 1.0.0 to 1.1.0.

Before updating, check the update notes in the Release Notes of the current version.

The upgrade affects all components of security.manager NEXT:

security.manager NEXT Manager UI (Browser application)
security.manager NEXT CLI (Command line tool)
security.manager NEXT SOI (ArcGIS Server extension)

Upgrading the SOI possibly requires you to backup and restore existing policies. This can be done easily by using the CLI. Therefore, ensure to upgrade the CLI before upgrading the SOI. How to backup the policies is described below.

Preparation

Before upgrading the security.manager NEXT components, unzip the installation file security.manager-NEXT-1.1.0.zip into an arbitrary folder. This will create the folder security.manager-NEXT-1.1.0 that will be referred to as [SECMAN-DIR] in these docs.

Upgrade the Manager UI

Note: To identify the running version of the Manager UI before or after an upgrade, open https://<tomcat-host>/secman-next/info.txt in a browser.

Follow these steps to update the Manager UI:

Determine the data directory (parameter data.directory.location) configured in [TOMCAT]\webapps\secman-next\WEB-INF\classes\custom-application.properties. The directory contains custom configuration of the current installed version of security.manager NEXT. The value is needed for restoring it later.
Stop the Apache Tomcat server where the Manager UI is installed.
Remove the old Manager UI context from [TOMCAT]\webapps (move it to a backup folder before deleting it completely).
Deploy the Manager UI web application by copying [SECMAN-DIR]\secman-next.war to [TOMCAT]\webapps.
Edit the file [TOMCAT]\webapps\secman-next\WEB-INF\classes\custom-application.properties and change the property data.directory.location to the previously determined value.
Restart the Apache Tomcat server.
Check the Manager UI version as described above.

Upgrade the CLI

The application secmanctl is shipped as an executable file for Windows and Linux operating systems (x86-64 architecture). It is also available as a package in the public npm registry. Depending on which type of installation was used before, there are basically two possibilities to upgrade an existing installation:

If the shipped executables were installed, you should update them with those shipped by the new release.
If the application was installed from the public npm registry, you should update them by using npm.

Upgrading installed executables

The secmanctl files are located in the following directory:

[SECMAN-DIR]/cli/linux_x64 for Linux.
[SECMAN-DIR]\cli\windows_x64 for Windows.

Follow these steps to upgrade the manually installed files:

Determine the current installation path.
- On Linux by executing the command which secmanctl.
- On Windows by executing the command where secmanctl.
Delete all previously installed files from the installation path.
Copy all new files from the directory mentioned above to the installation path.
Check the new version of the CLI by executing the command secmanctl --version. The version should be 1.1.0 or higher.

Upgrading the npm package

Follow these steps to upgrade the npm package:

Perform the update by executing the command npm update -g @conterra/secmanctl.
Check the new version of the CLI by executing the command secmanctl --version. The version should be 1.1.0 or higher.

Upgrade the SOI

With the release of security.manager NEXT 1.1.0, the shipped SOE files were renamed:

ct-security-soi-1.0.0-arcmap.soe was renamed to ct-security-soi-arcmap.soe
ct-security-soi-1.0.0-arcgispro.soe was renamed to ct-security-soi-arcmap.soe

It is required to delete the old SOI via the ArcGIS Server Manager before uploading the new version of the SOI.

When deleting the old SOI existing policies will get lost! During the update process, the policies will be backed up and restored via the CLI command sync. Do not use any existing policy working directory for the backup.

Please make sure, you have upgraded the CLI before upgrading the SOI.

Follow these steps to upgrade the SOI:

Backup all existing policies:
1. Create a local backup directory, for example backup_policies. Create a subdirectory backup_policies/services.
2. Execute the CLI sync command in combination with the --reverse option:
  $ secmanctl sync --reverse -f ./backup_policies -d https://gis.example.com:6443/arcgis -t MghzyNeWubQtT..
3. Make sure, no error occured and check the backup folder for completeness.
Upgrade the SOI via the ArcGIS Server Manager:
1. Sign in to ArcGIS Server Manager and navigate to the Site section. Open the Extensions area.
2. Delete the two installed SOE files (this will delete all policies!):
  - ct-security-soi-1.0.0-arcmap.soe
  - ct-security-soi-1.0.0-arcgispro.soe
3. Click Add Extension to upload both SOE files from [SECMAN-DIR].
Execute the sync commmand (now without the --reverse option) to restore the policies from backup_policies:
```
$ secmanctl sync -f ./backup_policies -d https://gis.example.com:6443/arcgis -t MghzyNeWubQtT..
```
Check the output for errors. If all policies have been applied, you can safely delete the backup folder.

Congratulations! You successfully finished the update process. Now, get familiar with the new features of security.manager NEXT.