The topic provides information and instructions for upgrading Remedy Single Sign-On (Remedy SSO) from an earlier version.
Best practices for upgrading Remedy SSO
Consider the following best practices for upgrading Remedy SSO.
- BMC recommends that you export the existing configurations prior to an upgrade or prior to making significant changes. If Remedy SSO upgrade is rolled back, the old configurations can be re-applied.
- Upgrade in this sequence:
- Upgrade the Remedy SSO servers.
- Upgrade the Remedy SSO integration with BMC Remedy AR system, Remedy MidTier, BMC MyIT or SmartIT, and BMC Analytics.
Keep Remedy SSO servers and integrations at the same version.
- To prevent down time In a high availability environment, perform a rolling upgrade of all Remedy SSO servers and integrations. Temporarily exclude the node that is being upgraded from load balancing, upgrade it, make sure it is functioning, and then include it back to balancing.
Post upgrade configurations
- If you upgrade from 9.0.01 or 9.1 to 9.1.01 or 9.1.02 and your system had realms configured for SAML authentication, you must reconfigure the SAML authentication settings after the upgrade. For more information on reconfiguring the SAML authentication settings, see Configuring SAML authentication settings after you upgrade.
- If you had modified the web.xml, then ensure that after the upgrade you reapply the changes.
Remedy SSO upgrade overview
The following table describes in detail the Remedy SSO upgrade process.
|Upgrade||What occurs during the upgrade|
|Remedy SSO application|
|HA environment with Remedy Single Sign-On|
|BMC Remedy AR system, BMC Remedy MidTier, BMC Remedy MyIT or SmartIT|
Before you begin
To upgrade Remedy SSO
Perform the steps given in this section to upgrade BMC Remedy SSO.
The web container (Tomcat server) in which BMC Remedy SSO server integrations are running will be restarted during an upgrade of Tomcat.
Run the installation program based on your operating system.
- For Microsoft Windows, run setup.exe.
- For Linux, run sh setup.sh.
- In the lower-right corner of the Welcome panel, click Next.
- Review the license agreement, click I agree to the terms of license agreement, and then click Next.
- Select the Upgrade BMC Remedy SSO <version1> to <version2> option, and then click Next.
- In the Installation Preview window, click Install.
- In the Installation Summary window, click Done.
Configuring SAML authentication settings after you upgrade
Based on whether or not you plan to shut down for the upgrade, proceed as follows:
For planned downtime
- Upgrade all Remedy SSO server nodes to the required version.
- Log in to the Admin console of Remedy SSO.
- For each realm that is configured for SAML authentication, perform the following steps:
- Edit the realm to enter PEM encoded IdP signing certificate data in the IdP Signing Certificate field or import the IdP metadata again. Ensure that the other SAML configuration is same as before except the IdP Signing Certificate field data.
- Save the details.
For no planned downtime
- Remove a Remedy SSO server node from the cluster.
- Upgrade the removed server node to the required version.
Log in to the Admin console of Remedy SSO after the upgrade is complete.
For each realm that is configured for SAML authentication, perform the following steps:
Edit the realm to enter PEM encoded IdP signing certificate data in the IdP Signing Certificate field or import the IdP metadata again. Ensure that the other SAML configuration is same as before except the IdP Signing Certificate field data.
Save the details.
Bring the server node back to the cluster.
Repeat Steps 1 to 5 for the remaining nodes in the cluster.
Upgrading Remedy SSO using the silent mode
A silent upgrade is used to upgrade Remedy Single Sign-On (Remedy SSO) in multiple systems. You need to generate an options file containing the following details to perform a silent upgrade.
To upgrade Remedy SSO servers
-P installLocation=<path where product info will be located> example: C:\SSO\RemedySSO
-J DB_TYPE=<MS SQL | Oracle>
To upgrade Remedy SSO integrations