Upgrading BMC Helix IT Service Management to 23.3.04

Before you use the BMC Helix Service Management products, BMC recommends that you upgrade the products to the latest version. For details about the latest updates and corrected issues, see Release-notes-and-notices.

Before you use BMC Helix Service Management 23.3.04 in your production environment, test BMC Helix Service Management 23.3.04 in your non-production environment.

Before you begin

Make sure that you meet the sizing requirements and system requirements for your environment.
Make sure that you back up the BMC Helix Innovation Suite database.
Verify that the AR Server license is valid.
Make sure that you have prepared your environment for upgrade.
Make sure that you have upgraded to a supported version of BMC Helix Platform Common Services or upgraded to a supported version of BMC Helix IT Operations Management if you are using both BMC Helix IT Operations Management and BMC Helix Service Management.
If you are using an Oracle database, make sure that you are using Oracle database 19.16 or later version.
Verify that you have specified the Tenant parameter value while configuring the BMC Helix Single Sign-On realm.
Create a service account to enable key encryption key if you do not want to use the default service account.
Add the following Jenkins credential.
1. Navigate to http://<Jenkins server host name>:<Jenkins port>/credentials/store/system/domain/_/
2. Click Add Credentials.
3. Enter the following details:
  Kind
  Specify the secret text.
  Scope
  Global (Jenkins, nodes, items, all child items, etc)
  ID
  password_vault_apikey
  Secret
  Do not specify any value.
  Make sure that you keep this field blank.
4. Save the details.
Due to recent changes in the Red Hat repositories, ansible-core 2.16 is installed by default on RHEL 8.x systems. Ansible 2.16 is not compatible with BMC Helix Service Management deployments.
If you are using RHEL 8.x, downgrade Ansible version to 2.15 by using the following commands:
sudo dnf downgrade ansible-core-2.15.3-1.el8.x86_64
sudo yum install python3.11-jmespath -y
Install the following packages:
- To ensure that the autorecon utility runs successfully, install the gtk3 package by running the following command:
  yum install -y gtk3
- If you are using a Microsoft SQL Server database, install the following packages so that the HELIX_DB_REFRESH runs successfully:
  sudo yum install unixODBC
  sudo yum install python3-pyodbc
- If you are using a PostgreSQL database, install the following packages so that the HELIX_DB_REFRESH runs successfully:
  sudo yum install postgresql-client
  sudo yum install python3-psycopg2
If required, restrict the upgrade process from changing the Centralized configuration system (CCS) parameters specific to your environment.
See Changes to configuration settings during an upgrade in BMC Helix Innovation Suite documentation.

Kind	Specify the secret text.
Scope	Global (Jenkins, nodes, items, all child items, etc)
ID	password_vault_apikey
Secret	Do not specify any value. Make sure that you keep this field blank.

Task 1: To update the deployment pipelines

Perform the following steps to update the HELIX_ONPREM_DEPLOYMENT pipeline.
1. On the Jenkins server, select the HELIX_ONPREM_DEPLOYMENT pipeline.
2. In the Build History, select the latest build and click Rebuild.
3. In the PRODUCT-DEPLOY section, clear the check boxes for all the options.
4. Click Rebuild.
Update the HELIX_GENERATE_CONFIG pipeline so that the updated parameters for the pipeline are reflected.
1. On the Jenkins server, select the HELIX_GENERATE_CONFIG pipeline.
2. In Build History, select the latest build and click Rebuild.
3. Click Rebuild.
  After the pipeline is rebuilt, the updated parameters for the pipeline are reflected.
If you are upgrading BMC Helix Service Management from version 21.3.x or 22.1.x, update the FULL_STACK_UPGRADE pipeline so that the updated parameters for the pipeline are reflected.
1. On the Jenkins server, select the FULL_STACK_UPGRADE pipeline.
2. In Build History, select the latest build and click Rebuild.
3. Click Rebuild.
  After the pipeline is rebuilt, the updated parameters for the pipeline are reflected.
If you are upgrading BMC Helix Service Management from version 23.3.01 or 23.3.03, update the HELIX_PLATFORM_UPDATE, HELIX_NONPLATFORM_UPDATE, HELIX_SMARTAPPS_DEPLOY, and SUPPORT_ASSISTANT_TOOL pipelines:

1. On the Jenkins server, select the pipeline.
2. In Build History, select the latest build and click Rebuild.
3. Click Rebuild.
  After the pipeline is rebuilt, the updated parameters for the pipeline are reflected.

Task 2: To run the HELIX_ONPREM_DEPLOYMENT pipeline

Select the HELIX_ONPREM_DEPLOYMENT pipeline, select the latest build, and then click Rebuild.
Important
Make sure that the build contains all the required parameter values.
You only need to update the parameters in specified in the following steps.

In the CODE section, specify the following parameters:

Parameter	Description
GIT_USER_HOME_DIR	Git user home directory. Example: /home/git
GIT_REPO_DIR	Directory that contains all the Git repositories for the deployment pipelines. Example: ssh://<Jenkins server host name>/home/git/git_repo

In the CUSTOMER-INFO section, specify the following parameters:

Parameter	Description
ROUTE_ENABLED	Do not select this check box.
ROUTE_TLS_ENABLED	Do not select this check box.
OS_RESTRICTED_SCC	Select this check box if you are using an OpenShift cluster and have restricted security context constraints enabled.
IS_NAMESPACE	Specify the namespace where you want to install BMC Helix Innovation Suite.
CACERTS_FILE	Click Browse and upload your custom cacerts file. You want to use a custom CA certificate or self-signed certificate to use HTTPS communication for Service Management applications. You want BMC Helix Innovation Suite platform to communicate with third-party services that use custom cacerts. Important: Make sure that you use the same custom certificate in BMC Helix Innovation Suite and BMC Helix Platform. Make sure that you upload the cacerts file that you created while upgrading BMC Helix Platform Common Services.See Upgrading-BMC-Helix-Platform-Common-services-version-from-24-2-00-to-24-4-00 and Upgrading-BMC-Helix-Platform-Common-services-version-from-24-3-00-to-24-4-00.
CACERTS_SSL_TRUSTSTORE_PASSWORD	Specify a password for your cacerts file. Leave this field blank if you want to use the default password for the cacerts file.
CUSTOMER_SIZE	Specify the deployment size, such as compact, small, medium, large, or extra large. Enter the value as C, S, M, L, or XL. Important: Make sure that you select the appropriate deployment size. The deployment size is C - compact by default. During the upgrade, you can continue to use compact size by specifying the value as C or another size according to your requirement.
SOURCE_VERSION	Specify the source version of the Helm repositories: If your BMC Helix Innovation Suite platform source version is 21.3.02, type 2021302.1.00.00 If your BMC Helix Innovation Suite platform source version is 21.3.04, type 2021304.1.00.00 If your BMC Helix Innovation Suite platform source version is 21.3.05, type 2021305.1.05.00 If your BMC Helix Innovation Suite platform source version is 21.3.06, type 2021306.1.07.00 If your BMC Helix Innovation Suite platform source version is 21.3.10, type 2021310.1.00.00 If your BMC Helix Innovation Suite platform source version is 22.1.06, type 2022106.1.03.00 If your BMC Helix Innovation Suite platform source version is 23.3.01, type 2023301.1.02.00 If your BMC Helix Innovation Suite platform source version is 23.3.03, type 2023303.1.02.00
PLATFORM_HELM_VERSION	Specify the target version of the Helm repositories as 2023304.1.06.00
SMARTAPPS_HELM_VERSION	Specify the version of the Helm repositories for applications as 2023304.1.06.00
DEPLOYMENT_MODE	If you are upgrading BMC Helix Service Management from version 21.3.x or 22.1.x, specify the value as UPGRADE. If you are upgrading BMC Helix Service Management from version 23.3.01 or 23.3.03, specify the value as UPDATE.

In the PRODUCTS section, specify the following parameters:

Parameter	Description
HELIX_VIRTUALCHAT	Select this check box to install BMC Live Chat.
HELIX_OPENFIRE	Select this check box to install Openfire.
HELIX_DWP	Select this check box to install BMC Digital Workplace.
HELIX_DWPA	Select this check box to install BMC Digital Workplace Catalog.
HELIX_CLOUD_ACTIONS	Select this check box to install Cloud Actions connectors that connect BMC Helix Innovation Suite with third-party applications. Important: If you select this check box, make sure that you select the HELIX_DWPA check box.
HELIX_NETOPS	Select this check box to install BMC Helix Telco Extensions.
HELIX_GPT	Select this check box to install BMC HelixGPT. Important: After you complete the BMC Helix Service Management installation, make sure that you configure BMC HelixGPT for BMC Helix Service Management. See Configuring Ask HelixGPT for BMC Helix ITSM in BMC Helix ITSM: Service Desk documentation.
HELIX_BWF	Select this check box to install BMC Helix Business Workflows.
HELIX_MCSM	Select this check box to install BMC Helix Multi-Cloud Broker.
HELIX_ITSM_INSIGHTS	Select this check box to install BMC Helix ITSM Insights.
HELIX_TSOMPLUGIN	Select this check box to install TrueSight Operations Management plug-ins.
HELIX_SMARTAPPS_CSM	Select this check box to install BMC Helix Customer Service Management (CSM). Important: If you select this check box, make sure that you select the HELIX_BWF check box.
HELIX_SMARTAPPS_FAS	Select this check box to install BMC Helix Portfolio Management. Important: If you select this check box, make sure that you select the HELIX_BWF check box.
HELIX_DRIFT_MANAGEMENTPLUGIN	Select this check box to install Drift Management.
HELIX_CLAMAV	Select this check box to install Clam AntiVirus.
HELIX_NETOPS	Select this check box to install BMC Helix Telco Extensions.

In the PRODUCT-DEPLOY section, specify the following parameters:

Parameter	Description
HELIX_GENERATE_CONFIG	Select this check box.
HELIX_PLATFORM_DEPLOY	Select this check box only if you are upgrading BMC Helix Service Management from version 23.3.01 or 23.303.
HELIX_NONPLATFORM_DEPLOY	Select this check box only if you are upgrading BMC Helix Service Management from version 23.3.01 or 23.303.
HELIX_CONFIGURE_ITSM	Do not select this check box.
HELIX_SMARTAPPS_DEPLOY	Select this check box only if you are upgrading BMC Helix Service Management from version 23.3.01 or 23.303.
SUPPORT_ASSISTANT_TOOL	Select this check box only if you are upgrading BMC Helix Service Management from version 23.3.01 or 23.303.
HELIX_INTEROPS_DEPLOY	Select this check box to activate services such as BMC Helix ITSM Insights, BMC Helix ITSM: Smart IT, BMC Helix Digital Workplace, BMC Helix Digital Workplace Catalog, and BMC Helix Business Workflows for the BMC Helix Platform users. Important: Select this check box if you have not activated the above services in an earlier version of BMC Helix Service Management.
HELIX_FULL_STACK_UPGRADE	If you are upgrading BMC Helix Service Management from version 21.3.x or 22.1.x, select this check box. If you are upgrading BMC Helix Service Management from version 23.3.01 or 23.3.03, do not select this check box.
HELIX_POST_DEPLOY_CONFIG	Do not select this check box.
HELIX_DR	Do not select this check box.
SCALE_DOWN	Do not select this check box.
HELIX_RESTART	Do not select this check box.

Important

Make sure that you do not select the HELIX_CONFIGURE_ITSM, HELIX_POST_DEPLOY_CONFIG, HELIX_DR, SCALE_DOWN, and HELIX_RESTART check boxes. These parameters are not required for upgrading BMC Helix Service Management.

In the DATABASE_REGISTRY_STORAGE_PASSWORDS_SECRETS_DETAILS section, specify the following parameters:

Parameter	Description
PLATFORM_ADMIN_PLATFORM_EXTERNAL_IPS	Specify the IP address that you specified as the external IP for the platform-admin-ext service. The external IP must be in JSON list format within square brackets, such as [10.x.x.x].
ENABLE_PLATFORM_INT_NORMALIZATION	Select this check box to start the Normalization service on the platform-int pod.
DB_SSL_ENABLED	Do not select this check box.
DB_JDBC_URL	Specify a JDBC URL to use a database connection through the URL. Example: jdbc:oracle:thin:@(DESCRIPTION=(LOAD_BALANCE=OFF)(FAILOVER=OFF)(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCP)(HOST=DATABASE_HOST_NAME)(PORT=1521)))(CONNECT_DATA=(SERVICE_NAME=AR_ORACLE_SERVICE_NAME)(SERVER=DEDICATED))) This parameter is optional.
LOGS_ELASTICSEARCH_TLS	Select this check box.
LOGS_ELASTICSEARCH_PASSWORD	Specify the password that you provided for Kibana in the secrets.txt file while you were installing BMC Helix Platform service.
MIDTIERCACHEBUILDER_TRIGGER_PRELOAD	Select this check box to enable full data cache mode.
MIDTIERCACHEBUILDER_SCHEDULE	Specify a cron job schedule for the Mid Tier cache builder job.
BWF_DEPLOY_SAMPLE_CONTENT_PACK	Select this check box to deploy BMC Helix Business Workflows sample content package.
DWP_DEPLOY_SAMPLE_CONTENT_PACK	Select this check box to deploy BMC Helix Digital Workplace sample content package.
CLOUDACTIONS_DEPLOY_SAMPLE_CONTENT_PACK	Select this check box to deploy the connectors sample content package.
FTS_ELASTICSEARCH_HOSTNAME	Specify the Elasticsearch Full Text Search service name or external IP address that you created for FTS_ELASTICSEARCH. For the service name, use the following format: opensearch-logs-data.<BMC Helix Platform namespace> For more information about external IP for FTS_ELASTICSEARCH, see Setting-up-the-installation-environment.
FTS_ELASTICSEARCH_USER	Specify the Elasticsearch Full Text Search user name. The default value is bmcuser.
FTS_ELASTICSEARCH_USER_PASSWORD	Specify the password that you provided for the LOG_ES_PASSWD parameter in the secrets.txt file while installing BMC Helix Platform Common Services.
AR_DB_CASE_SENSITIVE	This parameter is only applicable for a fresh installation of BMC Helix Innovation Suite.
AR_DATETIME	Specify the AR System date and time format to use: DD.MM.YYYY HH:MM:SS (24-hour) DD/MM/YY HH:MM:SS (12-hour) DD/MM/YY HH:MM:SS (24-hour) DD/MM/YY HH:MM:SS AM\|PM DD/MM/YYYY HH:MM:SS (12-hour) DD/MM/YYYY HH:MM:SS (24-hour) DD/MM/YYYY HH:MM:SS AM\|PM MM/DD/YYYY HH:MM:SS (24-hour) If you do not specify any value, the default system date and time is assigned.
AR_TIMEZONE	Specify the AR System time zone to use. See the supported time zone values. If you do not specify any value, the default system time zone is assigned.

In the RSSO_PARAMETERS section, specify the following parameter:
Parameter
Description
TENANT_DOMAIN
Specify the value of the Tenant parameter that you specified while configuring the BMC Helix Single Sign-On realm.

Parameter	Description
TENANT_DOMAIN	Specify the value of the Tenant parameter that you specified while configuring the BMC Helix Single Sign-On realm.

In the ITSM_INTEROPS_PARAMETERS section, specify the following parameter:

Parameter	Description
HELIX_PLATFORM_NAMESPACE	Specify the namespace where BMC Helix Platform is installed. Important: Make sure that you specify the value for this parameter. The parameter values are used to connect BMC Helix Service Management to Redis pods that are installed in BMC Helix Platform.

Click Rebuild.
The HELIX_ONPREM_DEPLOYMENT pipeline upgrades the platform and applications.
After successful completion of the HELIX_ONPREM_DEPLOYMENT pipeline, verify that the platform and application component pods are running by using the following command:
kubectl get pod -n <namespace>
The following image shows an example:

Task 3: To remove the Elasticsearch MinIO

An Elasticsearch MinIO is created to save the OpenSearch 1.x data before upgrading to OpenSearch 2.x.

Important

When you remove the Elasticsearch MinIO, the es-mini is deleted, and all the resources used are released.

Go to helix-on-prem-deployment-manager/utilities/migration/opesearch.
Run the following command to delete the backed ES MinIO data:
./es-opensearch-migration.sh cleanup
You will be prompted to confirm if you want to delete the PVC used for the OpenSearch migration.
Type y.
The PVC is deleted.
You will get a confirmation message after the MinIO data is cleaned up.
To verify that a MinIO is deleted, run the following command:
kubectl -n <ITOM namespace> get pod | grep minio

Task 4: To uninstall the EFK deployment

Perform this task only if you are using BMC Helix Platform Common Services version 25.1.00.

Export the existing logs from Kibana UI to a CSV file for your reference.
In the BMC Helix Platform namespace, remove the EFK deployment in the by using the following commands:
helm delete -n <BMC Helix Platform namespace> efk-elasticsearch efk-fluent-bit
kubectl -n <BMC Helix Platform namespace> delete pvc data-efk-elasticsearch-data-0 data-efk-elasticsearch-data-1 data-efk-elasticsearch-master-0 data-efk-elasticsearch-master-1

Where to go from here

Performing-the-postinstallation-configurations