See below for upgrading your installation to Cryptographic Security Platform 1.4 - PKI Hub 1.5.0.

Performing previous upgrades

PKI Hub 1.5 only supports upgrading from the following versions.

  • Cryptographic Security Platform 1.2.1 - PKI Hub 1.3.1 
  • Cryptographic Security Platform 1.3.0 - PKI Hub 1.4.0 

If your installation version is earlier than these, follow the steps below to upgrade it.

Target version

Upgrade from

Upgrading guide

Cryptographic Security Platform 1.0.0 - PKI Hub 1.1.0

Entrust Deployment Manager 2.0.2

https://api.managed.entrust.com/csp/1.0.0/Upgrading.html

Cryptographic Security Platform 1.1.0 - PKI Hub 1.2.0 

Cryptographic Security Platform 1.0.0 - PKI Hub 1.1.0

https://api.managed.entrust.com/csp/1.1.0/Upgrading.html

Cryptographic Security Platform 1.2.0 - PKI Hub 1.3.0

Cryptographic Security Platform 1.1.0 - PKI Hub 1.2.0 

https://api.managed.entrust.com/csp/1.2/Upgrading.html

Cryptographic Security Platform 1.2.1 - PKI Hub 1.3.1

Cryptographic Security Platform 1.1.0 - PKI Hub 1.2.0 

https://api.managed.entrust.com/csp/1.2/Upgrading.html

Cryptographic Security Platform 1.2.0 - PKI Hub 1.3.0

Creating the cluster database

If you are upgrading from PKI Hub 1.3.1, you need a database for the PKI Hub 1.5 cluster. As explained in Starting up the database, you can alternatively:

  • Use a third‑party database that meets the PKI Hub third-party database requirements. You can create a new one or select the one you were already using for a deployed solution, such as Certificate Authority or Certificate Hub.
  • Use the database of Entrust Compliance Manager, if this product is installed on your system.
  • Download and install PKI DB Appliance.

If you are upgrading from PKI Hub 1.4, you do not need to create a cluster database, as the upgraded system will use the database that was already created for PKI Hub 1.4.

Upgrades from PKI Hub 1.4 do not support switching the cluster database to the Entrust appliance database or the Entrust Compliance Manager database.

Upgrade process

See below for how to run the upgrade process.

To upgrade PKI Hub to 1.5

  1. Follow the steps in Downloading the installation files to download the Cryptographic Security Platform 1.4 - PKI Hub 1.5 for VMWare vSphere, Hyper-V and Nutanix file. You need this ISO image file to upgrade any installation, ISO-based or non-ISO-based. ​

  2. Back up the installation state as explained in section Backing up PKI Hub of the PKI Hub 1.4 guide.

  3. Repeat the following steps on each PKI Hub node sequentially, ensuring that the steps are not performed on different nodes simultaneously. 
    1. Use an SFTP client to copy the PKI Hub ISO image file to the /home/sysadmin node folder. 
    2. Run the clusterctl upgrade command and wait for it to complete (around 2 hours) before proceeding to the next node.
  4. Reboot each node sequentially, with at least 15 minutes before each reboot.
  5. Back up the installation state as explained in section Backing up PKI Hub of this guide.

User roles after the upgrade

After completing the upgrade from PKI Hub 1.3.1, users who previously held the following discontinued roles are assigned the new IdpRole role.

  • Manage Users
  • Manage Roles
  • Manage Identity Providers

Upgrades from PKI Hub 1.4 do not alter role assignation.