Before You Begin 

  • Make sure that you have upgraded your Cryptographic Security Platform Vault nodes before you upgrade your Policy Agents. Registration will fail if the version of the Policy Agent is higher than that of the Cryptographic Security Platform Vault node and your encrypted data may become unavailable.
  • Make the upgrade path from your current version to the new version is supported. For details, see Policy Agent Upgrade Requirements.

Important: Do not attempt to encrypt your system devices while the Policy Agent upgrade is in process. You can encrypt after the upgrade is complete and you have rebooted the VM where the Policy Agent is installed.

Procedure 

  1. Log into the Cryptographic Security Platform Vault for VM Encryption webGUI or the Cryptographic Security Platform Vault for Databases webGUI with Cloud Admin privileges.
  2. Click Workloads.
  3. Click Actions > Download Policy Agent.
  4. Click the Download link associated with the file hcs-client-agent-rel.number-build.number.run. Cryptographic Security Platform Vault downloads the file to your browser's default download location.
  5. Copy hcs-client-agent-rel.number-build.number.run to the Linux system that you want to upgrade.
  6. Log into the target system as root.
  7. Run the installer by navigating to the directory containing hcs-client-agent-rel.number-build.number.run and entering the command sh ./hcs-client-agent-rel.number-build.number.run [install -y], where [install -y] tells the installer to upgrade the agent without prompting.

    For example:

    # sh ./hcs-client-agent-10.5.1-12345.run
    Creating directory hcs-agent-agent
    Verifying archive integrity... All good.
    Uncompressing hcs-agent-agent.run.............
    HyTrust Agent version 4.1 already installed
    Upgrade existing install? (y/n): y
    Stopping hcld... done
    Run once hcld
    Starting hcld... done
    
    You can now install online encryption driver, the process is described in the Admin Guide
    Please see the following section of Admin Guide for details
       — Administration Guide > Data Encryption > Linux Encryption Overview
    					
    Installation successful
    # sh ./hcs-client-agent-10.5.1-12345.run install -y 
    Creating directory hcs-agent-agent
    Verifying archive integrity... All good.
    Uncompressing hcs-agent-agent.run.............
    HyTrust Agent version 4.1 already installed
    Stopping hcld... done
    Run once hcld
    Starting hcld... done
    
    You can now install online encryption driver, the process is described in the Admin Guide
    Please see the following section of Admin Guide for details
       — Administration Guide > Data Encryption > Linux Encryption Overview
    
    Installation successful
  8. If you want to verify the version of Policy Agent, enter the following command:

    # hcl version