|
|
At some point, you may experience a situation that demands either an upgrade, a downgrade, a reinstallation, or an uninstallation of some or all your Cisco Security Manager system. For instance, if we issue a patch that fixes known bugs within the system, you will probably want to upgrade your system with that patch. Additionally, a suspected corrupt file may necessitate a reinstallation of the existing version of the system.
Regardless of the situation, you have access to two methods of performing these tasks, depending on what task you are trying to perform and on what computer (a primary server or a secondary server) you are working. The local maintenance method enables you to perform these tasks for the local computer on which you are working, while Installation Manager enables you to perform these tasks for any feature set installed on a secondary server (from any other primary or secondary server). The following two sections describe each method and when to use it.
When you are working on a particular computer on which you have installed a standalone Cisco Security Manager system or one of its distributed feature sets, you can perform an upgrade, downgrade, reinstallation, or uninstallation that affects only that local computer. This functionality is built into the setup program.
You can initiate one of these local procedures by inserting the source disc into the CD-ROM drive (or by double-clicking the executable file), after which the Autostart program begins and performs a check on both the source disc and the installed system. It then displays the possible tasks that you can perform. For example, if you purchase a new upgraded version of Cisco Security Manager and insert the source CD-ROM into the drive, the Autostart program detects the newer version on the source disc and prompts you to upgrade whatever is installed on the local system.
One thing to keep in mind is that the only way to upgrade, downgrade, reinstall, or uninstall the Primary Policy Database is by using this local maintenance method while logged on to the primary server. You cannot use Installation Manager to perform any of these tasks remotely for the Primary Policy Database. The next section explains what you can do with Installation Manager.
Installation Manager is a utility that enables you to perform a remote upgrade, downgrade, reinstallation, or uninstallation for any distributed feature set installed on a secondary server (Policy Distribution Point, Policy Monitor Point, Policy Distribution / Monitor Point, and Policy Manager). You cannot use this utility to perform any of these tasks for the Primary Policy Database, which requires the local maintenance method as described in the preceding section. However, you can use the local maintenance method for any feature set installed on a secondary server. The next section explains how to access the Installation Manager utility.
To access Installation Manager from the program group:
Step 1 Click Start on the taskbar, and then point to Programs, Cisco Systems, and Cisco Security Manager.
Result: The shortcut menu for the Cisco Security Manager program group appears.
Step 2 Click Installation Manager on the shortcut menu.
Result: Installation Manager opens, displaying the Advanced Options panel.
To access Installation Manager from the Autostart panel:
Step 1 To initiate the Autostart sequence, insert the Cisco Security Manager CD-ROM disc into the drive on one of the system servers (primary or secondary).
Result: The Autostart panel appears.
Step 2 To start Installation Manager, click Advanced in the Autostart panel.
Result: Installation Manager opens, displaying the Advanced Options panel.
To upgrade using the local maintenance method:
Step 1 To initiate the Autostart sequence, insert the CD-ROM disc containing the newer version of Cisco Security Manager into the drive.
Result: The Autostart panel appears, and the What Do I Need To Do? box explains the results of the system check.
Step 2 To continue with the upgrade process, select Install Product in the Options box. To proceed to the next panel, click Next.
Result: The Backup Folder panel appears.
Step 3 To specify the location in which to store the backup file of your current system, type a valid directory path in the Backup Folder box. To proceed to the next panel, click Next.
Result: A file containing your current system data is stored in the location that you specify. You can use this backup file to restore the system to the exact configuration at the time the backup was created. After you click Next, the Verify Settings panel appears.
Step 4 To verify the settings that you chose before copying files, use the scroll bar on the right side of the window. Review all settings carefully before clicking Copy Files.
Result: The system or feature set on the local computer is upgraded to the newer version.
To upgrade using Installation Manager:
Step 1 After starting Installation Manager, select Upgrade in the Options box of the Advanced Options panel. To proceed to the next panel, click Next.
Result: The Using Backup File option becomes unavailable (because you cannot upgrade using a backup file), and the Connect to Policy Database dialog box appears.
Step 2 To submit the proper administrative account information, type the username and password in the respective boxes in the Connect to Policy Database dialog box. If you are logged on to the primary server, select Local; otherwise, select Remote Server, and then type the IP address or DNS name in the box below (you do not have to specify the port number unless it is different from the default 2567). Then, click Connect.
Result: Installation Manager connects to the Primary Policy Database (either locally or remotely, depending on what you specified) and retrieves data about all secondary servers with installed feature sets. Then, the Remote Hosts panel appears.
Step 3 To designate which feature set to upgrade, select the name of the secondary server on which it is installed in the Names box under Include these hosts.
Result: The Installed Version box displays the current version of the product installed on the selected host.
Step 4 To continue, click Finish.
Result: A dialog box displays a message asking if you really want to upgrade the specified feature set. After you click Yes, the Open dialog box appears.
Step 5 To specify the setup.exe file that contains the new version, select that file in the Open dialog box, and then click Open.
Result: The upgrade process begins. The % column indicates the completion rate for the upgrade process.
You must select the setup.exe file in the root directory on the Cisco Security Manager CD-ROM disc. If you downloaded the zip file, the setup.exe file is located in the directory where you extracted the zip file.
 | Caution We strongly recommend that you wait for each upgrade to complete before upgrading another host. |
Step 6 For each host that you want to upgrade, repeat Steps 3 through 5.
The most important difference between downgrading with a backup file and downgrading using the CD-ROM version is that the backup file is a "snap shot" of the entire system, configuration data and all system files. When you downgrade using such a backup file, Cisco Security Manager swaps out the newer version with the older version completely contained within the backup file.
However, when you downgrade using only of the setup.exe file, Cisco Security Manager attempts to convert your current Policy Database configuration data (the newer version) to the format of the older version.
When you downgrade your product, you have the option of downgrading using a backup file. This option enables you to downgrade your system more quickly and it does not require that you have the older version of setup.exe. In addition, you can ensure, before you upgrade, that your backup database has an operational configuration.
To downgrade using a backup file and the local maintenance method:
Step 1 To initiate the Autostart sequence, insert the CD-ROM disc containing any version of Cisco Security Manager into the drive.
Result: The Autostart panel appears, and the What Do I Need To Do? box explains the results of the system check.
Step 2 To continue with the downgrade process and run Installation Manager, select Advanced.
Result: Installation Manager starts.
Step 3 To specify that you want to downgrade, select Downgrade in the Options box of the Advanced Options panel.
Step 4 To specify that you want to use a backup file to downgrade to the state of the system at the time of backup, click Using Backup File. To proceed to the next panel, click Next.
Result: The Remote Hosts panel appears.
Step 5 To specify that you want to downgrade the computer on which you are working, select the name of your computer in the Hosts box under Include these hosts.
Result: The Installed Version box displays the current version of the product installed on the selected host.
Step 6 To select the backup file version that you want to use for this operation, click that version in the Available Backups box.
Step 7 To continue, click Finish.
Result: A dialog box displays a message asking if you really want to downgrade the specified feature set. After you click Yes, the Open dialog box appears.
Step 8 To specify the seteup.exe file that contains any version of Cisco Security Manager, select that file in the Open dialog box, and then click Open.
Result: The downgrade process begins, and the Verify Settings panel appears.
You must select the setup.exe file in the root directory on the Cisco Security Manager CD-ROM disc. If you downloaded the zip file, the setup.exe file is located in the directory where you extracted the zip file.
Step 9 To verify the settings that you chose before copying files, use the scroll bar on the right side of the window. Review all settings carefully before clicking Copy Files.
Result: The system or feature set on the local computer is downgraded to the selected version.
To downgrade using a backup file and Installation Manager:
Step 1 After starting Installation Manager, select Downgrade in the Options box of the Advanced Options panel.
Step 2 To specify that you want to use a backup file to downgrade to the state of the system at the time of backup, click Using Backup File. To proceed to the next panel, click Next.
Result: The Connect to Policy Database dialog box appears.
Step 3 To submit the proper administrative account information, type the username and password in the respective boxes in the Connect to Policy Database dialog box. If you are logged on to the primary server, select Local; otherwise, select Remote Server, and then type the IP address or DNS name in the box below (you do not have to specify the port number unless it is different from the default 2567). Then, click Connect.
Result: Installation Manager connects to the Primary Policy Database (either locally or remotely, depending on what you specified) and retrieves data about all secondary servers with installed feature sets. Then, the Remote Hosts panel appears.
Step 4 To designate which feature set to downgrade, select the name of the secondary server on which it is installed in the Include these hosts box.
Result: The Installed Version box displays the current version of the product installed on the selected host.
Step 5 To select the backup file version that you want to use for this operation, click that version in the Available Backups box.
Step 6 To continue, click Finish.
Result: A dialog box displays a message asking if you really want to downgrade the specified feature set. After you click Yes, the Open dialog box appears.
Step 7 To specify the seteup.exe file that contains any version of Cisco Security Manager, select that file in the Open dialog box, and then click Open.
Result: The downgrade process begins. The % column indicates the completion rate for the downgrade process.
You must select the setup.exe file in the root directory on the Cisco Security Manager CD-ROM disc. If you downloaded the zip file, the setup.exe file is located in the directory where you extracted the zip file.
| Caution We strongly recommend that you wait for each downgrade to complete before downgrading another host. |
Step 8 For each host that you want to downgrade, repeat Steps 4 and 7.
You can use an older setup.exe file, either found on a CD-ROM or extracted from a zip file that you download from the Cisco web site, to downgrade from a newer version to an older version of Cisco Security Manager.
To downgrade using the local maintenance method:
Step 1 To initiate the Autostart sequence, insert the CD-ROM disc containing the older version of Cisco Security Manager into the drive.
Result: The Autostart panel appears, and the What Do I Need To Do? box explains the results of the system check.
Step 2 To continue with the downgrade process, select Install Product in the Options box. To proceed to the next panel, click Next.
Result: The Backup Folder panel appears.
Step 3 To specify the location in which to store the backup file of your current system, type a valid directory path in the Backup Folder box. To proceed to the next panel, click Next.
Result: A file containing your current system data is stored in the location that you specify. You can use this backup file to restore the system to the exact configuration at the time the backup was created. This recovery has to be performed manually, and it cannot be done using Installation Manager (it recovers only older product versions, not newer). For information on manual recovery of any product version, see online help. After you click Next, the Verify Settings panel appears.
Step 4 To verify the settings that you chose before copying files, use the scroll bar on the right side of the window. Review all settings carefully before clicking Copy Files.
Result: The system or feature set on the local computer is downgraded to the previous version.
To downgrade using Installation Manager:
Step 1 After starting Installation Manager, select Downgrade in the Options box of the Advanced Options panel. To proceed to the next panel, click Next.
Result: The Connect to Policy Database dialog box appears.
Step 2 To submit the proper administrative account information, type the username and password in the respective boxes in the Connect to Policy Database dialog box. If you are logged on to the primary server, select Local; otherwise, select Remote Server, and then type the IP address or DNS name in the box below (you do not have to specify the port number unless it is different from the default 2567). Then, click Connect.
Result: Installation Manager connects to the Primary Policy Database (either locally or remotely, depending on what you specified) and retrieves data about all secondary servers with installed feature sets. Then, the Remote Hosts panel appears.
Step 3 To designate which feature set to downgrade, select the name of the secondary server on which it is installed in the Include these hosts box.
Result: The Installed Version box displays the current version of the product installed on the selected host.
Step 4 To continue, click Finish.
Result: A dialog box displays a message asking if you really want to downgrade the specified feature set. After you click Yes, the Open dialog box appears.
Step 5 To specify the seteup.exe file that contains the old version, select that file in the Open dialog box, and then click Open.
Result: The downgrade process begins. The % column indicates the completion rate for the downgrade process.
You must select the setup.exe file in the root directory on the Cisco Security Manager CD-ROM disc. If you downloaded the zip file, the setup.exe file is located in the directory where you extracted the zip file.
| Caution We strongly recommend that you wait for each downgrade to complete before downgrading another host. |
Step 6 For each host that you want to downgrade, repeat Steps 3 and 5.
To reinstall using the local maintenance method:
Step 1 To initiate the Autostart sequence, insert the CD-ROM disc containing the identical version of Cisco Security Manager into the drive.
Result: The Autostart panel appears, and the What Do I Need To Do? box explains the results of the system check.
Step 2 To continue with the reinstallation process, select Install Product in the Options box. To proceed to the next panel, click Next.
Result: The Policy Database panel appears.
To specify that you want to use the Policy Database data currently used by this Cisco Security Manager computer, click Use old Database, click Next, and skip to Step 5. Otherwise, continue with Step 3.
Step 3 To specify that you want to reinstall this computer using a backed up database on the Primary Policy Database server, click Recover Database from backup folder.
Step 4 To specify the backup folder on the Primary Policy Database server that you want to use to recover/reinstall this computer, type that folder name in the Backup Folder box.
Step 5 To verify the settings that you chose before copying files, use the scroll bar on the right side of the window. Review all settings carefully before clicking Copy Files.
Result: The system or feature set on the local computer is reinstalled.
To reinstall using Installation Manager:
Step 1 After starting Installation Manager, select Reinstall in the Options box of the Advanced Options panel. To proceed to the next panel, click Next.
Result: The Connect to Policy Database dialog box appears.
Step 2 To submit the proper administrative account information, type the username and password in the respective boxes in the Connect to Policy Database dialog box. If you are logged on to the primary server, select Local; otherwise, select Remote Server, and then type the IP address or DNS name in the box below (you do not have to specify the port number unless it is different from the default 2567). Then, click Connect.
Result: Installation Manager connects to the Primary Policy Database (either locally or remotely, depending on what you specified) and retrieves data about all secondary servers with installed feature sets. Then, the Remote Hosts panel appears.
Step 3 To designate which feature set to reinstall, select the name of the secondary server on which it is installed in the Include these hosts box. Then, click Finish.
Result: A dialog box displays a message asking if you really want to reinstall the specified feature set. After you click Yes, the Open dialog box appears.
Step 4 To specify the setup.exe file that contains the identical version, select that file in the Open dialog box, and then click Open.
Result: The reinstallation process begins. The % column indicates the completion rate for the reinstallation process.
You must select the setup.exe file in the root directory on the Cisco Security Manager CD-ROM disc. If you downloaded the zip file, the setup.exe file is located in the directory where you extracted the zip file.
At any time, you can uninstall any secondary server or the entire Cisco Security Manager product. To uninstall a single secondary server, you only need to uninstall the product on that host. If you need to remove the entire product and you have a distributed installation, you must uninstall the Primary Policy Database last. Remember that you must use the local maintenance method for uninstalling the Primary Policy Database, but you can use either method for the other distributed feature sets.
To uninstall using the local maintenance method:
Step 1 Click Start on the taskbar, and then point to Programs, Cisco Systems, and Cisco Security Manager.
Result: The shortcut menu for the Cisco Security Manager program group appears.
Step 2 Click Remove Cisco Security Manager on the displayed program group.
Result: A dialog box prompts you to confirm the uninstallation before all files, directories, and registry entries are removed from the local computer.
To uninstall using Installation Manager:
Step 1 After starting Installation Manager, select Uninstall in the Options box of the Advanced Options panel. To proceed to the next panel, click Next.
Result: The Connect to Policy Database dialog box appears.
Step 2 To submit the proper administrative account information, type the username and password in the respective boxes in the Connect to Policy Database dialog box. If you are logged on to the primary server, select Local; otherwise, select Remote Server, and then type the IP address or DNS name in the box below (you do not have to specify the port number unless it is different from the default 2567). Then, click Connect.
Result: Installation Manager connects to the Primary Policy Database (either locally or remotely, depending on what you specified) and retrieves data about all secondary servers with installed feature sets. Then, the Remote Hosts panel appears.
Step 3 To designate which feature set to uninstall, select the name of the secondary server on which it is installed in the Include these hosts box. Then, click Finish.
Result: A dialog box displays a message asking if you really want to uninstall the specified feature set. After clicking Yes, the uninstallation process begins. The % column indicates the completion rate for the uninstallation process.
Posted: Fri Feb 25 12:51:48 PST 2000
Copyright 1989 - 2000©Cisco Systems Inc.