Symantec Access Management

  • 1.  SSO upgrade to SP2

    Posted Mar 29, 2018 09:24 AM

    Hello Guys, Some one here already upgrade the SSO SP1 to SP2? I trying to upgrade an Policy Server (12.7.100.1437) to the 12.7 SP2 and I am facing the following error: =============================================================================== Cannot upgrade from Policy Server  SP 0

     

    Policy Server  SP 0 is installed.  Upgrades are supported from 4.51 SP05, 4.61 SP05, 5.0 SP01, 5.5 SP02, 6.0 and 12.0 . Select 'OK' to exit installation."

     

    I've already cheched the sm.registry and looks like ok, and also the the .com.zerog.registry.xml file, it is in the user´s home and in the siteminder_home/install_config_info/ca-ps-uninstall.

     

    Any recommendation?

     

    Thanks,

    Jakson C. Ruiz



  • 2.  Re: SSO upgrade to SP2

    Posted Mar 29, 2018 09:35 AM

    Hi Jackson,

     

    I saw this problem in the past and it was caused by problems with the .com.zerog.registry.xml file. You should search for this file in the system (at least it should be under /var) and check if the contents are correct or not.

     

    Sometimes just correcting some data in the file is enough, but other times it is needed to fully uninstall and install from scratch.



  • 3.  Re: SSO upgrade to SP2

    Posted Mar 29, 2018 02:13 PM

    Hi Albert,

    According your recommendation, I did copy the .com.zerog.registry.xml file to the /var/ directory and it worked!

     

    the steps I did:

    1. source ca_ps_env.ksh file

    2. check the .com.zerog.registry.xml in the directories ~/ and sitemider_home/install_config_info/ca-ps-uninstal/

    3. copy the .com.zerog.registry.xml file to the /var/ directory

     

    Thank you so much for your tip,

    Jakson C. Ruiz



  • 4.  Re: SSO upgrade to SP2

    Posted Mar 29, 2018 02:22 PM

    Jakson ruija01 & Albert Albert_Fernandez

     

    Why would moving the .com.zerog.registry.xml from user's home directory to /var/ directory make it work. Shouldn't the installer be reading the .com.zerog.registry.xml from user's home directory and using that. This seems like a bug to me. We shouldn't be manually moving .com.zerog.registry.xml that is not a solution and not a documented step. It worked, so it tells your .com.zerog.registry.xml file was good, but installer was looking at /var/ and not at user's home directory. There is a difference between what works and how it should ideally work. We have a workaround to manually copy from user's home directory to /var/ that is okay, but that is not the solution we want to recommend. Installer should handle this correctly and hence it is a installer defect.

     

    Regards

    Hubert



  • 5.  Re: SSO upgrade to SP2

    Posted Mar 29, 2018 04:04 PM

    Hi hubert,

     

    Thanks for your explanation.

    Make sense and I agree with you.

     

    how can we scalate this bug/ installer defect?

     

    Thanks,

    Jakson



  • 6.  Re: SSO upgrade to SP2
    Best Answer

    Posted Mar 29, 2018 04:09 PM

    Jakson ruija01

     

    Raise a CA Support Case and have engineering fix it in the installer. The Design is to read .com.zerog.registry.xml from user's home directory. Atleast that is what it used to do until now, unless there is a change to /var OR to both locations (which is absurd). Whatever the case be, engineering should clarify that in the defect. Bottom-line is follow one approach and not create confusion to customer and personnel in field.

     

    Regards

    Hubert



  • 7.  Re: SSO upgrade to SP2

    Broadcom Employee
    Posted Mar 29, 2018 12:42 PM

    Have you sourced the "ca_ps_env.ksh" script prior to run SP2 upgrade ?



  • 8.  Re: SSO upgrade to SP2

    Posted Mar 29, 2018 02:15 PM

    Hi Makesh,

     

    Yes, I did source the ca_ps_env.ksh.

    Also, I follwed the Albert´s recommendation and it worked.

     

    Thank you so much,

    Jakson C. Ruiz