Siteminder Upgrade

[manjunath.mudigonda]

Hi,

 

At my organization we are planning to upgrade Siteminder from 12.52 [Base] to 12.52 sp2. are there any specific things i need to be aware of ?

 

Policy Server: Windows 2008 R2

Policy Store : SQL Server 2008

Policy Store backup: we have a schedule job that performs backup daily

Infrastructure: All VM's 

Roll Back: VM Snapshot Revert

 

Implementation Steps:

 

Upgrade an r12.52 Policy Server to 12.52 SP2.
Stop Policy Server
Disable XML Signature: set DisableXSWCheck=true
Backup JVMOptions.txt

 

Upgrade Policy Server by executing Binary
policy store check box – check

 

Validate Install log file

 

Run XPSDDInstall SmMaster.xdd from PS_home\xps\dd
XPSImport smpolicy.xml –npass from PS_home\db.
Run XPSSweeper

 

Upgrade the r12.52 Administrative UI to 12.52 SP2
Stop AdminUI
Run Pre Req
Run Admin UI

 

please advise

[Ujwol]

Hi Manju,

 

1. Unfortunately, R12.52SP2 does NOT support Win2k8r2 yet.

The ONLY OS supported is Win2k12R2.

Check PSM here : SAP Portal Services 

 

2. 12.52SP2 Admin UI is based on JBoss 8 which is a big jump from prior version which was Jboss 5, so I would recommend doing a clean install of Admin UI

 

Regards,

Ujwol Shrestha

[manjunath.mudigonda]

Ujwol,

 

Does 12.52 SP1 supports Win2008R2 ?

 

Regards,

Manjunath Mudigonda

Identity & Access Management Engineer

 

<http://www.centerpointenergy.com/>

 

D: 1-713-207-5980

M: 1-551-208-5299

[e-mail]<mailto:[e-mail]>

[Ujwol]

Yes it does.

PSM :SAP Portal Services 

[manjunath.mudigonda]

Ujwol,

 

 

Server IP	Current Version	Proposed Version	Proposed Version
Policy Server	12.52.0000.142	12.52 sp1	12.52 sp2
Policy Server - OS	VM\Microsoft Windows Server 2008 R2 Standard 6.1.7601 Service Pack 1 Build 7601
Policy Store\Session Store & Audit Store	Microsoft SQL Server 2008 R2 (SP3) - 10.50.6000.34 (X64)   Aug 19 2014 12:21:34   Copyright (c) Microsoft Corporation  Enterprise Edition (64-bit) on Windows NT 6.1 <X64> (Build 7601: Service Pack 1)
Java Version	java version "1.7.0_05"
oAuth 2.0	NO
Uograde Type	In Place Upgrade

 

 

I am primarily looking for the oAuth2.0 support, since 12.52 doesnt support oAuth 2.0 - planning to upgrade.

 

if we plan to go with implace upgrade what will be suggestion 12.52 sp1 or sp2 ? also help with the above matrix 

[Ujwol]

As I said eralier, you do NOT have option to go with 12.52SP2 as your platform win2k8r2 is not supported.

 

So, the only choice you have is going with 12.52sp1

[manjunath.mudigonda]

is oAuth 2.0 Auth schemes available in 12.52 SP1 ?

[Ujwol]

Yes Oauth 2.0 is supported in 12.52 Sp1

 

Configure an OAuth Authentication Scheme - CA Single Sign-On - 12.52 SP1 - CA Technologies Documentation 

 

Configure Social Sign-on - CA Single Sign-On - 12.52 SP1 - CA Technologies Documentation 

[manjunath.mudigonda]

Is there a policy store upgrade from 12.52 to 12.52 sp1

 

Sent from my iPhone

[Ujwol]

The schema (.xdd) hasn't chnaged but the default objects (smpolicy.xml) have some changes.

 

But as per best practice you should always upgrade your policy store by importing the .xdd and default policy (smpolicy.xml) files

[Ujwol]

Hi @Manjunath Mudigonda, 

Do you have any further question on this ? If not could you please mark this question as answered ?

 

Regards,

Ujwol

[manjunath.mudigonda]

Ok I will

 

Sent from my iPhone

[manjunath.mudigonda]

can i  upgrade to " SSO POLICYSERVER R12.52 SP01 CR05" for inplace upgrade on Win 2k8 Server

[Ujwol]

Yes you can.

[manjunath.mudigonda]

Can I get PSM for 12.5 Sp01 CR05 be cause the realease notes says to look for

 

 

• ID:                9

• PRODUCT:           SMPLC

• RELEASE:           12.52

• DESC:             SSO POLICYSERVER R12.52 SP01 CR05

• SYSTEMS AFFECTED: WINDOWS

• SOLUTION TEXT:

 

The list of defects fixed is no longer sent in a readme.txt file along

with the installers. The content is available on CA Single Sign-On DocOps

platform. Review Release Notes for information about new features, changes

to existing features, and defects fixed in each Cumulative Release.

 

For CA Single Sign-On product documentation, see

https://docops.ca.com/ca-single-sign-on/12-52-sp2/en.

For CA Single Sign-On Agent for SharePoint documentation, see

https://docops.ca.com/ca-siteminder-agent-for-sharepoint/en.

 

 

According to 12.52 sp2 PS’s OS should be Win2k12

 

Please advise

 

Regards,

Manjunath Mudigonda

Identity & Access Management Engineer

 

<http://www.centerpointenergy.com/>

 

D: 1-713-207-5980

M: 1-551-208-5299

[e-mail]<mailto:[e-mail]>

[Ujwol]

Please check previous post I have provided PSM for both 12.52Sp2 as well as 12.52sp1

 

Please open a support case if you have futher questions. It will be much easier to talk through this over the phone and get sorted out at one go.