How to upgrade from 10.6.4-3?

[CarlosEspinozaCh]

Hi all,

Recently Broadcom kill all old versions of SMG, I trying to escalate to the last version 10.7.3. But with the ISO version I stopped in the 10.6.4-3 version. So the only option from Broadcom is reinstall, but I have a lot of groups and policies that this option is too tedious.
Does anybody knows a technics to do this without rewriting all policies and configurations?

Regards,
Carlos Espinoza

------------------------------
Carlos Espinoza Ch.
Symantec Products Specialist.
------------------------------

[SYMC_KrisG]

If an SMG is not on 10.6.6-5 or higher at this point, there's no upgrade path.

Certs have been changed, so older SMGs cannot communicate with the servers.
No way to gain root to update the certs on SMG.
the "localinstall" command on versions 10.6.4 and 10.6.5 is broken, so there's no way to install.

Support has tried every combination that I'm aware of that might work, but installing a fresh copy of 10.7.3 is the answer. One thing that isn't that evident is that 10.7.3 and later will require larger /boot partitions than previous versions of SMG; fresh install builds the partitions with the new, larger config.

------------------------------
Kris Gainsforth
Solutions Engineer
Broadcom
------------------------------

[Xavier Blanch]

Hi,

How can we upgrade to 10.6.6-5? with command "update localinstall http://internalSite/SMG_OSrestore_10.6.6-5.iso" from version 10.6.4-3, it says "sms-appliance-release-10.6.4-3 is already installed." and not update...

If we make a fresh installation with 10.7.3, how to export/import to the new system the old rules? we have a lot of domains and explicit rules for each domain....

Thanks,

[CarlosEspinozaCh]

Hi,

That's the point. Broadcom answer that the problem to upgrade using locallInstall for 10.6.4-3 version, was solved in version 10.6.6-5 and the only option is reinstall in a fresh installation.
When we have a large installation or a lot of dictionaries populated and policies, the solution isn't an alternative. I don't understand how Broadcom left many people without operation. We haven't received any news or advertaising to upgrade to the new versions, specially when we need escalate one by one to the last of it.

------------------------------
Carlos Espinoza Ch.
Symantec Products Specialist.
------------------------------

[Xavier Blanch]

Hi,

But the upgrade process from 10.6.4-3 to 10.6.6-5 was not solved with OSRestore image... When I try to upgrade to 10.6.6-5, I obtain the same error with OSRestore image 10.6.5-1...

"sms-appliance-release-10.6.4-3 is already installed"

The process to reinstall with version 10.7, it's not easy, as Carlos says...

And support not responding the cases that I created...

[CarlosEspinozaCh]

Hi Xavier,

Broadcom never answer your cases, they left this document:

https://knowledge.broadcom.com/external/article/172155/update-localinstall-fails-in-messaging-g.html

As you can read, the solution is reinstall a new version.
But, I cannot understand how a company leave a many users without the only two options to upgrade (downaload the upgrades or with iso image). When we received a lot error messages from our SMGs we open a case in support pages, after one week they answer that this was because they kill certificates for update and the new certificate is only for version 10.6.6 or higher. Well we start to upgrade using iso image, because the option to update using internet dessapeared. But we stopped in the version 10.6.4-3 with the message "already installed".

------------------------------
Carlos Espinoza Ch.
Symantec Products Specialist.
------------------------------