You are here:

Upgrading Access Authenticator

These instructions guide you through the process of upgrading Access Authenticator.

NOTE: For system requirements, including IBM i Agent system values, see Installing Access Authenticator.

WARNING: The Authentication Manager must be stopped in order to be upgraded, which means Access Authenticator will be out of service for a short period of time during the upgrade procedure. As such, we recommend scheduling the upgrade at a time with minimal server activity.

Upgrade Procedure Overview

Like installation, the Access Authenticator upgrade procedure on your network is a multi-step process. Perform the upgrade in the order listed below.

HelpSystems Insite. This is the same as the installation process. See HelpSystems Insite Documentation List for instructions that describe how to install and use HelpSystems Insite. The latest version of HelpSystems Insite is required for compatibility with the latest Authentication Manager.

Access Authenticator Authentication Manager and Data Services. The Authentication Manager must be stopped on the Primary and Secondary systems prior to installing the upgrade. See Upgrading the Authentication Manager and Data Services.
Access Authenticator IBM i agent. The latest IBM i agent software must be installed on all systems to be secured by Access Authenticator to ensure compatibility. See Installing the IBM i Agent.

Upgrading the Authentication Manager and Data Services

The following instructions demonstrate how to upgrade the Authentication Manager and Data Services on a Primary and Secondary system in order to provide replication and failover capability. If you intend to upgrade on a single system only, use the initial steps of the following procedure for your platform (stopping when directed to repeat steps for a Secondary system).

To upgrade the Access Authenticator Authentication Manager and Data Services on Windows

Login to the Windows server of your Primary installation.
Download the Access Authenticator installer (setupAccessAuthenticator.exe). To do so, go to the HelpSystems website and click My Account. (The "Trial" download is the full product, which can be unlocked with a valid License Key.)
Stop the Authentication Manager service. To do so:
1. In the search bar type "services.msc" and press Enter. Or, click the Start menu and choose Run, then type "services.msc".
2. Right-click HelpSystems Access Authenticator Manager and choose Stop.
3. Close the Services window.
Double-click the installer file to begin the installation process.
WARNING: If you need to terminate the installation process before finishing, delete the C:\Program Files\Help Systems\Access Authenticator folder and start the installer again.
Follow the instructions to continue the installation.
Click Finish to complete installation on the Primary server. The Authentication Manager service starts automatically. If you are upgrading one or more Secondary systems as well, continue with the next step. (If you are only using a Primary server complete the upgrade by installing the latest version of the remaining Access Authenticator components (see Installing Access Authenticator).
Login to the Windows server you would like to use for your Secondary installation.
Click Finish to complete installation on the Secondary system. The Access Authenticator service starts automatically.

To upgrade the Access Authenticator Authentication Manager and Data Services on Linux

Login as root on the server you want to use as your Primary installation. The installer must be run as root or with sudo.
Download the Access Authenticator for Linux file (installAccessAuthenticator.tgz) to a temporary directory on the system. To acquire the file, go to the HelpSystems website and click My Account. (The "Trial" download is the full product, which can be unlocked with a valid License Key.)
Use the following command to extract the contents of the file:
```
tar xvzf installAccessAuthenticator.tgz
```
Files are extracted to the directory installAccessAuthenticator.
Use the following commands to stop the Authentication Manager service:
- If your Linux system supports systemctl, use:
- ```
systemctl stop HelpSystemsAccessAuthenticatorManager.service
```
- If your Linux system does not support systemctl, use:
- ```
/etc/init.d/HelpSystemsAccessAuthenticatorManager.sh stop
```
Use the following commands to start the installer:
```
cd installAccessAuthenticator
./serverInstall
```

WARNING: If you need to terminate the installation process before finishing, delete the /opt/helpsystems/AccessAuthenticator directory and start the installer again.

When prompted to choose whether you want to install the Authentication Manager and Data Services, choose y.
When asked if this is the primary data services server, indicate y.
When prompted to verify the server IP, confirm it is correct. Or, if it is not correct, enter n, then enter the correct IP.
Next you are prompted to confirm a series of ports Access Authenticator uses for communication. Verify the ports are correct. Record the LAN port number and the Database port number, as you will need to enter these later if you are installing a Secondary instance.
Access Authenticator creates the Primary database and starts the product. It installs to /opt/helpsystems/AccessAuthenticator.
Login to the server you want to use for your Secondary installation and repeat the above process through step 4.
When asked if this is the primary data services server, indicate n. The Data Services must be running for the following steps to work.
Enter the IP of the primary system (the one just installed).
Enter the port number of the primary database (recorded earlier).
NOTE: You can look at "PortConfig.log" in the installAccessAuthenticator directory on the Primary system to view the port configuration, including the Database Port.
Enter the port number for the primary Discovery LAN (recorded earlier).
NOTE: If a firewall is preventing communication between the servers, create rules in the firewall to allow the required traffic.
When prompted to verify the server IP, confirm it is correct. Or, if it is not correct, enter n, then enter the correct IP.
You are prompted to confirm a series of ports Access Authenticator uses for communication. Verify the ports are correct.
Access Authenticator creates the Secondary database and starts the product. It installs to /opt/helpsystems/AccessAuthenticator.

After HelpSystems Insite and the Authentication Manager have been upgraded, use the Installation Instructions to upgrade to the latest versions of the IBM i Agent, Desktop Agent, and mobile apps (for these components, the upgrade and installation procedures are identical).