Trust Protection Platform upgrade options

Trust Protection Platform supports several upgrade options, allowing for high availability but slower upgrades, or faster upgrades with service interruption. Please consider the following items as you upgrade:

  • Venafi provides product support for two years (24 months) of Trust Protection Platform versions. Venafi also provides upgrade support from any supported version to the current version.

  • You must be on a supported origin versionClosed (Upgrade origin version) When upgrading Venafi Trust Protection Platform from the currently-installed version to a newer version, the currently-installed version is referred to as the origin version. before you upgrade to 24.1.

  • You do not need to uninstall Trust Protection Platform prior to upgrading. You can install new versions over older versions.

  • You can download the currently-supported versions of Trust Protection Platform by signing into your Venafi account at download.venafi.com.

  • There are three different upgrade strategies. See About rolling upgrades to help you select the correct strategy for your organization.

    • Offline upgrade

    • In-place rolling upgrade

    • Replace rolling upgrade

  • Be sure to check out the Important Upgrade Considerations section in your version-specific documentation for the intermediate version before upgrading. A historical example scenario was that support for MSSQL 2012 was removed for a time, but was reintroduced in 21.4. Consequently, if you were using MSSQL 2012 in your origin version, and you wanted to continue using it in 24.1, you couldn't upgrade to versions 21.1 to 21.3 since those versions do not support MSSQL 2012.

Upgrading from an unsupported version of Trust Protection Platform

If you are running an unsupported version of Trust Protection Platform, you cannot directly upgrade to the current version. You must follow a recommended upgrade path that involves two steps:

  1. First, upgrade to at least the minimum supported version. For example, if your origin version is 21.3, you need to upgrade to at least version 22.2 (the minimum supported version).

  2. Once your entire cluster has been upgraded to the supported version 22.2, you can then migrate the entire cluster to the current version 24.1.

    In summary, the upgrade path would be: 21.3 -> 22.2 -> 24.1.

The following table lists the patch versions that have been tested for compatibility with the 24.1 release.

Upgrade version compatibility
Origin version
22.2.5+
22.3.3+
22.4.6+
23.1.6+
23.3.4+

Server Agent upgrade options

Server Agent 24.1 supports upgrades with the full installation package on all OS platforms. Before you upgrade, please consider the following:

  • Agent Upgrade Work is bit-specific. Agent Upgrade Work cannot update a 32-bit Server Agent to the 64-bit version. You must use the full installer to upgrade from 32-bit to 64-bit.

  • Agent Upgrade Work will not send versions that are not listed in the table below. In cases where the work isn't sent, then multi-stage upgrades via an intermediate version may be available. Performing an upgrade via full platform-specific installer is always an option.

Server Agent 24.1 supported upgrade paths for Venafi Update package:

Current version Operating system Final version
22.2.x, 22.3.x, 22.4.x All, including Linux, Solarix, AIX 24.1
23.1.x, 23.3.x All, including Linux, Solarix, AIX 24.1