Trust Protection Platform upgrade options
Trust Protection Platform supports several upgrade options, allowing for high availability but slower upgrades, or faster upgrades with service interruption. Please consider the following items as you upgrade:
-
Venafi provides product support for two years (24 months) of Trust Protection Platform versions. Venafi also provides upgrade support from any supported version to the current version.
-
You must be on a supported origin version
(Upgrade origin version) When upgrading Venafi Trust Protection Platform from the currently-installed version to a newer version, the currently-installed version is referred to as the origin version. (or any supported patch) before you upgrade to 24.3. -
You do not need to uninstall Trust Protection Platform prior to upgrading. You can install new versions over older versions.
-
You can download the currently-supported versions of Trust Protection Platform by signing into your Venafi account at download.venafi.com.
-
There are three different upgrade strategies. See About rolling upgrades to help you select the correct strategy for your organization.
-
Offline upgrade
-
In-place rolling upgrade
-
Replace rolling upgrade
-
-
Be sure to check out the Important Upgrade Considerations section in your version-specific documentation for the intermediate version before upgrading.
Upgrading from an unsupported version of Trust Protection Platform
If you are running an unsupported version of Trust Protection Platform, you cannot directly upgrade to the current version. You must follow a recommended upgrade path that involves two steps:
-
First, upgrade to at least the minimum supported version. For example, if your origin version is 22.1.x, you need to upgrade to at least version 22.4.x (the minimum supported version).
-
Once your entire cluster has been upgraded to the supported version 22.4.x, you can then migrate the entire cluster to the current version 24.3.x.
In summary, the upgrade path would be: 22.1 -> 22.4 -> 24.3.
The following table lists the patch versions that have been tested for compatibility with the 24.3 release.
| Origin version |
|---|
| 22.3.x |
| 22.4.x |
| 23.1.x |
| 23.3.x |
| 24.1.x |
TIP You may have noticed that the instructions said you needed to be on the oldest supported version, 22.4, but the upgrade table says you can upgrade from version 22.3.
If you are currently on version 22.3 you can directly upgrade to version 24.3, as version 22.3 was supported until 24.3 was released.
However, if you are starting from a version older than 22.3, you will want to upgrade to 22.4 (or later) so if you encounter any issues during the upgrade, you can get assistance from Venafi Customer Support.
Server Agent upgrade options
Server Agent 24.3 supports upgrades with the full installation package on all OS platforms. Before you upgrade, please consider the following:
-
Agent Upgrade Work is bit-specific. Agent Upgrade Work cannot update a 32-bit Server Agent to the 64-bit version. You must use the full installer to upgrade from 32-bit to 64-bit.
-
Agent Upgrade Work will not send versions that are not listed in the table below. In cases where the work isn't sent, then multi-stage upgrades via an intermediate version may be available. Performing an upgrade via full platform-specific installer is always an option.
Server Agent 24.3 supported upgrade paths for Venafi Update package:
| Current version | Operating system | Final version |
|---|---|---|
| 22.2.x, 22.3.x, 22.4.x | All, including Linux, Solarix, AIX | 24.3 |
| 23.1.x, 23.3.x | All, including Linux, Solarix, AIX | 24.3 |