Upgrading Verify Privilege Vault Without Outbound Access

This topic only applies to Verify Privilege Vault On-Premise.
Upgrading to Verify Privilege Vault version 10.0.000000 and above will require configuring integrated pipeline mode on the Verify Privilege Vault Application Pool. Please see Changing IIS to Not Stop Worker Process in IIS 7.0 and Later for details on configuring integrated pipeline mode in IIS. If you use Integrated Windows Authentication you will also need to update IIS authentication settings as detailed in Configuring Integrated Windows Authentication. If you are at version 9.1.000000 and below, you will need to first upgrade to 9.1.000001 before you can upgrade to 10.0.000000 and above.

How Upgrades Work

Verify Privilege Vault periodically polls our update server to detect updates. If your Verify Privilege Vault instance is on an internal network that has no outbound access or goes through a proxy, Verify Privilege Vault will not be able to perform updates automatically.

If this is the case, outbound access is needed to the following connections in your firewall if you want automatic updates:

  • d36zgw9sidnotm.cloudfront.net:443
  • updates.thycotic.net:443
  • updates.thycotic.net:80

The following steps can be used to perform an upgrade for versions 7.1.000015 and higher. If you have an older version of Verify Privilege Vault, please contact IBM Security technical support for assistance.

Procedure

Step 1: Open the Upgrade Verify Privilege Vault Wizard

From a computer that has outbound network access and Verify Privilege Vault access, follow these steps:

  1. Open the Verify Privilege Vault Upgrade page:

    1. In a web browser, go to: http://<YourSecretServerURL>/Installer.aspx?patch=true

    2. Replace <YourSecretServerURL> with your actual Verify Privilege Vault URL.

    3. The upgrade wizard will appear.

  2. Enable Maintenance Mode:

    1. Click Enable Maintenance Mode.

      This temporarily prevents users from changing roles, secrets, or secret-related data such as dependencies, templates, and password requirements.

    2. For more information, see Maintenance Mode FAQ.

  3. Back up Verify Privilege Vault:

    1. Back up the Verify Privilege Vault application folder

    2. Back up the Verify Privilege Vault database.

  4. To confirm backup completion, on the upgrade page, select the checkbox labeled: The Secret Server database and application folder have been backed up.

  5. Click Continue. The next page of the wizard will appear.

Step 2: Get and Upload the Latest .zip File

  1. Download the latest version of the .zip file by clicking the Download Latest Version button on the installer page.

    Example file name: Version_10_2_000000.zip. Note where you save it. You also can find the downloadable update files below.

  2. Click the Choose File button to add the Verify Privilege Vault .zip file you just downloaded.

    To verify the file hashes for the latest version using the posted hash values, refer to Verify Privilege Vault Download Hashes.

  3. Click the Upload Upgrade File button. You will see a message confirming the file was successfully uploaded, and the Install This Version button appears.

  4. Click the Install this Version button. The Upgrade Verify Privilege Vault page appears (not shown).

Step 3: Upgrade Verify Privilege Vault

  1. Click the Upgrade button. The upgrade automatically processes, and once it has finished you will see a confirmation page.

  2. Click Return to Home to return to the dashboard.

Offline Installation Download Files

Download installation files from the Passport Advantage site or the Fix Central link.