ACS 5.2 to 5.4 upgrade

Similar Questions

• ACS 5.3 to 5.6 upgrade procedure

  Can someone tell me how to upgrade ACS from 5.3 to 5.6. We need to install the patches available, or we can do it directly.

  Help, please!

  Kind regards

  David

  Hello Santosh,

  Please see the Upgrade Guide.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  Let me know if you have any other doubts.

  Kind regards

  JAI Ganesh K

• ACS 3.3 to 4.0 upgrade problems

  Guys,

  I have a Cisco ACS 3.3 running on a win2k platform server and I need to upgrade to ACS4.0 on win2k.

  -3.3 backup and restoring files on web interface 4.0 does not work;

  -the same operation using csutils.exe works not (csutil b [...], then csutil - r [...])

  -J' installed the new machine with ACS3.3, I imported the data/group/user with csutil, then I installed ACS 4.0 using setup.exe. The result is that the ACS services will not start

  Anyone know what I need to do?

  Thank you

  Rob

  Hi Antonio,.

  -3.3 backup and restoring files on web interface 4.0 do not work.

  * It won't work, because in ACS we can back up and restore the database among same versions only of the ACS, also applies to replication.

  -the same operation using csutils.exe works not (csutil b [...], then csutil - r [...])

  * Answer will be the same as above.

  -J' installed the new machine with ACS3.3, I imported the data/group/user with csutil, then I installed ACS 4.0 using setup.exe. The result is that the ACS services do not start.

  * Normal this is if you hit a bug, that when we try to upgrade a database of ACS 3.3 (x) xx of ACS 4.0 build we have leak customer spaces AAA and/or servers writing AAA in databaae, and that can cause a problem. But we cannot not be hitting this bug.

  How to upgrade:

  [1] make sure we follow the path correct upgradation and supported:

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/ACS40/rnwin401.htm#wp37488

  [2] then follow following steps upgrade:

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/ACS40/install/install.htm#wp1041858

  Summarizing link above, just run installation of ACS 4.0 on an existing installation of ACS 3.3, and the installation program will ask itself, to save the previous configuration, select Yes at this time.

  Let me know if it helps. Please rate if this helps.

  Kind regards

  Rafael Lanna

• Cisco Secure ACS 3.3 (1)-> 4.0 upgrade problems (1)

  Hi all!

  I have problems updating my primary ACS since version 3.3-> 4.0

  I always get the following error message, then it does the upgrade:

  "The record of the CiscoSecure ACS seems to be blocked by another application: C:\Program Files\CiscoSecure ACS v3.3.

  Please close all applications... blabla... »

  The thing is, I have improved my ACS backup first, and this upgrade worked like a charm.

  In both cases, both for the primary and backup I do a takeover with Dameware remote, copied the ACS 4 folder on the hard disk of the server and make the upgrade of this folder.

  As I said, the upgrade of backup server worked without a hitch.

  That's what I tried:

  1. I checked that NO application use the 3.3 ACS file and no Explorer window is open on this folder or subfolders.

  I checked using a small program called Filemon.exe from Sysinternals. According to this program, anything accessed said folder.

  I also checked it again by renaming actually ACS 3.3 file once I stop all services of the ACS. I could not rename the folder if the services have been started.

  2. I tried to stop the ACS services first and then make the configuration, got the same error.

  3. I have disabled the antivirus software, got the same error.

  Basically I am at my wits end now...

  However, I have two options:

  1. uninstall ACS 3.3, do a clean install of ACS 4.0 and import the data of all the GBA backup.

  Who would not raise by the primary association with the ACS configuration backup? So I think I will need to go on it later and make changes, if necessary?

  2 make a backup of the ACS 3.3 with csutil b

  Uninstall ACS 3.3, do a clean install of ACS 4.0 and import all the data with csutil - r

  Would this work? I've seen conflicting information here in this forum, some say that it works, the other say it's not.

  I'm a little confused why it worked so well the GBA backup but fails on the primary ACS.

  Any help would be greatly appreciated!

  Thank you!

  Ivar Thorolfsson

  Hello

  Folder lock message often appears if newspapers located in the directory of the ACS are too big.

  Move the logs of the following directories: -.

  CSAdmin\Logs

  CSAuth\Logs

  CSDBSync\Logs

  CSLog\Logs

  CSMon\Logs

  CSRadius\Logs

  CSTacacs\Logs

  Newspapers

  Then try to upgrade.

  Kind regards

  Vivek

• Problems with patching: ACS 5.0 to 5.1 upgrade

  I'm following the instructions to upgrade ACS 5.0 to 5.1

  But I can't get past the first step:

  Step 1 Install the ACS 5.0 patch:

  Issue the following command from the patch CSA in EXEC mode to install the fix for the ACS:

  Install patch ACS patch-name. tar.GPG repository repository-name

  Here is my result:

  / Admin # acs patch install repository 5-0-0-21 - 9.tar.gpg mytftp
  chmod: cannot access at the "* .sh ': no such file or directory".
  Error: Could not open the patch 5-0-0-21 - 9.tar.gpg

  It download the patch via TFTP ok, but cannot install it.

  Can anyone help?

  Thank you

  There are problems in 5.0 with using tftp for file transfers that exceed 32 MB. There may be problems with the ftp servers that exceed this limit.

  I recommend to start using the alternative repository type. For example, ftp or a local repository on the server.

• ACS 5.6.0.22.2 upgrade. CAN´t add an application to the dashboard

  Hello

  I ve ACS updated Version 5.6.0.22.2. Now i´cant add an application like ONLINE AUTHENTICATION to the dashboard. I always get an error message.

  'Setup the page is temporarily unavailable.

  The same phenomenon occurs after the installation of a new comprehensive EC in VMWARE. Tried with FIREFOX, IE and GOOGLE CROME

  Best regards Horst

  Add a dashboard application view ACS 5.x error
  CSCus63338
   

  Description

• ACS 5.0 to 5.1 upgrade manifest file not found

  I managed to install the 5.0.21.9 patch and update 1.2 ADE-OS but when I try the 5.1 install via 'install app local ACS_5.1.0.44.tar.gz' I get the error "File manifest not found in the batch."

  This is a debug of the installation:

  HOST / admin # app install local ACS_5.1.0.44.tar.gz
  You want to save the current configuration? (yes/no) [Yes]?
  Building configuration...
  Save the configuration running at startup
  6 [30662]: application: install cars_install.c [195] [admin]: install initiated with bundle - ACS_5.1.0.44.tar.gz - repo, local
  6 [30662]: application: install cars_install.c [209] [admin]: stage area - /storeddata/Installing/.1299257463
  6 [30662]: application: install cars_install.c [213] [admin]: get the package to the local computer
  6 [30662]: application: install cars_install.c [222] [admin]: Got bundle at-/storeddata/Installing/.1299257463/ACS_5.1.0.44.tar.gz
  6 [30662]: application: install cars_install.c [232] [admin]: package of LLU ACS_5.1.0.44.tar.gz
  6 [30662]: application: install cars_install.c [244] [admin]: made the separation. Checking input parameters...
  3 [30662]: application: install cars_install.c [261] [admin]: missing manifest.xml file of bundle ACS_5.1.0.44.tar.gz
  % File manifest not found in the bundle
  6 [30662]: application: install install_cli.c [94] [admin]: error message: File Manifest not found in the bundle
  3 [30662]: application: install install_cli.c [97] [admin]: error during installation - the Application bundle: ACS_5.1.0.44.tar.gz repository: local ErrorCode:-602

  I created the TFTPing repository file on the disk: / upgrade and pointing to a directory on the disk: / upgrade. I checked the checksum of the file as it is sitting on my TFTP server and manually extracted the file to verify that the manifest.xml file is actually there.

  I appreciate the help.

  Looks like there is a problem with the tar.gz file

  Copy with tftp can be a problem with large files. can you do the same with ftp?

• The ACS upgrade to 3.2

  Greetings,

  By opting for the ACS 3.2, all my settings and the securities will remain the same? If this isn't the case, I have a router connected to the server and I will get locked. I heard there is a specific order for the removal of the lines to avoid of locking me. Is this true?

  Thank you

  You will need to select the option "Yes, import the existing configuration", while improving the ACS software. Information on the upgrade of Cisco ACS software Preserving Configuration found in the documentation to

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/ACS32/win32sig.htm#9934

• ACS 5.1 upgrade

  Update to CSACSE-1113-K9 unit run 4.2.0.124 and 5.1 supported?

  I don't think that's going to happen, unless a new upgrade of the hardware Kit is created, look at this for comparison of system memory:

  ACS 4.2:

  http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5712/ps2086/data_sheet_c78-453387_ps5338_Products_Data_Sheet.html

  ACS 5.1

  http://Cisco.com/en/us/prod/collateral/netmgtsw/ps5698/ps6767/ps9911/ps9915/data_sheet_c78-504202.html

  Also a new DVD would need to be developed from ACS unit Versions are hardware specific. I suppose it is not impossible to use the same DJ, but I have not heard of any close of plans occur.

  Now, keep in mind that the ACS 4.X to 5.X upgrade is consider a Migration complete... a lot of differences in the way you manage your customers, users, political...

  HTH.

• Impossible to upgrade of ACS 5.2 to 5.5 ACS - request is won't boot.

  Hello

  Someone at - he had problems upgrading a 5.2 to 5.5 ACS ACS?

  I start with a 5.2 Patch 5 launched basic machine that has a configuration of work and production. The documentation states that to upgrade 5.2 you need to upgrade to first or 5.3 or 5.4 and then run the upgrade to 5.5. I tried to use the 5.3 and 5.4 as the draft, but I have the same problem. I have confirmed that the version 5.3 or 5.4 working properly until I started the 5.5 upgrade but said the 5.5 upgrade that we succesfull ACS services will not start. I get the message: (and it stays like that)

  acs/admin# sh app sta acs

Application initializing...
Status is not yet available.
Please check again in a minute.

  I upgraded a 5.4 ACS running a default configuration to 5.5 with success so I know that my 5.5 upgrade file is not corrupted.

  I tried other things:

  • Carry out checks on the another patch and updated MD5 at file level.
  • Upgrade to the latest patch level of this version before proceeding with the upgrade
  • Make a compress of database prior to the upgrade of each minor version.
  • Reload the server at the beginning and before the upgrade for each minor release.
  • Wiping the system with the recovery disk 5.5 and restore 5.2 configuration (get the same error)
  • Application of the Pointed-PreUpgrade fix before the upgrade to 5.5

  Here are the steps to upgrade:

  • Start with the basic DCC 5.2 Patch 5 (running a production configuration)
  • Reload the ACS
  • Run the database compress
  • Apply the patch 5.2 11
  • Reload the ACS
  • Apply the upgrade 5.4 application
  • Apply the patch 5.4 6
  • Run the database compress
  • Confirm the ACS application works
  • Apply patch PreUpgrade Pointed to 5.4
  • Reload the ACS
  • Apply the 5.5 upgrade application

  Once, I get the error to happen so I can reset the config 5.5 by default, but then I lose all the information of production system.

  Anyone had similar problems?

  You're running in the default listed below. This defect will be corrected in the patch 2.

  CSCum67932 5.5 ACS starts only after the upgrade because of the unknown encryption algorithm

  To work around the problem, you must apply the hotfix pointed on top of ACS 5.5,
  then run 'database-compress' and finally remove the sharp patch.

  Kind regards

  Jatin kone

  * Does the rate of useful messages *.

• ACS 3.2 on Win2k - upgrade from the replicated SACRED path

  Hi all

  I have 2 servers ACS 3.2 I want to upgrade to 4.2.1 the latest version before 5, as I understand.

  My question is about replication. Should I stop the replication of database and upgrade servers separately or not? Can I put the servers as replication of database is configured? If so, is there a specific order of upgrade?

  Thank you

  Jose

  Here the user guide.

  "All of the SACRED that is involved in replication must run the same version of the ACS software. For example, if the primary ACS is running ACS version 3.2, all secondary ACSS should run ACS version 3.2. Because patches can introduce significant changes to the internal database of GBA, we strongly recommend that ACSS involved in replication use the same patch level. »

  So, I suggest to turn off replication before upgrade. After all of the ACS are upgraded to the same version, you can enable replication again.

• 1113 ACS SE upgrade 4.0.1.44 to 4.1.1.24 not

  Hello

  I am looking for some assistance, we have a v4.0.1.44 running Cisco ACS 1113 SE and try to update to v.4.2.0.124 following the instructions to upgrade to v4.1.1.24 first.

  We use the following CD

  "ACS SE overall upgrade CD ACS 3.3.4 and 4,1,1,24 implemented at level"

  We can download the 4.1.1.24 image of the ACS system via the distribution server, but the upgrade fails us got out following console when the attempt to upgrade has been tried;

  Upgrade package has not been verified.

  Apply this package to upgrade may corrupt the device

  Continue at your own risk!

  Continue? -y (yes), n (no) y

  Installation of Cisco Secure ACS Version: 4.1.1.24

  The upgrade... Upgrade process successfully launched

  Try to install ACS version 4.1 on software version 4.0.1.44

  Impossible to install Acs version 4.1 with software version 4.0.1.44

  GBA version 4.1 required software version 4.0.1.44

  First install the correct version of the software of the device

  Failed to upgrade to Cisco Secure ACS to 4.1.1.24

  Currently, our unit of ACS is the following:

  Cisco Secure ACS 4.0.1.44

  ACS - 4.0.144 - EnablePassword -CSCsh32888 fix (patch: 4.0.1.44 Thursday, November 22, 2007 19:51:37.95)

  The 4.0.1.44 application management software

  Base Unit 4.0.1.2 image

  CSA build 4.0.1.543.2 (Patch: 4_0_1_543)

  That would welcome suggestions.

  Concerning

  Jim.

  Hello Jim

  The upgrade package consists of 2 - files that is the management software and ACS software. You must first upgrade management and then continue the ACS software.

  The instructions are attached. I would like to know how it works.

  Thank you

  Nelson

• ACS 5.1 upgrade path

  Hello

  I have just unpacked ACS1121 with 5.1.0.44... Version of the ACS software. Y at - it (upgrade path) proceedings at this level to a version 5.2.x (later

  5-2-0-26-5)?

  You use a repository of tftp. If so try with a ftp repository

• CiscoSecure ACS UCP request help needed

  I upgraded CiscoSecure ACS from 4.1 to 4.2, CiscoSecure ACS UCP running application that has been configured to install ACS 4.1, so I that I need to change the Application of UCP or it works perfectly?

  I check the logs of database replication it says "cannot replicate to"wirelesspwd"- server replies do not.

  Thank you

  ALMAS Sangaré

  Both should run on the same version so if you upgraded ACS version then you need to upgrade the UCP version too.

  UCP 4.2 installation guide

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/user_passwords/UCP.html

  Kind regards

  Jousset

  The rate of useful messages-

• Ganymede + auth-proxy on acs 5.0 and later support?

  The nas is 2801 with ios 15.1 and acs 5.3.i want to deploy auth-proxy using Ganymede + protocol.but there no work.using RADIUS is ok.

  I want to know Ganymede + auth-proxy on acs 5.0 and later support?

  Thank you!

  GANYMEDE + Auth-Proxy is only supported after ACS 5.3 patch 5. Upgrade your ACS 5.x or use RADIUS for authentication Proxy.