Upgrade and Downgrade Caveats
The following items provide key information about upgrading and downgrading with this software version.
Reset the rsa_ssh.key
After you upgrade from S-CZ7.3.5 to S-CZ8.2.5, you must manually reset the rsa_ssh.key when the host OpenSSH client version is 7.6 or newer. Applies to all platforms.
- Delete the old ssh_rsa.key in the /code/ssh directory in the shell environment.
- Reboot the OCCSM, using reboot from the ACLI prompt.
Reset Local Passwords for Downgrades
Oracle delivers increased encryption strength for internal password hash storage for the S-CZ8.2.5 release. This affects downgrades to the S-CZ7.3.5 releases because the enhanced password hash algorithm is not compatible with those earlier OCCSM software versions. If you change any local account passwords after upgrading to S-CZ8.2.5, local authentication does not work and the system locks. Unlocking the system requires a factory reset. Oracle recommends that you do not change any local account passwords after upgrading to S-CZ8.2.5 from a prior release, until you are sure that you will not need to downgrade. If you do not change any local account passwords after upgrading to S-CZ8.2.5, downgrading is not affected.
Caution:
If you change the local passwords after you upgrade to S-CZ8.2.5, and then later want to downgrade to a previous release, reset the local user passwords with the following procedure before you downgrade because the system locks you out until all passwords are cleared. If you get locked out, you must contact Oracle support to clear the passwords.Perform the following procedure on the standby OCCSM first, and then force a switchover. Repeat steps 1-10 on the newly active OCCSM. During the procedure, the OCCSM powers down and you must be present to manually power up the OCCSM.
Caution:
Be aware that the following procedure erases all of your local user passwords, as well as the log files and CDRs located in the /opt directory of the OCCSM.- Log on to the console of
the standby
OCCSM in Superuser mode,
type
halt sysprep
on the command line, and press ENTER.The system displays the following warning:
********************************************* WARNING: All system-specific data will be permanently erased and unrecoverable. Are you sure [y/n]
- Type
y
, and press ENTER. - Type your Admin password,
and press ENTER.
The system erases your local passwords, log files, and CDRs and powers down.
- Power up the standby OCCSM.
- During boot up, press the
space bar when prompted to stop auto-boot so that you can enter the new boot
file name.
The system displays the boot parameters.
- For the Boot File
parameter, type the boot file name for the software version to which you want
to downgrade next to the existing version. For example,
nnECZ800.bz
. - At the system prompt, type
@
, and press ENTER.The standby reboots.
- After the standby reboots,
do the following:
- Type
acme
, and press ENTER. - Type
packet
, and press ENTER.
- Type
- Type and confirm the password that you want for the User account.
- Type and confirm the password that you want for the Superuser account.
- Perform a notify berpd force on the standby to force a switchover.
- Repeat steps 1-10 on the newly active OCCSM.
Maintain DSA-Based HDR and CDR Push Behavior
- Navigate to the security, ssh-config, hostkey-algorithms configuration element and manually enter the DSA keys you want to use.
- Save and activate your configuration.
- Execute the reboot command from the ACLI prompt.