Upgrade and Downgrade Caveats

The following items provide key information about upgrading and downgrading with this software version.

Reset the rsa_ssh.key

After you upgrade from S-CZ7.3.5 to S-CZ8.2.5, you must manually reset the rsa_ssh.key when the host OpenSSH client version is 7.6 or newer. Applies to all platforms.

1. Delete the old ssh_rsa.key in the /code/ssh directory in the shell environment.
2. Reboot the OCUSM, using reboot from the ACLI prompt.

Reset Local Passwords for Downgrades

Oracle delivers increased encryption strength for internal password hash storage for the S-CZ8.2.5 release. This affects downgrades to the S-CZ7.3.5 releases because the enhanced password hash algorithm is not compatible with those earlier OCUSM software versions. If you change any local account passwords after upgrading to S-CZ8.2.5, local authentication does not work and the system locks. Unlocking the system requires a factory reset. Oracle recommends that you do not change any local account passwords after upgrading to S-CZ8.2.5 from a prior release, until you are sure that you will not need to downgrade. If you do not change any local account passwords after upgrading to S-CZ8.2.5, downgrading is not affected.

Caution:

If you change the local passwords after you upgrade to S-CZ8.2.5, and then later want to downgrade to a previous release, reset the local user passwords with the following procedure before you downgrade because the system locks you out until all passwords are cleared. If you get locked out, you must contact Oracle support to clear the passwords.

Perform the following procedure on the standby OCUSM first, and then force a switchover. Repeat steps 1-10 on the newly active OCUSM. During the procedure, the OCUSM powers down and you must be present to manually power up the OCUSM.

Caution:

Be aware that the following procedure erases all of your local user passwords, as well as the log files and CDRs located in the /opt directory of the OCUSM.

1. Log on to the console of the standby OCUSM in Superuser mode, type halt sysprep on the command line, and press ENTER.

   The system displays the following warning:

   *********************************************
   WARNING: All system-specific data will be permanently 
   erased and unrecoverable.
   
   Are you sure [y/n] 

2. Type y, and press ENTER.
3. Type your Admin password, and press ENTER.

   The system erases your local passwords, log files, and CDRs and powers down.

4. Power up the standby OCUSM.
5. During boot up, press the space bar when prompted to stop auto-boot so that you can enter the new boot file name.

   The system displays the boot parameters.

6. For the Boot File parameter, type the boot file name for the software version to which you want to downgrade next to the existing version. For example,nnECZ800.bz.
7. At the system prompt, type @, and press ENTER.

   The standby reboots.

8. After the standby reboots, do the following:
   1. Type acme, and press ENTER.
   2. Type packet, and press ENTER.
9. Type and confirm the password that you want for the User account.
10. Type and confirm the password that you want for the Superuser account.
11. Perform a notify berpd force on the standby to force a switchover.
12. Repeat steps 1-10 on the newly active OCUSM.

Maintain DSA-Based HDR and CDR Push Behavior

To maintain your existing DSA key-based CDR and HDR push behavior after upgrading from S-CZ7.3.5M2px to S-CZ8.2.5, perform the following procedure:

1. Navigate to the security, ssh-config, hostkey-algorithms configuration element and manually enter the DSA keys you want to use.
2. Save and activate your configuration.
3. Execute the reboot command from the ACLI prompt.