Prerequisite

Following are required to follow this guide:

• Access to root account on the VMs where SKSO is installed.

• ssosigningtruststore.bcfks file from a SKFS installation.

Steps

1. Upgrade SKFS to the latest release. (4.10 at the time of writing this document). Refer this link.

2. Extract the latest SKSO version (4.12 at the time of writing this document) in /usr/local/software/skso-4.12

    

   $ tar zxvf skso-4.12.tar.gz 

    

3. Copy the ssosigningtruststore.bcfks generated on the primary Tellaro to /usr/local/software/skso-4.12, use USB/SCP or any other method of choice to transfer files.

    

   $ cp <USB>/skfs/ssosigningtruststore.bcfks /usr/local/software/skso
   
   or
   
   $ scp strongauth@<skfs-host-ip>:/usr/local/strongauth/skfs/keystores/ssosigningtruststore.bcfks /usr/local/software/skso-4.12

    

4. Using a text editor (vim), modify the upgrade-skso.sh script to update configuration based on previous SKSO installation.

    

   # Default SKSO Installation Location 
   SKSO_HOME=/usr/local/strongauth 
          
   # New version of Payara, change this if you are using a different version of Payara than the one provided in the distribution.
   GLASSFISH=payara-6.2023.9.zip 
          
   # If you are using a different Payara admin password provide it here.
   GLASSFISH_PASSWORD=adminadmin
   
   # Name of the signing truststore for JWT verification
   JWT_SIGNING_TRUSTSTORE=ssosigningtruststore.bcfks 

    

5. Execute the install script

    

   $ ./upgrade-skso.sh