Upgrading from KA 4.x to newer versions is handled by an upgrade script. Customers on current Support contracts are authorized to receive a download of the upgrade script. After downloading the script follow these directions to upgrade from a 4.x node, replacing NN.N with the applicable version and build numbers:

1. Copy the upgrade script to the /usr/local/software directory on the KA 4.x node.
2. SSH to the 4.x node as the root user.
3. Change directory to /usr/local/software.
4. Verify the sha256sum of the upgrade script matches with the one listed in the download link email.

   To get a sha256sum from your upgrade script, run the following command:

   shell> sha256sum SAKA-4.NN.N-upgrade.sh

5. Make the script executable:

   shell> chmod 755 SAKA-4.NN.N-upgrade.sh

6. Edit /usr/local/strongauth/appliance/etc/appliance-configuration.properties and set the property appliance.cfg.property.replicate=false, then save the file; do this only on the machine being upgraded.
7. Restart Glassfish.

   shell> service glassfishd restart

8. If this node is ready to be upgraded (i.e. it is not receiving transactions) and your Key Custodians are on standby to set PINs, execute the upgrade script as follows:

   shell> ./SAKA-4.NN.N-upgrade.sh

9. The script will prompt you to confirm if you would like to take a backup of /usr/local/strongauth/ which can be used to rollback in case of an issue during the upgrade. If the backup is done prior to upgrade, then enter a "n" to continue without taking a backup. If the backup is not done prior to upgrade, then enter a "y" to take a backup before upgrade.
10. The script will prompt you to confirm that the appliance is ready to be upgraded. If you are ready, then enter a "y" to continue with the upgrade.
11. The script will tell you what actions it is taking while it performs them. After the script finishes, check for errors in the output. If there are no apparent errors, then the upgrade was a success. Otherwise, contact the StrongKey Support team for help resolving any errors.
12. Edit /usr/local/strongauth/appliance/etc/appliance-configuration.properties and set the property appliance.cfg.property.replicate=true, then save the file. Do this only on the machine being upgraded.
13. Restart Glassfish.

    shell> service glassfishd restart

14. Set PINs using KC-SetPINTool.sh.
15. Repeat these steps again on each node that is to be upgraded.