HyTrust Appliance Patch HT-CC-20200428-01 Release Date: May 2020
To get user support for HyTrust CloudControl, email: [email protected]
=============================================================================== Issues Resolved in HT-CC-20200428-01
1. You will no longer receive "access denied" errors with no denial in logs when connecting to ESXi hosts via SSH using Global PIP.
2. The directory /var/log will no longer be filled with internal logs. 3. You will no longer see an 'UnknownOp' error in the HTML5 client when upgrading the VM hardware version.
4. You will no longer see errors when logging into WCS after upgrading from vCenter 6.0 to 6.5.
5. You no longer need internet access to install TAS.
6. The system disk will no longer fill up and prevent accessing the proxy and the GUI.
7. The directory /var/log/asc will no longer be filled with internal logs after upgrade.
8. Fixed an issue with consistent high CPU usage.
=============================================================================== Known Issues in HT-CC-20200428-01
1. When you apply the patch, you will see a message similar to "Warning: Invalid license".
This message is harmless and can be ignored. The patch will be applied correctly despite this warning.
2. After you have applied the patch and logged in to the CloudControl GUI as the AD user, you may be immediately logged out from the GUI.
To fix this issue, either log in on a new private browser session or clear your browser cookies.
3. Currently HA is not supported if TAS is enabled on the primary node. 4. If you enable GPIP for multiple hosts, you can log into the first host successfully via the Hostmenu UI, but when you log into a second host via the Hostmenu UI, the first host logs out.
We recommend that you use the SSH proxy instead of the host client proxy. ===============================================================================
Supported vCenter and ESXi Versions Added in this Patch vCenter Server Appliance 6.7 Update 3f (build-15976714) vCenter Server Appliance 6.7 Update 3e (build-15808844) vCenter Server Appliance 6.7 Update 3d (build-15679281) vCenter Server Appliance 6.5 Update 3i (build-15808842) vCenter Server Appliance 6.5 Update 3h (build-15679215) ESXi 6.7 P01 (build-15160138) ESXi 6.7 EP 13 (build-15018017) ESXi 6.7 EP 14 (build-15820472) ESXi 6.5 P04 (build-15256549) ESXi 6.5 EP 18 (build-15177306) =============================================================================== HOW TO INSTALL THE PATCH:
Important: Take a snapshot of the CloudControl appliance before beginning the Upgrade process.
The procedure for installing the patch differs depending on whether the appliance is in standalone mode or is configured as part of a High
Availability pair. Please follow the instructions in the correct section for your situation.
Note: After installing the patch, the CloudControl service will restart. No reboot is necessary.
Installing the patch for a Standalone HTCC appliance
=============================================================================== There are two methods available to install the patch:
1. Mount the ISO image to the appliance via vSphere; 2. Upload the ISO file to the appliance via SFTP. Method 1 - Mount ISO Image via vSphere
---
1. Upload the ISO to a datastore using the DataStore Browser.
2. Connect the CD/DVD drive of the appliance to the ISO in the datastore.
3. Log in to the appliance via SSH (or the VM console) using the "ascadminuser" account.
4. At the command shell, enter the command: $ asc upgrade -i
Installing...
- Stopping tomcat service - Update Initiated
- Updating packages - Restarting Tomcat
- Running post-install scripts Success: Upgrade completed
5. The ISO image may now be disconnected from the appliance and removed from the datastore.
Method 2 - Upload ISO Image to the Appliance ---
1. Upload the ISO file to the appliance via SFTP or SCP, using the "ascadminuser" account.
2. Log in to the appliance via SSH using the "ascadminuser" account. 3. At the command shell, enter the command:
$ asc upgrade -i /pathname/filename.iso Installing...
- Validating update
- Stopping tomcat service - Update Initiated
- Updating packages - Restarting Tomcat
- Running post-install scripts Success: Upgrade completed
where "pathname" and "filename" are the location and file name of the uploaded ISO image.
4. The ISO image file may now be deleted from the appliance. Installing the patch for a High Availability (HA) pair
=============================================================================== There are two methods available to install the patch:
1. Mount the ISO image to the appliances via vSphere; 2. Upload the ISO file to the appliances via SFTP. Method 1 - Mount ISO Image via vSphere
---
1. Upload the ISO to a datastore using the DataStore Browser.
2. Connect the CD/DVD drive of both appliances to the ISO in the datastore. 3. Log in to the appliances via SSH (or the VM console) using the
4. Disband the HA setup by entering the following command on the secondary instance:
$ asc ha --disband
5. Apply the patch on both the primary and the secondary using the following command:
$ asc upgrade -i Installing...
- Validating update
- Stopping tomcat service - Update Initiated
- Updating packages - Restarting Tomcat
- Running post-install scripts Success: Upgrade completed
6. The CloudControl service for each node will restart.
7. Run the following command from the secondary as "ascadminuser": $ asc ha --join <primary ha IP> --mode secondary
8. The ISO image may now be disconnected from the appliances and removed from the datastore.
Method 2 - Upload ISO Image to the Appliance ---
1. Upload the ISO file to both appliances via SFTP or SCP, using the "ascadminuser" account.
2. Log in to the appliances via SSH using the "ascadminuser" account.
3. Disband the HA setup by entering the following command on the secondary instance:
$ asc ha --disband
4. Apply the patch on both the primary and the secondary using the following command:
$ asc upgrade -i /pathname/filename.iso Installing...
- Validating update
- Stopping tomcat service - Update Initiated
- Updating packages - Restarting Tomcat
- Running post-install scripts Success: Upgrade completed
uploaded ISO image.
5. The CloudControl service for each node will restart.
6. Run the following command from the secondary as "ascadminuser": $ asc ha --join <primary ha IP> --mode secondary
7. The ISO image file may now be deleted from the appliances. Verifying that the patch is installed
=============================================================================== From the Management Console, select General > Health.
In the General table, the HTCC Software Version will display 5.6.0.56288 P2. ===============================================================================
