Datasheet

CiscoSecure ACS 2.3 for UNIX User Guide

78-5222-02 Rev. A0

Upgrading from CiscoSecure ACS 2.x to 2.3

Note If you want CiscoSecure ACS 2.3 for UNIX with the DSM module installed, first follow this procedure

to upgrade to version 2.3. Then use the CiscoSecure ACS Distributed Session Manager Option product

to license and enable the DSM module. To support DSM, make sure that an Oracle or Sybase RDBMS

is installed for CiscoSecure prior to running the CiscoSecure upgrade installation program. For details,

see “Setting Up an Oracle Database for CiscoSecure” section on page xix or “Setting Up a Sybase

Enterprise SQL Server for CiscoSecure” section on page xxii.

Step 1 Before you start the upgrade installation, read the file $BASEDIR/config/CSU.cfg and write down the

software key value for use during installation.

$BASEDIR is the install directory for CiscoSecure that you specified at the time of installation. For

example, if you specified “ciscosecure” as the install location, the file is located at

/ciscosecure/config/CSU.cfg. Below is an example of the line in the CSU.cfg file that contains the

software key value:

LIST config_license_key = {“a9505ad08a77f927afa4”};

Step 2 Prepare your CiscoSecure ACS 2.x database for upgrade to ACS 2.3 format:

• Back up your CiscoSecure ACS 2.x database.

• Export all the accounting records to an external file by running the AcctExport utility.

If you are upgrading from CiscoSecure 2.x, the CiscoSecure ACS installation will implement database

schema changes for version 2.3 compatibility. These schema changes include recreating a profile data

table (cs_profile) as well as an accounting data table (cs_accounting_log).

Step 3 (Optional) If you want to preserve your old debug level, TACACS+ NAS configurations, and supported

authentication methods settings for the ACS, save the current $BASEDIR/config/CSU.cfg file to a

holding directory.

Step 4 (Optional) If you want to preserve your old unknown_user default profile settings, save the current

$BASEDIR/config/DefaultProfile file to a holding directory.

Step 5 Remove the current version of CiscoSecure ACS from the Ultra 1 workstation. Log in as [Root] and

enter:

pkgrm CSCEacs

Step 6 Install CiscoSecure ACS 2.3 for UNIX following the procedures described in the “Basic Installation

Procedures,” page iv.

Note However, skip the section “Obtain a CiscoSecure Software License Key.” You do not need to

obtain a new software license key to upgrade from a previous version of CiscoSecure ACS 2.x

for UNIX to CiscoSecure ACS 2.3 for UNIX.