ManageEngine® Key Manager Plus Upgrade Pack Download

The latest Key Manager Plus version is 6.6(6620) If you are using an earlier version, you need to apply upgrade pack. See What's New in Key Manager Plus 6.6. Click here for the Upgrade Instructions.

Instructions to apply the Upgrade Pack

IMPORTANT: Take a copy of the entire Key Manager Plus installation folder before applying the upgrade pack and keep it in some other location. If something goes wrong with the Key Manager Plus upgrade, you can rely on the copy. Also ensure that you stop the Key Manager Plus server before applying the upgrade pack. All your settings will remain intact.

Windows

• Stop the Key Manager Plus service. Take a backup of the entire Key Manager Plus installation folder and store it in some other location. In case something goes wrong with the upgrade, you can revert to this copy, with your settings intact.
• The upgrade pack is to be applied through a tool named UpdateManager bundled with Key Manager Plus. To begin the upgrade, navigate to the <Key Manager Plus_Installation_Folder>/bin directory and execute the command UpdateManager.bat to start the Update Manager.

• Click Browse and select the .ppm file that you downloaded. As a part of patch integrity verification from KMP build 6300 onwards, you must import an SSL certificate to complete the upgrade process. Click here to download the SSL certificate to be imported.
• In the pop-up that opens, click Browse and import the SSL certificate you downloaded from the aforementioned page.

• Click Install in the Update Manager window to begin the upgrade process. Wait for a few minutes until the upgrade pack is fully installed. Please note that importing the SSL certificate is mandatory while upgrading KMP from version 6.2 to 6.3. However, this is a one-time operation and you need not repeat the process during the next version upgrade.
• Click Close and then click Exit to exit the Update Manager tool. If you are applying multiple upgrade packs one-by-one, exit the Update Manager tool after applying one upgrade pack and make sure that the database process is not running. Then proceed with running the Update Manager tool to apply the next upgrade pack and so on
• Also, when applying multiple upgrade packs sequentially, it is recommended that you start the Key Manager Plus service after each upgrade to ensure the corresponding build version runs successfully without any issue.

Linux

• Stop KMP service using the command /etc/rc.d/init.d/sshkeymanager-service stop.
• The upgrade pack is to be applied through a tool named UpdateManager bundled with Key Manager Plus. To begin the upgrade, navigate to <Key Manager Plus_Installation_Folder>/bin directory using a terminal.
• Execute the commandsh UpdateManager.sh -c (This will run the Update Manager in CLI mode)
• Now, press i to install. Supply full path of the upgrade pack.
• As a part of patch integrity verification from KMP build 6300 onwards, you must import an SSL certificate to install the upgrade. Download the certificate from this link.
• Enter the SSL certificate's absolute path when prompted. Once the certificate is imported successfully, wait for the upgrade to complete until the message "Service Pack applied successfully" is displayed. Please note that the SSL certificate import is a one-time operation and you need not repeat the process during the next version upgrade.
• If you are applying multiple upgrade packs, do the following for each upgrade; exit the Update Manager, start & stop the KMP service once, and execute the upgrade steps.
• After applying the upgrade packs, login as a root user and start the KMP service, using /etc/rc.d/init.d/sshkeymanager-service start.

Failover Service (FOS) Setup

In a failover service set up with two application servers bound to an MS SQL cluster, you can upgrade only the primary server; the secondary server must be reinstalled and the failover service setup must be reconfigured.

Summary of steps to be followed:

• Deactivate the failover service.
• Upgrade the primary application server.
• Reinstall the secondary application.
• Reconfigure the failover service.

Deactivate Failover Service

You can deactivate the failover service either from the primary or the secondary server.

To uninstall:

• Open a command prompt in any of the servers
• Navigate to <keymanagerplus_installation_folder>/bin directory
• Execute the command: UninstallFOS.bat

With this, the failover service will be deactivated. Next, you can uninstall Key Manager Plus application completely from the other servers.

Upgrade the Primary Application server

You can upgrade your primary installation of Key Manager Plus by following the below steps. The latest upgrade packs are available above . You can use the instructions mentioned here to apply the upgrade packs one by one to reach the latest version. If MS SQL is configured as back end, do take a backup of database present in MS SQL Server

Upgrade steps

• Stop the Key Manager Plus service and exit the tray icon.
• Navigate to <Key Manager Plus_Installation_Folder>/bin directory from CMD and execute UpdateManager.bat
  • During MS SQL server configuration for Key Manager Plus database, if you have opted for 'Windows Authentication,' you have to start the command prompt using the service account with which the Key Manager Plus service has been configured to connect to the SQL server (i.e. instead of running as administrator, run as the service account).
  • To identify whether a service account is used or a SQL account is used, navigate to <Key Manager Plus_Installation_Folder>/conf directory and opendatabase_params.conf file. If you do not find a username and password in the file, then Key Manager Plus is using Windows Authentication and therefore you need to run the command prompt with service account privilege.
• Click Browse and select the .ppm file that you downloaded. As a part of patch integrity verification from KMP build 6300 onwards, you must import an SSL certificate to complete the upgrade process. Click here to download the SSL certificate to be imported.
• In the pop-up that opens, click Browse and import the SSL certificate you downloaded from the aforementioned page.
• Click Install in the Update Manager window to begin the upgrade process. Wait for a few minutes until the upgrade pack is fully installed. Please note that importing the SSL certificate is mandatory while upgrading KMP from version 6.2 to 6.3. However, this is a one-time operation and you need not repeat the process during the next version upgrade
• Click Close and then click Exit to exit the Update Manager tool. If you are applying multiple upgrade packs one-by-one, exit the Update Manager tool after applying one upgrade pack and make sure that the database process is not running. Then proceed with running the Update Manager tool to apply the next upgrade pack and so on.
• If you are applying multiple upgrade packs, do the following for each upgrade; exit the Update Manager, start & stop the Key Manager Plus service once, and execute the upgrade steps.
• After applying the upgrade packs, start the Key Manager Plus service.

Reinstall KMP on the Secondary Application Server

After upgrading the primary server to the latest version, You can reinstall the latest version of Key Manager Plus on your secondary server. Note: Ensure the software architectures are the same i.e. 32-bit/64-bit. You can download Key Manager Plus from this link.

Reconfigure Failover Service

After reinstalling the secondary server, you can perform the steps detailed in the failover service help documentation to configure failover service in the secondary application server again.

If you need any assistance or clarifications, please contact keymanagerplus-support@manageengine.com.

How Do I Find My Build Number?

Log in to the Key Manager Plus web interface and click the profile option in the top right corner and click License. You will find the build number of the currently installed Key Manager Plus version mentioned below the version number.