Troubleshooting Failed In-Place High Availability Upgrade

[support]

Hello Everyone,

We've had a couple of instances where customers have run into issues using the In-Place Upgrade feature for High Availability instances of Passwordstate - screenshot below of where this feature can be found.

 

The issue generally relate to a failed upgrade, due to possible firewall's blocking access. Below will describe the process of what occurs during the upgrade, and how to manually repair your HA install if required.

HA Upgrade Process

When you start the upgrade, the following process will occur (these are all achieved using various PowerShell scripts which are executed on/from the primary Passwordstate web server). Please note the paths documented below are the default paths, but may be different for your environment.

 

• Stop the Passwordstate windows services on the HA Server (Passwordstate Service and Passwordstate-Gateway - the gateway service may not exist)

• The following files are then backed up from the HA server, to the folder c:\inetpub\passwordstate\upgrades\passwordstate\haupgrade on your primary server

            c:\inetpub\passwordstate\web.config

            c:\inetpub\passwordstate\hosts\gateway\gateway.conf

            c:\inetpub\passwordstate\hosts\gateway\passwordstate.pfx

            c:\inetpub\passwordstate\securid\*.*

• Delete all files in the folder c:\inetpub\passwordstate on the HA Server
• Copy across all files from the folder c:\inetpub\passwordstate on the primary server to the HA Server
• Restore all backed up files from Step 2 above to your HA Server
• Restart the Passwordstate windows services on your HA Server

 

During this process, if any exceptions occur, it should halt further processing.

 

Manually Repair your HA Install

If you do run into any issues performing upgrades for your HA Server, please confirm the configuration files are backed up an exist in the folder c:\inetpub\passwordstate\upgrades\passwordstate\haupgrade on your primary server, before proceeding. If these files do not exist for any reason, you will need to contact Click Studios for further support - but they should exist, otherwise processing above should have halted.

 

To manually repair your HA install, please follow these instructions:

• Stop the Passwordstate windows services on the HA Server
• Delete all files in the folder c:\inetpub\passwordstate on the HA Server
• Copy across all files from the folder c:\inetpub\passwordstate on the primary server to the HA Server
• Restore all backed up files from the folder c:\inetpub\passwordstate\upgrades\passwordstate\haupgrade on your primary server to the relevant paths within your HA Server's folder
• Restart the Passwordstate windows services on your HA Server
• Ensure the Passwordstate folder, and all nested files/folders, have Modify NTFS Permissions for the NETWORK SERVICE account. If you are using a Managed Service Account in your Application Pools instead, then you will need to apply permissions for this account