Updating CTPView 9.1R3.1 Server Operating System and CTPView Network Management System Software
This topic provides an overview of installing and upgrading the software on the CTPView server. You can install or upgrade the server operating system (OS), and you can upgrade the existing CTPView software to CTPView Release 9.1R3.1 software that you use to manage the CTP Series devices. CTPView servers are provided with an OS and the CTPView software already installed. You can upgrade any CTPView server to a higher-numbered software release.
If you are upgrading from 7.3Rx to 9.1R3-1, the backup/restore feature is not supported. Both the kernel and the database have changed and that is why you cannot backup from 7.3 and restore it to 9.3R1. If you are on 9.x prior to the upgrade then you can backup or restore the database to 9.1R3. This issue only affects CTPViews presently running 7.3Rx. There is a way to restore the CTPView database using the sync feature. However, it requires that you have two CTPView servers which you enable the sync feature on, and this effectively creates a backup copy of the database on the secondary CTPView sync server. Refer KB34858 for details on how to perform the 9.1R3 upgrade while using the sync feature.
Required Install Files
It is your responsibility to install CentOS on a VM, and the
CentOS version must be 7.5.1804 (http://vault.centos.org/7.5.1804/isos/x86_64/).
For information on how to create a CentOS 7 virtual machine,
see Creating a Virtualized Instance of CTPView Server on an ESX Server .
Installing
newer releases of Centos are not supported; you must use Centos 7.5.1804.
If you have queries or need further assistance, contact Juniper Networks
Technical Assistance Center (JTAC).
You can install the CTPView 9.1R3.1 software using the following file:
File | Filename | Checksum |
|---|---|---|
Software and CentOS OS Updates | CTPView-9.1R-3.1-1.el7.x86_64.rpm |
To determine whether you are using the correct file:
CTPView Server OS | Installed CTPView Release | File for Upgrade | Server Reboots During Upgrade? |
|---|---|---|---|
CentOS 7.5 | NA | CTPView-9.1R-3.1-1.el7.x86_64.rpm | Yes |
Recommended System Configuration for Hosting a CTPView Server
We recommend the following hardware configuration to setup a CTPView 9.1R3.1 server:
CentOS 7.5.1804 (64-bit)
1x processor (4 cores)
4 GB RAM
Number of NICs - 2
80 GB Disk space
CTPView Installation and Maintenance Policy
With the CTPView 7.3Rx and earlier releases, the OS (CentOS 5.11) and CTPView application were combined and distributed as a single installation ISO, and all updates (OS and CTPView application) were only available from Juniper Networks. This causes a delay in getting CTPView maintenance releases for important security updates, including Linux OS applications and CTPView application.
With this new model, you can update individual CentOS applications independently from the CTPView application if any security vulnerabilities are reported for the Linux OS applications. This provides more flexibility you need, to ensure the security of your Linux-based platforms.
CTPView OS consists:
Type 1—Stock CentOS 7.5 RPMs
Type 2—Stock CentOS RPMs from other CentOS versions
Type 3—Modified CentOS RPMs
Type 4—CTPView application file
Where, "Stock" RPMs are the packages that are associated with a particular release of CentOS and readily available on the Internet. "Modified" RPMs are stock versions of RPMs that are modified by Juniper Networks for the needs of the CTPView platform. The CentOS 7.5 installation ISO only contains the components of type 1. The monolithic CTPView RPM contains the remaining components of types 2, 3, and 4, which can be unpacked and installed.
When Juniper Networks delivers a CTPView maintenance release RPM, it contains the updated component versions of types 2, 3, and 4. It also contains dependencies to make sure that type 1 components are also up to date and warn the user if any of them need to be updated.
Juniper Networks maintains a list of RPMs for CTPView that we suggest to be upgraded for security and functional reasons. The following methods are used for determining which CTPView RPMs need updates:
Regular Retina/Nessus scans
Notifications from Juniper's SIRT team
Reports from customers
When an RPM update is required, Juniper Networks validates the new version of the component to make sure that it functions properly before adding it to the RPM list. This list will be shared with you via a KB article. Although CTPView maintenance updates mandate, and possibly provide, up-to-date RPMs before installation, this RPM list helps you to update your CTPView software between releases. If there is an RPM added to the RPM list, you can take immediate action. Juniper Networks delivers the components of type 3 via maintenance releases only. For type 1 and type 2 components, the RPMs should be freely available on the web, and Juniper Networks provides sample links. If you discover that an RPM needs a security update and it is not in the RPM list, you can notify Juniper Networks so that we can test it and add it to the list.
A bulk RPM update using "yum update" is strictly forbidden. CTPView 9.x, although mainly based on CentOS 7.5, is also made up of RPMs from other distributions. Performing an update to the latest version of CentOS 7 may cause CTPView to be non-functional, and a reinstallation may be required.
If you update RPMs that are not on the KB RPM list, CTPView may not function properly.
Creating a Centos 7 Virtual Machine
see Creating a Virtualized Instance of CTPView Server on an ESX Server .
Installing CTPView 9.1R3.1
CTPView can be installed on the newly created CentOS 7.5[1804] VM or CentOS 7.5[1804] bare metal server. To install:
- Create a new CentOS 7 Virtual Machine (VM) instance as mentioned in Creating a Virtualized Instance of CTPView Server on an ESX Server .
- Copy the CTPView RPM (CTPView-9.1R-3.1-1.el7.x86_64.rpm)
to
/tmpdirectory of the newly created CentOS 7.5[1804] VM or CentOS 7.5[1804] bare metal. - Login as admin user that you created
at the time of creating Centos 7 VM.
Install CTPView RPM using the command sudo rpm -Uvh CTPView-9.1R-3.1-1.el7.x86_64.rpm. - Change the passwords for all the default user accounts (juniper_sa, root, Juniper, ctpview_pgsql) at the end, during installation (Refer section Change password of Default User accounts).
Upgrading to CTPView 9.1R3.1
- Copy the CTPView RPM (CTPView-9.1R-3.1-1.el7.x86_64.rpm) to
/tmpdirectory of a CTPView server running with previous version (9.0R1/9.1R1/9.1R2) of CTPView software. Before copying CTPView RPM make sure that/tmpdirectory is empty. If you are installing it on top of
9.1R2 or 9.1R1 Release, use the command sudo rpm -Uvh CTPView-9.1R-3.1-1.el7.x86_64.rpm.
9.0R1 Release, use the command sudo rpm -Uvh --force CTPView-9.1R-3.1-1.el7.x86_64.rpm.
Change password of Default User accounts
This step is applicable only when you install CTPView 9.1R3.1 RPM on your server on top of Centos 7/9.1R1/9.0R1 but not applicable when you install on top of 9.1R2. Change the passwords for all the default user accounts as shown here:
########################################################################################################
CTPView has been installed on your system. Now, You need to set the passwords for all the user accounts.
########################################################################################################
#########################################################################
#########################################################################
#########################################################################
PLEASE REMEMBER THESE PASSWORDS!!!
Password recovery is not a simple process:
- It is service affecting.
- It requires console access to the CTPView
- It requires rebooting the CTPView (Possibly even a system repower)
#########################################################################
#########################################################################
#########################################################################
Enter New UNIX Password for root
Retype New UNIX Password for root
Changing password for user root.
passwd: all authentication tokens updated successfully.
This will be a System Administrator
Enter New UNIX Password for juniper_sa
Retype New UNIX Password for juniper_sa
Changing password for user juniper_sa.
passwd: all authentication tokens updated successfully.
Changing password for user Juniper
Enter the new password:
Re-Enter the new password:
You will now be asked for the password of the PostgreSQL Administrator account:
Password for user postgres:
UPDATE 1
===== Successfully updated the CTPView password for default user Juniper. =====
Note: The user Juniper has been assigned to the default user group TempGroup
and has been given default user properties. Review the values using
the CTPView Admin Center and make any appropriate modifications.
Changing password for user ctpview_pgsql
Enter the new password:
Re-Enter the new password:
You will now be asked for the password of the PostgreSQL Administrator account:
Password for user postgres:
ALTER ROLE
Note - You can also reset the password of all default user accounts from CTPView menu -> Advanced Functions
-> Reset account for default System Administrator
Uninstalling CTPView 9.1R3.1
To uninstall CTPView 9.1R3.1 from Centos 7:
- Check if root login is permitted. If not, enable root login from menu -> Security Profile(1) -> Modify Security Level(5) -> Set OS level to 'very-low'(3).
- Login through “root” user and run the command sudo rpm -evh CTPView-9.1R-3.1-1.el7.x86_64.rpm.
- System will reboot after uninstalling. Then use admin user (the one you created while creating CentOS 7) to login.