Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Upgrade Instructions

This section provides information about upgrading the Junos Space Network Management Platform installations running versions earlier than Release 24.1R1.

Note:

You can download the supported Junos Space Network Management Platform Applications such as Security Director and Policy Enforcer whenever they are available on the download site.

Supported Upgrade Path

Table 1 provides information about the supported upgrade path across Junos Space Network Management Platform releases.

Table 1: Supported Upgrade Path
Upgrade from Junos Space Release Upgrade to Junos Space Release
Junos Space Release 20.1 20.3 21.1 21.2 21.3 22.1 22.2 22.3 23.1 24.1
20.1   Yes                
20.3     Yes              
21.1       Yes Yes          
21.2         Yes Yes        
21.3           Yes Yes      
22.1             Yes Yes    
22.2               Yes Yes  
22.3                 Yes  

23.1

                  Yes

Related Information

Note:

Before you upgrade Junos Space Platform to Release 24.1, ensure that the time on all Junos Space nodes is synchronized. For information about synchronizing time on Junos Space nodes, see Synchronizing Time Across Junos Space Nodes.

You can upgrade to Junos Space Network Management Platform 24.1R1 from the following earlier release:

  • Junos Space Network Management Platform Release 23.1R1.
CAUTION:

During the Junos Space Network Management Platform upgrade process, do not modify the filename of the software image that you download from the Juniper Networks support site. If you modify the filename, the upgrade fails.

Upgrade Notes

  • Before the upgrade, ensure that the latest backups are available in a location other than the Junos Space server. For more information about backups, see Backing Up the Junos Space Network Management Platform Database.

  • To upgrade to Junos Space Network Management Platform Release 24.1R1, follow the procedure mentioned in Upgrade to Junos Space Network Management Platform Release 24.1R1.
  • During the upgrade process, do not manually reboot the nodes if the Junos Space user interface does not come up for an extended period of time. Contact the Juniper Networks Support team for help in resolving this issue.
  • After you upgrade Junos Space Platform to Release 24.1R1, all previously installed applications are disabled until the applications are upgraded to a version compatible with Junos Space Platform 24.1R1. You must upgrade the applications to releases that are compatible with Junos Space Platform Release 24.1R1, by using the Junos Space Platform UI. For information about application versions compatible with Junos Space Platform 24.1R1, see Application Compatibility.

Instructions for Validating the Junos Space Network Management Platform OVA Image

From Junos Space Network Management Platform Release 14.1R1 onward, the Junos Space Platform open virtual appliance (OVA) image is securely signed.

Note:
  • Validating the OVA image is optional; you can install or upgrade Junos Space Network Management Platform without validating the OVA image.
  • Before you validate the OVA image, ensure that the PC on which you are performing the validation has the following utilities available: tar, openssl, and ovftool (VMWare Open Virtualization Format (OVF) Tool). You can download VMWare OVF Tool from the following location: https://my.vmware.com/web/vmware/downloads/details?productId=353&downloadGroup=OVFTOOL351.

To validate the Junos Space Network Management Platform OVA image:

  1. Download the Junos Space Platform OVA image and the Juniper Networks Root CA certificate chain file (JuniperRootRSACA.pem) from the Junos Space Network Management Platform - Download Software page at https://www.juniper.net/support/downloads/space.html.

    Note:

    You need to download the Juniper Networks Root CA certificate chain file only once; you can use the same file to validate OVA images for future releases of Junos Space Network Management Platform.

  2. (Optional) If you downloaded the OVA image and the Root CA certificate chain file to a PC running Windows, copy the two files to a temporary directory on a PC running Linux or Unix. You can also copy the OVA image and the Root CA certificate chain file to a temporary directory (/var/tmp or /tmp) on a Junos Space node.

    Note:

    Ensure that the OVA image file and the Juniper Networks Root CA certificate chain file are not modified during the validation procedure. You can do this by providing write access to these files only to the user performing the validation procedure. This is especially important if you use a generally accessible temporary directory, such as /tmp or /var/tmp, because such directories can be accessed by several users.

  3. Navigate to the directory containing the OVA image.

  4. Unpack the OVA image by executing the following command:

    tar xf ova-filename

    where ova-filename is the filename of the downloaded OVA image.

  5. Verify that the unpacked OVA image contains a certificate chain file (junos-space-certchain.pem) and a signature file (.cert extension).

  6. Validate the signature in the unpacked OVF file (extension .ovf) by executing the following command: ovftool ovf-filename, where ovf-filename is the filename of the unpacked OVF file.

  7. Validate the signing certificate with the Juniper Networks Root CA certificate chain file by executing the following command:

    openssl verify -CAfile JuniperRootRSACA.pem -untrusted Certificate-Chain-File Signature-file

    where JuniperRootRSACA.pem is the Juniper Networks Root CA certificate chain file, Certificate-Chain-File is the filename of the unpacked certificate chain file (extension .pem), and Signature-file is the filename of the unpacked signature file (extension .cert).

    If the validation is successful, a message indicating that the validation is successful is displayed.

    A sample of the validation procedure is as follows:

  8. (Optional) If the validation is not successful, perform the following tasks:

    1. Determine whether the contents of the OVA image are modified. If the contents are modified, download the OVA image from the Junos Space Network Management Platform - Download Software page.
    2. Determine whether the Juniper Networks Root CA certificate chain file is corrupted or modified. If it is corrupted or modified, download the Root CA certificate chain file from the Junos Space Network Management Platform - Download Software page.
    3. Retry the preceding validation steps by using one or both of the new files.