This topic tells you how to upgrade IPsec for VMware Tanzu.

For product versions and upgrade paths, see Upgrade Planner.

Assumption about Tanzu Operations Manager Versions

This topic assumes the following about your Tanzu Operations Manager, BOSH CLI, and runtime config.

Tanzu Operations Manager Version BOSH CLI Version Runtime Config More information
1.12 and later CLI v2+ runtime config in multiple, named files, so that ipsec can be managed separately

Breaking change If you are using TAS for VMs v1.12 or later, you must use named runtime configs. If you have not already split your runtime config into multiple named files, do so before upgrading IPsec for VMware Tanzu. For general information about named runtime config files, see Configs.

Upgrade IPsec

To upgrade IPsec to a later version, do the following:

  1. Download the IPsec software binary from the VMware Tanzu Network to your local machine.

  2. To copy the software binary to your Tanzu Operations Manager VM, run the following command:

    scp -i PATH-TO-PRIVATE-KEY ipsec-VERSION.tar.gz ubuntu@YOUR-OPS-MANAGER-VM-IP:

    For example:

    $ cp -i ~/.ssh/my-key.pem ~/Downloads/ipsec-1.8.14.tgz ubuntu@ 
  3. SSH into the Tanzu Operations Manager VM. For how to do this, see Logging in to Tanzu Operations Manager VMs with SSH.

  4. Retrieve the latest runtime config by running the following command:

    bosh -e BOSH-ENVIRONMENT runtime-config  --name ipsec > PATH-TO-SAVE-THE-RUNTIME-CONFIG

    For example:

    bosh -e my-env runtime-config  --name ipsec > /tmp/ipsec.yml
  5. Upload the latest IPsec release:


    For example:

    bosh -e my-env upload-release ~/ipsec-1.8.14.tgz
  6. Edit the ipsec runtime config to set the new release version.

    For example, edit the version in /tmp/ipsec.yml as follows:

     releases: - {name: ipsec, version: 1.8.14} 

  7. Update the runtime config:

    bosh -e BOSH-ENVIRONMENT update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG

    For example:

    bosh -e my-env update-runtime-config --name=ipsec /tmp/ipsec.yml 
  8. Go to your Installation Dashboard in Tanzu Operations Manager.

  9. If you are using Tanzu Operations Manager v2.3 or later, click Review Pending Changes. For more information about this Tanzu Operations Manager page, see Reviewing your pending product changes in Tanzu Operations Manager.

  10. Click Apply Changes.

check-circle-line exclamation-circle-line close-line
Scroll to top icon