Use this procedure if the View Connection Server instance that you plan to upgrade is paired with a security server.
About this task
This procedure is designed to upgrade one security server and its paired View Connection Server instance before moving on to upgrade the next security server and its paired View connection Server instance. This strategy allows for zero down time. If the instance is not paired with a security server, use the procedure Upgrade View Connection Servers in a Replicated Group.
The first few steps of this procedure involve upgrading the View Connection Server instance. After the View Connection Server upgrade, but before the security server upgrade, one of the steps describes removing the IPsec rules for the security server. When you remove the IPsec rules for an active security server, all communication with the security server is lost until you upgrade or reinstall the security server.
By default, communication between a security server and its paired View Connection Server instance is governed by IPsec rules. If the existing IPsec rules are not removed before you upgrade or reinstall, the pairing between the security server and View Connection Server fails, and a new set of IPsec rules cannot be established after the upgrade.
Prerequisites
Determine when to perform this procedure. Choose an available desktop maintenance window. Budget 15 to 30 minutes for each security server and its paired View Connection Server instance.
If you use View Composer, verify that View Composer has been upgraded. See Upgrade View Composer. After you upgrade View Connection Server, you must add View Composer using View Administrator.
Familiarize yourself with the security-related requirements of View, and verify that these requirements are met. See Upgrade Requirements for View Connection Server. You might need to obtain and install a CA-signed SSL server certificate that includes certificate revocation information, verify that Windows Firewall with Advanced Security is set to on, and configure any back-end firewalls to support IPsec.
Verify that the virtual or physical machines on which the current security server and View Connection Server instances are installed meet the system requirements.
Complete the tasks listed in Preparing View Connection Server for an Upgrade.
Important:If any Local Mode desktops are checked out at the time you run the View Connection Server installer to install the upgrade, the upgrade will fail.
Verify that you have a license for the new version.
Verify that you have a user account with administrative privileges on the hosts that you will use to run the installer and perform the upgrade.
If you have not configured a security server pairing password, use the latest version of View Administrator to do so. The installation program will prompt you for this password during installation. See the topic called "Configure a Security Server Pairing Password" in the View Installation document.
Procedure
What to do next
To use a default or self-signed certificate from vCenter Server or View Composer, see Accept the Thumbprint of a Default SSL Certificate.
If the upgrade fails on one or more of the View Connection Server instances, see Create a Replicated Group After Reverting View Connection Server to a Snapshot.
If you plan to use enhanced message security mode for JMS messages, make sure that firewalls allow View Connection Server instances to receive incoming JMS traffic on port 4002 from desktops and security servers. Also open port 4101 to accept connections from other View Connection Server instances.
If you ever reinstall View Connection Server on a server that has a data collector set configured to monitor performance data, stop the data collector set and start it again.