If you want to perform the offline upgrade using a local web server, prepare the web server to host the upgrade file, configure the existing 20.10.X Workspace ONE Access appliance to point to the web server, and perform the upgrade.

Prepare a Local Web Server for Offline Upgrade

Before you start the offline upgrade, set up the local web server by creating a directory structure that includes a subdirectory for the Workspace ONE Access virtual appliance.


  • Perform the general offline-upgrade prerequisites. Upgrading Workspace ONE Access Offline.
  • Download the VMware Workspace ONE Access offline upgrade package, identity-manager-, from the VMware Workspace ONE Access product download page on my.vmware.com.
  • If you use Web Server (IIS), configure the web server to allow special characters in file names. You configure this in the Request Filtering section by selecting the Allow double escaping option.


  1. Create a directory on the web server at http://YourWebServer/VM/ and copy the downloaded zip file to it.
  2. Verify that your web server includes mime types for .sig (text/plain) and .sha256 (text/plain).

    Without these mime types your web server fails to check for updates.

  3. Unzip the file.

    The contents of the extracted ZIP file are served by http://YourWebServer/VM/.

    The extracted contents of the file contain the following subdirectories: /manifest and /package-pool.

  4. Run the following updatelocal.hzn command to check that the URL has valid update contents.
    /usr/local/horizon/update/updatelocal.hzn checkurl http://YourWebServer/VM

Configure the Appliance and Perform Offline Upgrade

Configure the Workspace ONE Access appliance to point to the local web server to perform an offline upgrade. Then upgrade the appliance.


Prepare a local web server for offline upgrade. See the preceding section.


  1. Log in to the Workspace ONE Access appliance as the root user.
  2. Run the following command to configure an upgrade repository that uses a local web server.
    /usr/local/horizon/update/updatelocal.hzn seturl http://YourWebServer/VM/
    Note: To undo the configuration and restore the ability to perform an online upgrade, you can run the following command.
    /usr/local/horizon/update/updatelocal.hzn setdefault
  3. Perform the upgrade.
    1. Run the following updatemgr.hzn command.
      /usr/local/horizon/update/updatemgr.hzn updateinstaller
    2. Run the following command.
      /usr/local/horizon/update/updatemgr.hzn update

      Messages that occur during the upgrade are saved to the update.log file at /opt/vmware/var/log/update.log.

    3. Run the updatemgr.hzn check command again to verify that a newer update does not exist.
      /usr/local/horizon/update/updatemgr.hzn check
    4. Restart the virtual appliance.


    5. Check the version of the upgraded appliance.
      vamicli version --appliance

      The new version is displayed.

    6. After you upgrade all the nodes in your Workspace ONE Access deployment, use the diagnostics dashboard to monitor system information health.
      1. Log in to the Workspace ONE Access console.
      2. Select Dashboard > System Diagnostics Dashboard
      3. If your deployment consists of more than one Workspace ONE Access appliance, select the appliance you want to monitor.
      4. Check the status of the various services.

        For example, to check the health of the Elasticsearch service, review the Integrated Components section and confirm that the values for the Elasticsearch items are as expected. Therefore, the value for Elasticsearch - Health is Green, the information about the cluster nodes is accurate, and so on.


    The upgrade is complete.

    See Post-Upgrade Configuration of Workspace ONE Access.