Using a Local Web Server for a Workspace ONE Access Offline Upgrade

If you want to perform the offline upgrade using a local web server, prepare the web server to host the upgrade file, configure the existing 20.10.X Workspace ONE Access appliance to point to the web server, and perform the upgrade.

Prepare a Local Web Server for Offline Upgrade

Before you start the offline upgrade, set up the local web server by creating a directory structure that includes a subdirectory for the Workspace ONE Access virtual appliance.

Expect some downtime during upgrade and plan the timing of your upgrade accordingly. Reindexing Elasticsearch is a long process that can take over an hour to complete. See Migrating Elasticsearch Data from Workspace ONE Access 19.03.X and 20.01.X before Upgrading to 21.08.

Prerequisites

Perform the general offline-upgrade prerequisites. See Prerequisites for a Workspace ONE Access Offline Upgrade.
Download the VMware Workspace ONE Access offline upgrade package, identity-manager-21.08.0.0-buildNumber-updaterepo.zip, from the VMware Workspace ONE Access product download page on my.vmware.com.
If you use Web Server (IIS), configure the web server to allow special characters in file names. You configure this in the Request Filtering section by selecting the Allow double escaping option.

Procedure

Create a directory on the web server at http://YourWebServer/VM/ and copy the downloaded zip file to it.
Verify that your web server includes mime types for .sig (text/plain) and .sha256 (text/plain).
Without these mime types your web server fails to check for updates.
Unzip the file.
The contents of the extracted ZIP file are served by http://YourWebServer/VM/.
The extracted contents of the file contain the following subdirectories: /manifest and /package-pool.
Run the following updatelocal.hzn command to check that the URL has valid update contents.
```
/usr/local/horizon/update/updatelocal.hzn checkurl http://YourWebServer/VM
```

Configure the Appliance and Perform Offline Upgrade

Configure the Workspace ONE Access appliance to point to the local web server to perform an offline upgrade. Then upgrade the appliance.

Prerequisites

Prepare a local web server for offline upgrade. See the preceding section.

Procedure

Log in to the Workspace ONE Access appliance as the root user.
Run the following command to configure an upgrade repository that uses a local web server.
```
/usr/local/horizon/update/updatelocal.hzn seturl http://YourWebServer/VM/
		  
```
Note: To undo the configuration and restore the ability to perform an online upgrade, you can run the following command.
```
/usr/local/horizon/update/updatelocal.hzn setdefault
```
Perform the upgrade.
1. Run the following updatemgr.hzn command.
```
/usr/local/horizon/update/updatemgr.hzn updateinstaller
```
2. Run the following command.
```
/usr/local/horizon/update/updatemgr.hzn update
```
  Messages that occur during the upgrade are saved to the update.log file at /opt/vmware/var/log/update.log.
3. If you are updating multiple virtual appliances in a cluster, you must reindex the Elasticsearch indices on the first node upgraded. If this is the first node that you are updating when you see the warning message to run /usr/local/horizon/update/reindexingIndices.hzn script, enter y.
  When you upgrade other nodes in the cluster, when you see the message, enter n.
  If you are upgrading a single virtual appliance, you do not see this message. The reindexing script runs as part of the upgrade process.
4. Run the updatemgr.hzn check command again to verify that a newer update does not exist.
```
/usr/local/horizon/update/updatemgr.hzn check
```
5. Restart the virtual appliance.
  reboot
6. Check the version of the upgraded appliance.
```
vamicli version --appliance
```
  The new version is displayed.
7. After you upgrade all the nodes in your Workspace ONE Access deployment, use the diagnostics dashboard to monitor system information health.
  1. Log in to the Workspace ONE Access console.
  2. Select Dashboard > System Diagnostics Dashboard
  3. If your deployment consists of more than one Workspace ONE Access appliance, select the appliance you want to monitor.
  4. Check the status of the various services.
    For example, to check the health of the Elasticsearch service, review the Integrated Components section and confirm that the values for the Elasticsearch items are as expected. Therefore, the value for Elasticsearch - Health is Green, the information about the cluster nodes is accurate, and so on.
Results
The upgrade is complete.
See Post-Upgrade Configuration of Workspace ONE Access.