You can upgrade the Workspace ONE Access virtual appliance online. The virtual appliance must be able to connect to the Internet for an online upgrade.

Prerequisites for a Workspace ONE Access Online Upgrade

Before you upgrade the 22.09.X virtual appliance online, perform these prerequisite tasks.

  • Verify that at least 4 GB of disk space are available on the primary root partition of the virtual appliance. To see the disk space, run the df -h command.
  • Back up the virtual appliance by taking a snapshot. For information about how to take a snapshot. See KB article 2032907, Managing snapshots in vSphere Web Client.
  • Microsoft SQL server 2014 updated with the Microsoft SQL patch to support TLS1.2.
  • If you revoked the db_owner role on the Microsoft SQL database, you must add the role back before performing the upgrade, otherwise the upgrade fails. Add the db_owner role to the same user that was used during installation:
      1. Log in to the Microsoft SQL Server Management Studio as a user with sysadmin privileges.
      2. Connect to the database instance for the service.
      3. Enter the following commands.

        If you are using Windows Authentication mode, use the following commands:

        USE <saasdb>;
        ALTER ROLE db_owner ADD MEMBER <domain\username>; GO 
        						  

        Make sure that you replace <saasdb> with your database name and <domain\username> with the relevant domain and user name.

        If you are using SQL Server Authentication mode, use the following commands.
        USE <saasdb>;
        ALTER ROLE db_owner ADD MEMBER <loginusername>; GO 
        						  

        Make sure that you replace <saasdb> with your database name and <loginusername> with the relevant user name.

      For information about revoking the database-level role, see Change Database-Level Roles After Upgrade to Workspace ONE Access.

  • Take a snapshot or backup of the external database.
  • Verify that the service is properly configured.
  • Verify that the virtual appliance can resolve and reach vapp-updates.vmware.com on ports 80 and 443 over HTTP.
  • If an HTTP proxy server is required for outbound HTTP access, configure the proxy server settings for the virtual appliance. See Configure Proxy Server Settings before upgrading Workspace ONE Access Appliance.
  • Run the appropriate command to check for upgrades. See Check for the Availability of a Workspace ONE Access Upgrade Online.
  • Ensure that following directory space requirements is met.
    Directory Minimum Available Space
    / 4 GB
  • Make sure all connectors in your deployment are version 22.09.x or an earlier, supported version of the enterprise connector

    Legacy connectors (version 19.03.0.1 and earlier) are not compatible with Workspace ONE Access virtual appliance version 23.09. Migrate your legacy connectors to 22.09.x (or an earlier, supported version of the enterprise connector) before upgrading your Workspace ONE Access virtual appliances to 23.09. After upgrading the virtual appliances to 23.09, upgrade the connectors to 23.09.

    See Migrating to VMware Workspace ONE Access Connector 22.09 or Upgrading to VMware Workspace ONE Access Connector 22.09.

Configure Proxy Server Settings before upgrading Workspace ONE Access Appliance

The Workspace ONE Access virtual appliance accesses the VMware update servers through the Internet. If your network configuration provides Internet access using an HTTP proxy, you must adjust the proxy settings for the appliance.

Enable your proxy to handle internet traffic only. To ensure that the proxy is set up correctly, in the Workspace ONE Access service version 22.09 set the parameter for internal traffic to no-proxy within the domain.

Prerequisites

  • Verify that you have the proxy server information.
  1. Log in to the Workspace ONE Access console and select Monitor > Resiliency.
  2. Click VA Configuration for the service node that with the proxy server information configured. The VA configurator page opens.
    VA Configuration selection from the Resiliency page in the Workspace ONE Access console
  3. Click Proxy Configuration.
  4. Enable Proxy.
  5. In the Proxy host with port text box, enter the proxy name and port number. For example, proxyhost.example.com:3128.
  6. In the Non-Proxied hosts text box, enter the non-proxy hosts that are accessed without going through the proxy server.

    Use a comma to separate a list of host names.

  7. Click Save.

Results

The VMware update servers are now available to the Workspace ONE Access virtual appliance.

Check for the Availability of a Workspace ONE Access Upgrade Online

If your existing Workspace ONE Access 22.09.X virtual appliance has Internet connectivity, you can check for the availability of upgrades online from the appliance.

  1. Log in to the virtual appliance as the root user.
  2. Run the following command to check for an online upgrade.
    /usr/local/horizon/update/updatemgr.hzn check