You can upgrade or revert to a backup version of the software in the Settings > Maintenance: Software Upgrade page. The top of the page displays the current version number and the backup version. The Core version histories appear at the bottom of the page. This topic includes these sections:
Note: As of version 4.2, software upgrade and downgrade restrictions are in place to enforce supported upgrade/downgrade paths. You can upgrade or downgrade the Core software up to a maximum of two versions beyond the current version. If you attempt to upgrade or downgrade to an unsupported version, a warning will display.
Upgrading your software
To upgrade your software
1. Download the software image from the Riverbed Support site to a location such as your desktop. Optionally, you can download the image directly from a specified URL to the Core.
2. Log in to the Management Console using the Administrator account (admin).
3. Choose Settings > Maintenance: Software Upgrade to display the Software Upgrade page.
Figure: Software Upgrade page
4. Select one of the following options under Install Upgrade:
From URL - Type the URL that points to the software image in the text box. You can use HTTP, HTTPS, FTP, or SCP formats for the URL. Use one of the following formats:
– http://host/path/to/file
– https://host/path/to/file
– ftp://user:password@host/path/to/file
– scp://user:password@host/path/to/file
From Local File - Browse your file system and select the software image. Select this option and specify the path, or click Browse to go to the local file directory. The image is uploaded immediately; however the image is installed and the system is rebooted at the time you specify.
Schedule Upgrade for Later - Schedules the upgrade process. Specify the date and time to run the upgrade using the following format: yyyy/mm/dd hh:mm:ss.
5. Click Install.
The system installs the image in the backup partition and sets the option to load the backup partition version on reboot.
6. Reboot the Core.
To switch to the backup version
1. Log in to the management console using the Administrator account (admin).
2. Go to the Settings > Maintenance: Software Upgrade page and click Switch to Backup Version.
3. Reboot the Core or click Cancel Version Switch to cancel.
Verifying your software image
Before you install a software upgrade, you can verify the integrity and authenticity of the software image and ensure it is an unmodified and approved Riverbed image. The feature requires a public key in a certificate to verify the digital signature of the software image. The certificate is automatically installed on the SteelHead, but you can import an updated version, if needed.
Note: You can download the public key for Riverbed images from KB article S33657.
During the verification process, the appliance compares the signature in the image with the Riverbed public certificate. If they match, the installation continues. If not, the system alerts you to a potential problem. As long as image signature verification is enabled, you cannot continue with an installation that cannot verify the image signature.
By default, image signature verification is on and should be disabled only when necessary. Riverbed recommends keeping the feature enabled at all times.
To enable software image verification
1. Choose Settings > Maintenance: Software Upgrade to display the Software Upgrade page.
2. Under Image Signature Verification, select Image Signature Verification.
If you clear the Image Signing Verification check box, you disable this feature and a warning message appears indicating images will not be verified.
Figure: Image Signature Verification section
3. Expand the Image Signing Certificate section and ensure the appliance has a valid certificate.
You can use the certificate that is installed by default or you can click the Import tab to replace an expired or revoked certificate. You can upload a PKCS-12, PEM, or DER format certificate or paste a PEM certificate. Click Import Image Signing Certificate to add the certificate to this appliance.
You can only use one certificate. The certificate information appears in the Details tab.
4. Click Apply.
5. Click Save to Disk to save your settings permanently.
