Skip to main content

Upgrade the host OS and ONTAP Mediator

Contributors netapp-sarajane netapp-aaron-holt netapp-thomi netapp-ahibbard

To upgrade the host OS for ONTAP Mediator to a later version, you must first uninstall ONTAP Mediator.

About this task

Before upgrading the host OS for ONTAP Mediator with the leapp-upgrade tool, uninstall ONTAP Mediator. The tool checks for new RPM versions in registered repositories.

The ONTAP Mediator installer installs an .rpm file, which the leapp-upgrade tool includes in the search. Because the installer unpacks the file instead of downloading it from a registered repository, the tool cannot find an upgrade. You must use the leapp-upgrade tool to uninstall the package.

Steps
  1. Back up the log files:

    [rootmediator-host ~]# tar -czf ontap_mediator_file_backup.tgz -C /opt/netapp/lib/ontap_mediator ./log ./ontap_mediator/server_config/ontap_mediator.user_config.yaml
    [rootmediator-host ~]# tar -tf ontap_mediator_file_backup.tgz
    ./log/
    ./log/ontap_mediator.log
    ./log/scstadmin.log
    ./log/ontap_mediator_stdout.log
    ./log/ontap_mediator_requests.log
    ./log/install_20230419134611.log
    ./log/scst.log
    ./log/ontap_mediator_syslog.log
    ./ontap_mediator/server_config/ontap_mediator.user_config.yaml
    [rootmediator-host ~]#
  2. Perform upgrade with leapp-upgrade tool:

    [rootmediator-host ~]# leapp preupgrade --target 8.4
      ..<snip upgrade checks>..
      ..<fix issues found>..
    [rootmediator-host ~]# leapp upgrade --target 8.4
      ..<snip upgrade>..
    [rootmediator-host ~]# cat /etc/os-release | head -2
    NAME="Red Hat Enterprise Linux"
    VERSION="8.4 (Ootpa)"
    [rootmediator-host ~]#
  3. Reinstall ONTAP Mediator:

    Note Perform the rest of the steps immediately after reinstalling ONTAP Mediator to prevent a loss of log files.
    [rootmediator-host ~]# ontap-mediator-1.11.0/ontap-mediator-1.11.0
    
    ONTAP Mediator: Self Extracting Installer
    
      ..<snip installation>..
    [rootmediator-host ~]#
  4. Stop ontap_mediator:

    [rootmediator-host ~]# systemctl stop ontap_mediator
    [rootmediator-host ~]#
  5. Replace the log files:

    [rootmediator-host ~]# tar -xf ontap_mediator_log_backup.tgz -C /opt/netapp/lib/ontap_mediator
    [rootmediator-host ~]#
  6. Start ontap_mediator:

    [rootmediator-host ~]# systemctl start ontap_mediator
    [rootmediator-host ~]#
  7. Reconnect all ONTAP clusters to the upgraded ONTAP Mediator:

MetroCluster over IP
siteA::> metrocluster configuration-settings mediator show
Mediator IP     Port    Node                    Configuration Connection
                                                Status        Status
--------------- ------- ----------------------- ------------- -----------
172.31.40.122
                31784   siteA-node2             true          false
                        siteA-node1             true          false
                        siteB-node2             true          false
                        siteB-node2             true          false
siteA::> metrocluster configuration-settings mediator remove
Removing the mediator and disabling Automatic Unplanned Switchover. It may take a few minutes to complete.
Please enter the username for the mediator: mediatoradmin
Please enter the password for the mediator:
Confirm the mediator password:
Automatic Unplanned Switchover is disabled for all nodes...
Removing mediator mailboxes...
Successfully removed the mediator.

siteA::> metrocluster configuration-settings mediator add -mediator-address 172.31.40.122
Adding the mediator and enabling Automatic Unplanned Switchover. It may take a few minutes to complete.
Please enter the username for the mediator: mediatoradmin
Please enter the password for the mediator:
Confirm the mediator password:
Successfully added the mediator.

siteA::> metrocluster configuration-settings mediator show
Mediator IP     Port    Node                    Configuration Connection
                                                Status        Status
--------------- ------- ----------------------- ------------- -----------
172.31.40.122
                31784   siteA-node2             true          true
                        siteA-node1             true          true
                        siteB-node2             true          true
                        siteB-node2             true          true
siteA::>
SnapMirror active sync

For SnapMirror active sync, you do not need to reinstall TLS certificates stored outside /opt/netapp. Back up and restore the certificates stored in /opt/netapp.

peer1::> snapmirror mediator show
Mediator Address Peer Cluster     Connection Status Quorum Status
---------------- ---------------- ----------------- -------------
172.31.49.237    peer2            unreachable       true

peer1::> snapmirror mediator remove -mediator-address 172.31.49.237 -peer-cluster peer2

Info: [Job 39] 'mediator remove' job queued

peer1::> job show -id 39
                            Owning
Job ID Name                 Vserver    Node           State
------ -------------------- ---------- -------------- ----------
39     mediator remove      peer1      peer1-node1    Success
     Description: Removing entry in mediator

peer1::> security certificate show -common-name ONTAPMediatorCA
Vserver    Serial Number   Certificate Name                       Type
---------- --------------- -------------------------------------- ------------
peer1
        4A790360081F41145E14C5D7CE721DC6C210007F
                        ONTAPMediatorCA                        server-ca
    Certificate Authority: ONTAP Mediator CA
        Expiration Date: Mon Apr 17 10:27:54 2073

peer1::> security certificate delete -common-name ONTAPMediatorCA *
1 entry was deleted.

 peer1::> security certificate install -type server-ca -vserver peer1

Please enter Certificate: Press <Enter> when done
  ..<snip ONTAP Mediator CA public key>..

You should keep a copy of the CA-signed digital certificate for future reference.

The installed certificate's CA and serial number for reference:
CA: ONTAP Mediator CA
serial: 44786524464C5113D5EC966779D3002135EA4254

The certificate's generated name for reference: ONTAPMediatorCA

peer2::> security certificate delete -common-name ONTAPMediatorCA *
1 entry was deleted.

peer2::> security certificate install -type server-ca -vserver peer2

 Please enter Certificate: Press <Enter> when done
..<snip ONTAP Mediator CA public key>..


You should keep a copy of the CA-signed digital certificate for future reference.

The installed certificate's CA and serial number for reference:
CA: ONTAP Mediator CA
serial: 44786524464C5113D5EC966779D3002135EA4254

The certificate's generated name for reference: ONTAPMediatorCA

peer1::> snapmirror mediator add -mediator-address 172.31.49.237 -peer-cluster peer2 -username mediatoradmin

Notice: Enter the mediator password.

Enter the password:
Enter the password again:

Info: [Job: 43] 'mediator add' job queued

peer1::> job show -id 43
                            Owning
Job ID Name                 Vserver    Node           State
------ -------------------- ---------- -------------- ----------
43     mediator add         peer1      peer1-node2    Success
    Description: Creating a mediator entry

peer1::> snapmirror mediator show
Mediator Address Peer Cluster     Connection Status Quorum Status
---------------- ---------------- ----------------- -------------
172.31.49.237    peer2            connected         true

peer1::>