Thycotic Secret Server Upgrade Process Document Example

1. Backup application folder manually through TSS Web Gui. Application backup folder :D:/backup/secretserver

On main site TSS server and DR site TSS server

Completed

2. Take DBs Database Backup

On both main site and DR site DBs

3. Take Snapshot of all servers

On all servers listing in the scope

4. Application folder backup to ’s VDI machine

On all TSS servers

Completed

1. Download .Net and save it to local folder on SS’s temp folder c:/temp/upgrade

On all servers except DB servers

Completed

2. Install .Net Framework 4.8 and related security patches

/ 

On all servers except DB servers

3. Restart Servers

/ 

On all servers except DB servers

1. TSS Version verification

All three servers verified. Version is “10.8.000000 - Platinum Edition”

Completed

2. DE Version verification

All DE server verified. Version is: 10.8.000000

Completed

3. Database version verification

On both sites’ DB: 14.0.3281.6 

Completed

4. Check Collation value: SQL_Latin1_General_CP1_CL_AS 

On both sites’ DB servers

Completed

5. For Secret Server folder permission, add “Everyone” and provide full control for the folder. Modify permission from full control to just modified after upgrade activity.

On all TSS servers 

Optional until issue happened

6. ASP.net?.NET trust level should be full in both levels (Server and Secret Server)

On all TSS servers

Optional until issue happened

7. IIS?Request Filtering (Server and SecretServer), check the first three options at both levels (Server and SecretServer)

On all TSS servers

Optional until issue happened

8. Minimum requirement check: https://docs.thycotic.com/ss/11.0.0/secret-server-setup/system-requirements/index.md

On All TSS servers

Completed

9. No Microsoft Monitor Agent

On All TSS related servers.

Completed

1. Thycotic Support Availability

Brian from Thycotic will support us on Sep 15 from 7pm

Completed

2. CAB 

3. Copy your own admin password from Thycotic Secret Server which will be used later during upgrading.

, , , , 

4. Turn off alerts from monitoring system

1. Confirm all pre-requisites completed

2. Download latest 11.0.000007 version Application files (Not Installation EXE File) 

Completed

3. Stop SS Application Pool in IIS

4. DBA run Upgrade script which was provided by Thycotic. Please see DB upgrade process steps.

5. Extract downloaded zip application file to a temporary location C:/temp

6. Extract the ss_update.zip file

7. Create a zip file of existing SS application folder and send it to the desktop. (Another backup)

8. Ctrl+a select all files in step 6. Copy and paste the contents contained in the newly extracted ss_update folder to SS’s application folder over the top of the existing application files. Replace all files with the same name.

9. Once completed, start the SS application pool

10. Open an administrative command prompt and perform an “iisreset” command

1. Open SQL Management Studio and connect to the SQL Server database engine that hosts the Secret Server database

2. Expand Databases on the right

3. Right-click on the Secret Server database and select New Query. Paste the script.

4. Confirm there is no error on the query. If so, uncomment “COMMIT TRAN”.

5. Click the Execute button, Ctrl+E, or hit F5

6. Close SSMS

1. Confirm Primary SS Server upgraded and works. 

2. Download latest 11.0.000007 version Application files (Not Installation EXE File) 

Completed

3. Stop SS Application Pool in IIS

4. Extract downloaded zip application file to a temporary location C:/temp

5. Extract the ss_update.zip file

6. Create a zip file of existing SS application folder and send it to the desktop. (Another backup)

7. Ctrl+a select all files in step 6. Copy and paste the contents contained in the newly extracted ss_update folder to SS’s application folder over the top of the existing application files. Replace all files with the same name.

8. Once completed, start the SS application pool

9. Open an administrative command prompt and perform an iisreset command

1. Confirm all pre-requisites completed

2. Download latest 11.0.000007 version Application files (Not Installation EXE File) 

Completed

3. Stop SS Application Pool in IIS

4. DBA run Upgrade script which was provided by Thycotic. Please see DB upgrade process steps.

(Optional, decided by )

5. Extract downloaded zip application file to a temporary location C:/temp

6. Extract the ss_update.zip file

7. Create a zip file of existing SS application folder and send it to the desktop. (Another backup)

8. Ctrl+a select all files in step 6. Copy and paste the contents contained in the newly extracted ss_update folder to SS’s application folder over the top of the existing application files. Replace all files with the same name.

9. Once completed, start the SS application pool

10. Open an administrative command prompt and perform an iisreset command

1. Confirm main SS upgrade works

2. Stop DR SS application pool in IIS

3. Copy Web application folder from primary SS in main site to DR SS server, without database.config and encryption.config. Replace the content of the existing web application folder with the new. 

4. Confirm there is no error on the query. If so, uncomment “COMMIT TRAN”.

5. Once completed, start the SS application pool

6. Do verification

1. Log into Secret Server. Check the version of Secret Server in the application files by visiting https://<server host name>/SecreteServer

2. Check the database 

3. Check system and DE health

4. Test RDP/SSH from SS web browser protocol handler

/  /  / 

5. Testing customized launcher

6. Test Connection Manager

/  /  / 

7. Check system logs

8. Check DR Server

9. Check DE version

10. Check Recording 

/ 

11. Privilege Manager Authentication Testing

/ 

1. Web Password handler upgrade. Current configuration disabled auto-upgrade.

TBD

2. Remove VM Snapshots

3. DE Upgrade

4. Protocol handler upgrade