Upgrading to Data Security 7.6.0 > Upgrading Data Security Management Server

Upgrading Data Security Management Server

Applies to

Data Security v7.1, v7.5, v7.6

Web Security Gateway Anywhere v7.5, v7.6

In this topic

Overview

Upgrade in place

Upgrade to another machine

Overview

Complete these instructions to upgrade a Data Security Management Server from version 7.1 or 7.5 to 7.6.0. Unless otherwise noted, all instructions apply to both version 7.1 and 7.5 Data Security Management Server.

For information on how to upgrade to v7.6.3, refer to Upgrading Websense software to the latest v7.6.x.

You can either upgrade Data Security Management Server "in place," i.e., it is upgraded to version 7.6 on its current machine, or you can upgrade it to another machine (for example, from a Windows Server 2003 machine to a Window Server 2008 R2 machine). There is a procedure below for each case:

Upgrade in place

Upgrade to another machine

In version 7.6, Data Security Management Server is part of the TRITON management server. These instructions will refer to TRITON management server in place of Data Security Management Server when discussing version 7.6. Additionally, Data Security 7.6 uses Microsoft SQL Server instead of Oracle Database for data storage.

Note that the upgrade process can take a long time because large amounts of data may need to be copied. You can reduce this time by relocating the forensics repository (steps for doing this are included in the procedure below). See Forensics Repository for more information.

Upgrade in place

1.	Make sure your current Data Security (Suite) deployment has hotfixes applied for its version as follows:

Update Data Security Suite 7.1.0 - 7.1.4 to 7.1.5. Versions 7.1.5 or higher can be upgraded directly to 7.6.

Update Data Security 7.5.x to 7.5.9 prior to upgrade to 7.6.

See How to get the latest Data Security Suite hotfixes for more information.

2.	Check the System Health screen to make sure your system is functioning properly. If you suspect it is not, please contact Websense Technical Support before proceeding.

3.	Perform a full backup of the machine.

See 7.5 TRITON - Data Security Help or 7.1 DSS Manager Help for more information on backing up Data Security data.

4.	If you are upgrading from version 7.1, export system modules to PDF.

In DSS Manager, select Configuration > System Modules and then click the PDF icon.

5.	Relocate forensics data.

Note  If your forensics repository is large (more than approximately 3 GB) upgrading Data Security can take a very long time. It is strongly recommended you relocate forensics data prior to using the upgrade export tool and then copy the data back to the appropriate location after upgrading. It is a best practice to relocate forensics a day prior to upgrading Data Security to allow sufficient time to complete this task.

Warning  If you have archived partitions, you must relocate forensics prior to using the upgrade export tool. Otherwise, the archived partitions will not be available in the upgraded system.

If you are upgrading from version 7.5:

Note: in the following steps, the Websense folder is typically C:\Program Files\Websense.

a.	Stop the DSS watchdog service:

i.	Select Start > Programs > Accessories > Scheduled tasks.

ii.	Right-click DSS Watchdog and select Properties.

iii.	De-select Enabled.

iv.

Click OK.

b.	In the Windows Services console, stop the Websense DSS Manager service.

Alternatively, issue the command net stop tomcat6 in a Command Prompt.

c.	Rename Websense\Data Security\forensics_repository\data to Websense\Data Security\forensics_repository\oldData

d.	Create a new folder named Websense\Data Security\forensics_repository\data

e.	Create a new folder named Websense\Data Security\archive_mng\oldStorage

f.	Move all folders starting with FR-ARC- from Websense\Data Security\archive_mng\storage to Websense\Data Security\archive_mng\oldStorage

g.	In the Windows Services console, start the Websense DSS Manager service.

Alternatively, issue the command net start tomcat6 in a Command Prompt.

h.	Move or copy the following folder to a location outside the Websense folder: Websense\Data Security\forensics_repository\oldData

i.	Search the oldData folder for files with the name *.ser and delete those files.

j.	Move or copy all folders starting with FR-ARC- from Websense\Data Security\archive_mng\oldStorage to a location outside the Websense folder

If you are upgrading from version 7.1:

Note: in the following steps, the Websense folder is typically
C:\Program Files\Websense.

k.	In the Windows Services console, stop the Websense DSS Manager service.

Alternatively, issue the command net stop tomcat6 in a Command Prompt.

l.	Rename Websense\Data Security Suite\Archive to Websense\Data Security Suite\oldArchive

m.	Create a new folder named Websense\Data Security Suite\Archive.

n.	Share the Archive folder, and give the 'change' and 'write' permissions to both the DSS user and the currently logged-in user (the user that will run the script).

o.	In the Windows Services console, start the Websense DSS Manager service.

Alternatively, issue the command net start tomcat6 in a Command Prompt.

p.	Move or copy Websense\Data Security Suite\oldArchive to a location outside the Websense folder

6.	Obtain the upgrade export tool zip package and extract it.

Download WebsenseDataSecurityUpgradeExportTool.zip from www.mywebsense.com.

7.	Copy the upgrade_export_tool folder to a temporary folder on the Data Security Management Server (this folder is referred to as the export tool folder in the rest of these instructions).

Copy to a location outside the Websense folder (typically, C:\Program Files\Websense) for example C:\temp\upgrade_export_tool.

8.	Run the export script:

Important  Data Security Suite 7.1 will not be operational after running the export script. Data Security 7.5 will continue to operate, but new data generated after running the export tool will not be imported to Data Security 7.6.

Note  Prior to running the export script, see Estimating export data size to estimate the amount of data that will be generated.

a.	Open a Command Prompt.

b.	From the export tool folder, enter the following command:

python export.py

Note the above command generates export data in %dss_home%/archive_mng/export-data. You can specify a different location by specifying a path in the command:

python export.py <path>

where <path> is local; it cannot be a network path or a location on a mapped network drive. If you specify <path>, substitute it for %dss_home%/archive/mng/export-data in the remaining steps below.

c.	Wait for the script to complete.

Depending on the amount of data, this process may take a long time.

 

Important  If the script fails during an upgrade from v7.1, do not run it again (running it again may corrupt the data). Contact Websense Technical Support before proceeding.

9.	Check the following files for any errors:

dbexport.log (in export tool folder you created in Step 7, for example C:\temp\upgrade_export_tool)

db.log (in export tool folder you created in Step 7, for example C:\temp\upgrade_export_tool)

%dss_home%/archive/mng/export-data/DataExport.log

If you find errors, contact Websense Technical Support.

10.	If you provided an alternate path in step 7b, skip to step 10. Otherwise, move the data exported by the export script to a location outside the Websense folder.

The exported data is located in %dss_home%/archive_mng/export-data. Move the entire export-data folder to a location outside the Websense folder (typically, C:\Program Files\Websense).

Note the export-data folder should contain the following. If it does not and you're upgrading from v7.5, try running the script again. If it does not and you're upgrading from v7.1, contact Websense Technical Support.

When upgrading from 7.1 or 7.5:

Certs (folder)

DSS_FILES (folder)

Forensics_repository (folder)

OldPolicyXMLs (folder)

Onlinetables (folder)

Partitiontables (folder)

Backup.txt (this file is required when restoring data to the upgraded system)

Dataexport.log

When upgrading from 7.5 the following are also present (in addition to those above):

Crawlers (folder)

Policies_backup (folder)

PreciseID_DB (folder)

RunCommands (folder; only present if you had remediation script resources)

Ep-profile-keys.zip

Subscription.xml

Wbsn-pairing-map.txt

11.	Perform the actions appropriate to your machine, as described in Preparing for Installation.

12.	Download and launch the version 7.6 Websense installer (Websense installer).

A progress dialog box appears, as files are extracted:

13.	When the following message appears, click OK:

An older version of Data Security is installed on this machine. Press OK to upgrade it or Cancel to exit the installation.

The Installer Dashboard appears.

14.	TRITON Infrastructure Setup starts. Complete the TRITON Infrastructure Setup wizard. See Installing TRITON Infrastructure for instructions. Return to this procedure when done.

TRITON Infrastructure is required for TRITON Unified Security Center. In version 7.6, all management interfaces (i.e., TRITON - Web Security, - Data Security, and - Email Security) are modules of the TRITON Unified Security Center. TRITON Unified Security Center will be installed on this machine and v7.5 TRITON - Data Security upgraded to be its Data Security module.

15.	The following message appears. Click OK to proceed (Important: do this only if you have already run the export tool. If you have not, cancel the installation and see Step 6).

Before installing this version of Data Security, the existing version will be removed. Please make sure that the export-tool of this version has been successfully executed on this machine. Click OK to remove the existing version of Data Security, or Cancel to exit.

The prior-version Data Security components are first removed and then replaced with current versions. The prior-version Data Security Installation Wizard is launched. This is used to remove components.

Note that the Installer Dashboard remains on-screen, behind the prior-version installer.

16.	Click Next in the prior-version installer to begin removing components.

Components are removed.

17.	When the wizard notifies you that Data Security has been successfully installed, click Finish

Note the screen mentions installation success, but this simply means the Data Security Installation Wizard has completed its task successfully, which in this case is removing components.

18.	You are returned to the Installer Dashboard and the Websense Data Security Installer appears.

This is the current-version installer that will install version 7.6 Data Security components.

19.	Install version 7.6 Data Security components. Be sure to select the same components for installation as were previously on this machine. You can install additional components as well.

See Installing Data Security Components for instructions. Important: When following these instructions, be sure to import the data exported when you ran the export script (in Step 6) on the Import Data From Previous Version screen.

20.	If you relocated forensics data prior to upgrade (Step 5):

Upgraded from version 7.5:

a.	Copy the contents of oldData (from the location outside the Websense folder) to Websense\Data Security\forensics_repository\data (note: copy the contents and not the folder itself).

b.	Copy all content moved from Websense\Data Security\archive_mng\oldStorage (step Windows Step j) to Websense\Data Security\archive_mng\storage

Upgraded from version 7.1:

Copy the contents of oldArchive (from the location outside the Websense folder) to Websense\Data Security\forensics_repository (note: copy the contents and not the folder itself).

21.	Oracle is no longer used by Data Security in version 7.6. To conserve system resources, it is a best practice to disable the Oracle service.

To disable Oracle, in the Windows Services console, disable the OracleServiceMng service. Note that this disables the service but does not remove any old data. Disabling Oracle is optional.

Upgrade to another machine

The following process is different from a fresh install; it describes how to migrate incidents, reports, and more from your existing system to the new one.

1.	Make sure your current Data Security (Suite) deployment has hotfixes applied for its version as follows:

Update Data Security Suite 7.1.0 - 7.1.4 to 7.1.5. Versions 7.1.5 or higher can be upgraded directly to 7.6.

Update Data Security 7.5.x to 7.5.9 prior to upgrade to 7.6.

See How to get the latest Data Security Suite hotfixes for more information.

2.	Check the System Health screen to make sure your system is functioning properly. If you suspect it is not, please contact Websense Technical Support before proceeding.

3.	Perform a full backup of the machine.

See 7.5 TRITON - Data Security Help or 7.1 DSS Manager Help for more information on backing up Data Security data.

4.	If you are upgrading from version 7.1, export system modules to PDF.

In DSS Manager, select Configuration > System Modules and then click the PDF icon.

5.	Relocate forensics data.

Note  If your forensics repository is large (more than approximately 3 GB) upgrading Data Security can take a very long time. It is strongly recommended you relocate forensics data prior to using the upgrade export tool and then copy the data back to the appropriate location after upgrading. It is a best practice to relocate forensics a day prior to upgrading Data Security to allow sufficient time to complete this task.

Warning  If you have archived partitions, you must relocate forensics prior to using the upgrade export tool. Otherwise, the archived partitions will not be available in the upgraded system.

If you are upgrading from version 7.5:

Note: in the following steps, the Websense folder is typically C:\Program Files\Websense.

a.	Stop the DSS watchdog service:

v.	Select Start > Programs > Accessories > Scheduled tasks.

vi.	Right-click DSS Watchdog and select Properties.

vii.	De-select Enabled.

viii.

Click OK.

b.	In the Windows Services console, stop the Websense DSS Manager service.

Alternatively, issue the command net stop tomcat6 in a Command Prompt.

c.	Rename Websense\Data Security\forensics_repository\data to Websense\Data Security\forensics_repository\oldData

d.	Create a new folder named Websense\Data Security\forensics_repository\data

e.	Create a new folder named Websense\Data Security\archive_mng\oldStorage

f.	Move all folders starting with FR-ARC- from Websense\Data Security\archive_mng\storage to Websense\Data Security\archive_mng\oldStorage

g.	In the Windows Services console, start the Websense DSS Manager service.

Alternatively, issue the command net start tomcat6 in a Command Prompt.

h.	Move or copy the following folder to a location outside the Websense folder: Websense\Data Security\forensics_repository\oldData

i.	Search the oldData folder for files with the name *.ser and delete those files.

j.	Move or copy all folders starting with FR-ARC- from Websense\Data Security\archive_mng\oldStorage to a location outside the Websense folder

If you are upgrading from version 7.1:

Note: in the following steps, the Websense folder is typically
C:\Program Files\Websense.

k.	Stop the DSS watchdog service:

ix.	Select Start > Programs > Accessories > Scheduled tasks.

x.	Right-click DSS Watchdog and select Properties.

xi.	De-select Enabled.

xii.

Click OK.

l.	In the Windows Services console, stop the Websense DSS Manager service.

Alternatively, issue the command net stop tomcat6 in a Command Prompt.

m.	Rename Websense\Data Security Suite\Archive to Websense\Data Security Suite\oldArchive

n.	Create a new folder named Websense\Data Security Suite\Archive

o.	Share the Archive folder, and give the 'change' and 'write' permissions to both the DSS user and the currently logged-in user (the user that will run the script).

p.	In the Windows Services console, start the Websense DSS Manager service.

Alternatively, issue the command net start tomcat6 in a Command Prompt.

q.	Move or copy Websense\Data Security Suite\oldArchive to a location outside the Websense folder

6.	Obtain the upgrade export tool zip package and extract it.

Download WebsenseDataSecurityUpgradeExportTool.zip from www.mywebsense.com.

7.	Copy the upgrade_export_tool folder to a temporary folder on the Data Security Management Server (this folder is referred to as the export tool folder in the rest of these instructions).

Copy to a location outside the Websense folder (typically, C:\Program Files\Websense) for example C:\temp\upgrade_export_tool.

8.	Run the export script:

Important  Data Security Suite 7.1 will not be operational after running the export script. Data Security 7.5 will continue to operate, but new data generated after running the export tool will not be imported to Data Security 7.6.

Note  Prior to running the export script, see Estimating export data size to estimate the amount of data that will be generated.

a.	Open a Command Prompt.

b.	From the export tool folder, enter the following command:

python export.py

Note the above command generates export data in %dss_home%/archive_mng/export-data. You can specify a different location by specifying a path in the command:

python export.py <path>

where <path> is local; it cannot be a network path or a location on a mapped network drive. If you specify <path>, substitute it for %dss_home%/archive/mng/export-data in the remaining steps below.

c.	Wait for the script to complete.

Depending on the amount of data, this process may take a long time.

 

Important  If the script fails during an upgrade from v7.1, do not run it again (running it again may corrupt the data). Contact Websense Technical Support before proceeding.

9.	Check the following files for any errors:

dbexport.log (in export tool folder you created in Step 7, for example C:\temp\upgrade_export_tool)

db.log (in export tool folder you created in Step 7, for example C:\temp\upgrade_export_tool)

%dss_home%/archive/mng/export-data/DataExport.log

If you find errors, contact Websense Technical Support.

10.	If you provided an alternate path in step 8b, skip to step 10. Otherwise, move the data exported by the export script to the target machine (i.e., the one to which you want to upgrade Data Security Management Server).

The exported data is located in %dss_home%/archive_mng/export-data.

Note the export-data folder should contain the following (if it does not, try running the export script again; see Step 8).

When upgrading from 7.1 or 7.5:

Certs (folder)

DSS_FILES (folder)

Forensics_repository (folder)

OldPolicyXMLs (folder)

Onlinetables (folder)

Partitiontables (folder)

Backup.txt (this file is required when restoring data to the upgraded system)

Dataexport.log

When upgrading from 7.5 the following are also present (in addition to those above):

Crawlers (folder)

Policies_backup (folder)

PreciseID_DB (folder)

RunCommands (folder; only present if you had remediation script resources)

Ep-profile-keys.zip

Subscription.xml

Wbsn-pairing-map.txt

11.	On the target machine (i.e., the one to which you want to upgrade Data Security Management Server), follow the procedures to create a TRITON management server as directed in Creating a TRITON Management Server. Important: when following those procedures, do the following:

a.	When you reach the Installation Type screen of the Websense installer, be sure to select Data Security (under TRITON Unified Security Center). Note that you can install the other modules if you want, but TRITON - Data Security is the only one necessary for a Data Security deployment.

b.	When the Data Security installer appears, on the Import Data From Previous Version screen, select the Load Data From Backup check box and then use the Browse button to select the location of the data exported by the export script.

12.	Log on to the version 7.6 TRITON Unified Security Center (on the TRITON management server you just created):

a.	Verify system settings, configuration, and modules.

b.	Click Deploy.

Note that at this point the system is functional. However, if you relocated forensics data prior to upgrade, it is not present yet. You will restore this data in the next step.

13.	If you relocated forensics data prior to upgrade (Step 5):

Upgraded from version 7.5:

a.	Copy the contents of oldData (from the location outside the Websense folder, on the old machine) to Websense\Data Security\forensics_repository\data on this machine (note: copy the contents and not the folder itself).

b.	Copy all content moved from Websense\Data Security\archive_mng\oldStorage on the old machine (step Windows Step j) to Websense\Data Security\archive_mng\storage on this machine

Upgraded from version 7.1:

Copy the contents of oldArchive (from the location outside the Websense folder, on the old machine) to Websense\Data Security\forensics_repository on this machine (note: copy the contents and not the folder itself).

Upgrading to Data Security 7.6.0 > Upgrading Data Security Management Server