Upgrade Symantec Validation and ID Protection (VIP) Gateway

The following step-by-step guide will take you through upgrading an existing VIP gateway installation to the latest release.

In this guide I will show the steps I taken for upgrading a 9.4 installation to 9.7. VIP Enterprise Gateway 9.7 brings a few new features over 9.4 which can be found in more detail at – https://knowledge.symantec.com/support/mpki-for-ssl-support/index?page=content&id=INFO2772&actp=RSS&viewlocale=en_US

Prerequisites

• VIP Management portal access – https://manager.vip.symantec.com/vipmgr
  • To download VIP gateway software packages
  • To download VIP SSL certificate
• VMware permissions to take a snapshot of the VM (optional)

Step-by-step guide

1. Take a snapshot of the VM before you begin
2. RDP to the server and go to http://localhost:8232/vipegconsole/login.action
3. Backup configuration

   

4. Download the config backup locally to the server

   

5. Uninstall old version of the Enterprise Gateway
6. Downlod & install new version from VIP manager portal
   1. Entering local account details

      

7. Download VIP certificate from VIP manager portal
8. Login to the VIP console via –  http://localhost:8232/vipegconsole/login.action with the AdminVIP credentials set earlier
9. Import the previously downloaded VIP certificate
   
10. Import the exported configuration back
    1. Edit “E:\Program Files (x86)\Symantec\VIP_Enterprise_Gateway\conf\exportimport.properties” by changing the value from “false” to “true” for “cross.version.import”
       

       

    2. Restart VIP GW by executing the following in PowerShell –  “Restart-Service vipegserver”
    3. Import the exported config ZIP archive (that was exported at the beginning) overwriting current configs

       

11. Import the certificate

    

Final Check

1. Start the following services:
   • LDAP Directory Synchronization
   • RADIUS Validation Server
2. For the Self Service Portal IdP make sure you go to Edit > select HTTPS under “Protocol” and then select the appropriate SSL certificate
3. For VIP Manager IdP Configuration  make sure you go to Edit > select HTTPS under “Protocol” and then select the appropriate SSL certificate

Once all the services have been configured and up and running – it should look something like this: