Skip to end of metadata
Go to start of metadata

In this Blog post I will give you an overview of how to update from BVQ version 5.3.x (or 5.2.x) to 5.4.x.

With BVQ version 5.4.x we are introducing the following new features:

  • BVQ local scanner replacing the old scanner infrastructure (already introduced in BVQ version 5.3.x but not mandatory yet)
  • BVQ scheduler is moved to the BVQ server
  • BVQ server maintenance mode replacing the old db-schema-migration

Because of this, the typical update path is a bit different to former updates.

5.3.x & 5.4.x comparison

BVQ modules comparison

up to BVQ 5.3.7since BVQ 5.4.1

(info) As you can see: BVQ DB schema, SVC scanner, VMware scanner & Scheduler are no longer available

Windows services comparison

BVQ 5.3.7BVQ 5.4.x

(info) Usage of multiple scanner instances led to a more inefficient usage of HW resources before BVQ version 5.4.x (in this example only 1 svc/vmware scanners are used).

How to update to BVQ version 5.4.x

(warning) Recommendation: Always use the same Windows user to perform the BVQ update!

StepDescription
1Download the 5.4.x Download package from the BVQ wiki - click BVQ 5.4 (5.4 & 5.4.1 are only available as family & friends release)
2

Perform the update as usual, except for the following steps:

  • For a proper BVQ installation the following modules are needed
    • BVQ MongoDB
    • BVQ GUI
    • BVQ Server
    (info) Alerter can be installed optionally if used.

  • Check settings (usernames, passwords, memory settings, etc.) carefully

  • Within the BVQ server installer select the BVQ Local Scanner:

    (info) Grafana can be installed optionally if used.

  • Depending on your environment, set the Java max heap size (in MiB) to at least 4096


    (info) If you are experiencing performance issues, increase this value

  • The BVQ local scanner heap size should be set to 1024

    (info) This sizing allows you to scan multiple systems depending on the size of scanned systems (up to 15 systems with 1024).
    If you are experiencing performance issues, increase this value.
3

After the package repository is finished you will be forwarded to the BVQ sever web UI.

(warning) Please use a supported web browser (Firefox, Chrome, Edge or Safari). Internet Explorer is not supported with the BVQ web UI!
(info)
Enable TCP Port 80 (HTTP) in the firewall to reach the BVQ web UI from your local workstation.

(info) It might take some time unitl the web UI is reachable. So maybe the page won't load at the first try.
Please reload the page until you will see the following web site

(info) BVQ server is in maintenance mode to perform Java version check, DB schema migration, Performance expiry settings & BVQ license check.
Use an admin account to log in.

4

(info) Java version check was completed successfully (see green check mark)

Now BVQ schema migration needs to be started

Click Start Migration

DB migration starts, depending on the BVQ version level and the size of your environment, this schema migration will take some time (up to several hours)

When the DB schema migration has finished, click Next

5

As we no longer support the old scheduler in BVQ version 5.4.x, you need to set up the performance expiry again.

In version 5.4.x this can be done in a more granular way.

Enter the required value (you can use the recommendations, values can be changed online afterwards)

First click Save to apply settings. Click Next afterwards to proceed.

6

(info) As the license check completed successfully, the maintenance mode will finish. The BVQ server will restart and forward to the default login page.

Setting up new scanner configurations

(info) With version 5.4.x the old scanner infrastructure is no longer supported. You need to create new configurations within the BVQ server web UI.

(info) You can find a detailed scanner migration guide here: BVQ - Scanner Migration guide

(warning) The new scanner no longer supports SSH keys for authenticating SSH users to SVC/Storwize/FlashSystem clusters for security reasons.
In case you are using SSH keys you have to change the authentication method to username + password prior the setup of new scanners

(warning) By default the scanner services & scheduler should be stopped during the update to version 5.4.x. Please check if the Windows services are stopped:

StepDescription
1

After logging into the web UI, navigate to the scanner section:

2

Within the scanner section setup the new scanners

Click + SVC or + VMWARE to set up a new scanner

3

Enter the needed information for the scanner

Example SVC:

Example VMware:

Click Save to apply scanner settings. Repeat for each SVC/Storwize/FlashSystem/VMware system in your environment.

(info) As before you can enter IP address or DNS name (fully qualified) in the Hostname / URL field

4

The scanner will start after the configuration is saved. Please check scanner overview for scan results

(info) Use buttons on the right to check scanner logs, pause, edit or delete a scanner

Clean up old BVQ modules

The following BVQ modules are no longer needed after the update:

  • bvq-db-schema-manager
  • bvq-scheduler
  • bvq-svc-scanner
  • bvq-vmware-scanner

Use the uninstaller files or Windows Programs and Features to uninstall the old BVQ modules.

The uninstaller files can be found in each module directory:

  • C:\Program Files\SVA\BVQ\bvq-db-schema-manager\uninstall.exe
  • C:\Program Files\SVA\BVQ\bvq-scheduler\uninstall.exe
  • C:\Program Files\SVA\BVQ\bvq-svc-scanner\uninstall.exe
  • C:\Program Files\SVA\BVQ\bvq-vmware-scanner\uninstall.exe

(Depending on your installation, the partition path may vary)

(info) Select all check boxes within the uninstaller to remove the old BVQ modules completely.

Afterwards your BVQ directory within the file explorer should look like this:

Further information

  • For future updates the scanner configurations will remain. Please check the scanner status after a successful update.
  • In BVQ version 5.5.x we will introduce a new alerting, therefor the old alerting will be moved to the BVQ server, too. So you will only have 3 different BVQ modules with version 5.5.x (MongoDB, GUI & Server)
  • Using HTTPS for the BVQ server: The operation of a reverse proxy providing certificate and HTTPS connection to the user is possible. (Connection between BVQ Server - Reverse proxy still HTTP)

 

(info) If you have questions regarding the update or need further support, please contact the BVQ Team (bvq@sva.de).

 

 

  • No labels