Upgrading TLC

Prior to upgrading Tripwire Log Center (TLC), complete the installation requirements (see Upgrade Requirements for TLC).

To upgrade from version 7.1.x or 7.2.x to this version of TLC, complete the steps below.

Note 

If you have an older version of TLC, contact Tripwire Technical Support for assistance with your upgrade.

Step 1. Collect Needed Information for Upgrade

In this Step, you will gather information needed to complete the upgrade process.

To begin, you will determine if your existing TLC installation has login credentials for authentication with:

a proxy server and/or

an SMTP server for email distribution of Report Task output.

If so, you should make a note of these user accounts. Since the upgrade process over-writes these credentials, you will need to re-enter them following the upgrade.

In your TLC Console:

1. From the menu bar, select Options > Settings.
2. In the side bar of the Settings dialog, click User Settings.
3. In the Email group, make a note of the SMTP Authentication user account (if any).
4. In the Proxy Server group, make a note of the user account (if any).

To determine 1) your TLC serial number, and 2) the user account for the TLC Manager service:

1. On the TLC Manager host system, select Start > Programs > Tripwire Log Center > Manager.
2. From the menu bar, select Help > About.
3. In the About Tripwire Log Center Manager dialog, locate and note your TLC serial number, and then close this dialog.
4. In the side bar of the TLC Manager Interface, select Service Settings.
5. In the Service Settings page, make a note of the login credentials for the TLC Manager service user account.

Step 2. Install Tripwire Log Center Manager on the Primary Manager

To upgrade your TLC Manager software on the Primary Manager host:

1. In the directory in which you unzipped the TLC installation package, double-click Tripwire Log Center Manager.exe.

The TLC Manager Installation Wizard opens.

2. Read the Welcome page and click Next.
3. In the License Agreement page:
a. Read the License Agreement.
b. Select I accept the terms in the license agreement and click Next.
4. Complete the Customer Information page and click Next.
5. In the Destination Folder page, click Next.
6. If your database software is PostgreSQL, complete the following steps:
a. In the PostgreSQL Database page, click Next.
b. In the Password field, enter the password for your PostgreSQL superuser and click Next.
c. Upon completion of the database-backup process, click OK in the confirmation dialog.
7. In the Ready to Install the Program page, click Install.
8. Following the upgrade of TLC Manager, a confirmation page opens. Click Finish.

The TLC Manager Configuration Wizard opens.

Note 

If the Configuration Wizard does not open automatically, you can launch it by selecting:

Start > All Programs > Tripwire Log Center > Configuration Wizard

Step 3. Run the TLC Manager Configuration Wizard on the Primary Manager

On the Primary Manager host, complete the TLC Manager Configuration Wizard:

1. In the first wizard page, select Click to Start.
2. Click Upgrade Existing Installation.
3. In the Upgrade Tripwire Log Center page, click Start Upgrade.
4. In the Manager Service Credentials page, specify the Windows user account that will run the TLC Manager Service.

Caution 

Following installation, you may change this user account. For instructions, see the documentation for the TLC Manager’s Windows operating system.

If you plan to collect Windows Event Logs from a Windows system with the WinLog Collector, this is the Windows user account you configured to run the TLC Manager service (see Appendix I. Configuring a Windows User Account for the WinLog Collector).

To use a local Windows user account, select The local Windows System user account and click Next.

To use a domain user account:

a. Select Domain user account. (If you installed Microsoft SQL Server in Windows Authentication mode as your Event-Management Database software, select the domain account created in Step 3. Creating a Microsoft SQL Server Login.)
b. Enter the domain and the name of the account (<domain>\<account>).
c. Enter and confirm the account's Password.
d. Click Apply Settings and Next.
5. The Available Upgrades page presents the TLC features on the Manager that may be upgraded. Select the check box for each type of feature to be upgraded and Next.

Note 

If your existing version of TLC is not installed in the default directory, the installer may ask you to specify the installation directory.
6. If your TLC environment includes any enabled Script Actions, the installer presents the Script Actions page. Read the text and click Next.
7. If your TLC environment includes any Custom Commands with an output value of "DOS Command," the installer presents the Custom Commands page. Read the text and click Next.
8. In the Perform Upgrade page, click Start.
9. Upon completion of the upgrade, click Next.
10. Select the Start Tripwire Log Center Manager on Exit check box and click Exit.

The Tripwire Log Center (TLC) Manager opens.

11. In the TLC Manager, click Start to start the Tripwire Log Center Manager service.
12. If any Agents are connected to this Manager, update them to the most recent version. For more information, see Upgrading the Agent.

Note 

To support connections with Tripwire Agents 2.4 and earlier, the TLC Manager Configuration Wizard enables Transport Layer Security (TLS) protocol 1.0 on the Bridge. For more information about the Bridge, see Choosing an Authentication Method for Agents.

Step 4. Install and Configure Tripwire Log Center Manager on Secondary Managers

To upgrade your TLC Manager software on each of your Secondary Managers, complete the following steps on each Manager host system:

1. In the directory in which you unzipped the TLC installation package, double-click Tripwire Log Center Manager.exe.

The TLC Manager Installation Wizard opens.

2. Read the Welcome page and click Next.
3. In the License Agreement page:
a. Read the License Agreement.
b. Select I accept the terms in the license agreement and click Next.
4. Complete the Customer Information page and click Next.
5. In the Destination Folder page, click Next.
6. In the Ready to Install the Program page, click Install.
7. Following the upgrade of TLC Manager, a confirmation page opens. Click Finish.

The TLC Manager Configuration Wizard opens.

Tip 

If the Configuration Wizard does not open automatically, you can launch it by selecting:

Start > All Programs > Tripwire Log Center > Configuration Wizard

8. Complete the Configuration Wizard. For guidance, see Step 3. Run the TLC Manager Configuration Wizard on the Primary Manager.
9. Select Start > Programs > Tripwire > Tripwire Log Center Manager.

The Tripwire Log Center (TLC) Manager opens.

10. In the TLC Manager, click Start to start the Tripwire Log Center Manager service.
11. If any Agents are connected to this Manager, update them to the most recent version. For more information, see Upgrading the Agent.

Step 5. Upgrade Tripwire Log Center Console Software

On each TLC Console system, complete the following steps to upgrade the TLC Console software:

1. If needed, download the installation package from the Tripwire Customer Center:

https://tripwireinc.force.com/customers

2. Unzip the files to any available folder.
3. In the folder, double-click Tripwire Log Center Console.exe.
4. Complete the installation wizard and click Finish.

Tips 

If you made a note of a user account for SMTP or proxy server authentication in Step 1. Collect Needed Information for Upgrade , re-open the Settings dialog and re-enter these credentials.

Following your upgrade, you should download and import the latest Tripwire-defined content (e.g., Normalization Rules, Correlation Rules, etc.) from the Tripwire Web site. For instructions, see Updating TLC with the Latest Tripwire Content.

Step 6. Configure your Agents

To upgrade existing Agents, complete the steps in Upgrading the Agent.

To install new Agents, complete the steps in Installing the Agent Using a Pre-Shared Key.

Step 7. Re-enter your RADIUS Settings

If you use a RADIUS server for user authentication, and the Federal Information Processing Standards (FIPS) are enabled on a Manager host system, the upgrade process will disable your RADIUS server settings.

To re-enable RADIUS for a Manager:

1. In the TLC Console, open the Manager's properties dialog.
2. In the Authentication tab, re-enter the RADIUS settings and click OK.

For further details, see Working with Managers.