Upgrade Requirements for TLC

Before upgrading Tripwire LogCenter (TLC):

1.

Verify that your Primary ManagerEach TLC environmentConsists of all TLC software, Managers, Log Sources, Monitored Assets, Collectors, and data in your TLC installation. has a single Primary Manager that controls: 1. The storing of log messages in the Audit LoggerThe TLC Console1. Tripwire LogCenter Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire LogCenter GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. component in which you can work with the log messages collected by TLC. File Store and Events in Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source.-Management Databases, 2. The configuration settings for your TLC environment, and 3. User access and license management for TLC. and Secondary Managers comply with the platform and system requirements for this version of TLC ManagerTripwire LogCenter Manager is the core software in your TLC environment. TLC Manager collects and processes log messages from a wide variety of systems and devices.:

https://www.tripwire.com/products/tripwire-log-center/system-requirements/

Caution	Since TLC is a high-performance product, the systems in your TLC environment must comply with all installation requirements.

2.

On each of your Manager systems, verify that recovery is disabled for the Tripwire LogCenter Manager service. To do so, open the Services Manager, double-click the Tripwire Log Center Manager service, and select the Recovery tab in the service properties dialog. In the Recovery tab, each Failure drop-down should be set to Take No ActionA TLC object that initiates a response to Correlated Events created by Correlation Rules..

3.

To determine if your Manager and Console host systems are compliant with Federal Information Processing Standards (FIPS), see:

https://support.microsoft.com/en-us/kb/811833

If a host system is compliant with FIPS, then Transport Layer Security (TLS) is not required. Otherwise, you must ensure that TLS 1.1 and TLS 1.2 are not disabled on the system (see Verifying Transport Layer Security (TLS)).

4.

Locate the purchase-confirmation e-mail from Tripwire. This e-mail includes your serial number and a direct link to the TLC installation package. (If you cannot find this e-mail, contact your Tripwire customer service representative.)

5.

To protect your TLC implementation from data loss or corruption, back up your data by:

a.

Creating a copy of your TLC Manager installation directory and verifying that the back-up directory contains a copy of your Audit Logger File StoreConsists of a series of compressed flat files containing the log messages collected by the Manager from Log Sources, and an index of terms contained in the log messages..

b.

Creating a copy of your Event-Management Databases.

For further assistance, contact Tripwire Technical Support.

6.

Confirm that each of your Manager host systems has Internet access.

If a Manager host system does not have Internet access:

a.

Ask your Tripwire customer service representative for a license key.

b.

Confirm that .NET Framework 4 is installed on the Manager host system.

7.

If 1) you plan to collect log messages from an Oracle server with the Oracle Database CollectorA type of CollectorA TLC module that gathers or receives log messages from Log Sources. that gathers log messages from Oracle database audit logs., and 2) Oracle Advanced Security is enabled on the Oracle server, install the Oracle Client Library on the host system of the Manager on which the Oracle Database CollectorA type of Collector that gathers log messages from an application that logs to an External Database. is (or will be) installed. For further instructions, see your Oracle Client Library documentation.

8.

If your TLC environment includes any Script Actions that use executable files stored on a Secondary ManagerYour TLC environment may also include one or more Secondary Managers that may be configured to either: 1. Store log messages (as with a Primary Manager), or 2. Forward log messages to another Manager., move these files to the Scripts directory on your Primary Manager. By default, this path is:

Program Files\Tripwire\Tripwire LogCenter Manager\Scripts

For more information about Script Actions, see What are Actions?.

9.

Download the TLC installation package from the Tripwire Customer Center:

https://tripwireinc.force.com/customers

10.

Unzip the contents of the TLC installation package to any available directory.