You must upgrade Cryptographic Security Platform Compliance Manager before upgrading Cryptographic Security Platform Vault. The following versions are supported:  10.4.7

You can upgrade CSP Compliance Manager from any node in the cluster using the CSP Appliance Management webGUI. The upgrade is automatically applied to all nodes in the cluster sequentially. Any new features in CSP Compliance Manager will not be available until all nodes in the cluster have been upgraded.

In 10.5.1, Compliance Manager now has a Default tenant that is used to connect to the Discovery and KeySafe5 appliances.  These applications are single-tenant only, and therefore require one single tenant in the CSP Compliance Manager to associate with.  Depending on the number of tenants that you have before you upgrade, the following behavior will occur: 

• If you have only one tenant, that tenant will become the Default tenant. 
• If you have more than one tenant, then the most recently created tenant will by default become your Default tenant. 
  If you want to use a different tenant as your Default, you can change this after the upgrade. For more information, see Changing the Default Tenant.