Policy Agent Upgrade Requirements

The supported upgrade paths for the Policy Agent are:

Initial Release

Available Upgrade Paths

1.x through 3.2.x

Any release up to and including 3.3

3.0.x through 3.2

Any higher 3.x release up to and including 3.4

3.2.1

3.3

3.4

4.0

3.3

3.4

4.0

4.1

3.4

4.0

4.1

4.2

4.2.1

4.0

4.1

4.2

4.2.1

4.1

4.2

4.2.1

4.3

4.2

4.2.1

4.3

4.2.1

4.3

For example, If you want to upgrade from version 2.7.1 to version 4.3, you could use either of the following upgrade paths:

  • 2.7.1 > 3.2.1 > 4.0 > 4.2.1 > 4.3.
  • 2.7.1 > 3.3 > 4.1 > 4.3.

You cannot go directly from 2.7.1 to 4.3.

Important: Starting in release 4.2, KeyControl nodes communicate using Transport Layer Security (TLS) protocol version 1.2 by default. This means that KeyControl nodes running version 4.2 or greater cannot communicate with any Policy Agents running version 3.4 or older. If you have Policy Agents running an older version of the software that you do not intend to upgrade, you need to change the KeyControl SSL configuration to use TLS version 1.0. For details, see Configuring SSL Settings.