Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

  1. Kemp Support
  2. Knowledge Base
  3. Operational Maintenance

How to upgrade the Kemp LoadMaster Firmware

Updated: 

To update the LoadMaster firmware, follow the steps below in the Web User Interface (WUI).

To obtain the latest firmware please go to our Downloads Section located here.

Step 1) Back up the LoadMaster configuration and certificates

KEMP recommends taking a backup of the LoadMaster as a restore point which can be used if needed. To back up the LoadMaster, go to System Configuration > System Administration > Backup/Restore. Click Create Backup File.

LM_Backup.png

Certificates need to be backed up separately.

go to Certificates & Security > Backup/Restore Certs
enter a Passphrase to create an encrypted backup of the certificates on the LoadMaster

LM_Cert_backup.png

 

Step 2) Download the patch

  1. Firmware can be found here
  2. Select the appropriate LoadMaster firmware such as LTS (Long Term Supported) or GA (General Availability) firmware
  3. Download the appropriate firmware release.
  4. Unzip the compressed file to get the firmware

Step 3) Install the patch (Start on Standby unit if in HA)

  1. In the WUI, go to System Configuration > System Administration > Update Software.
    LM_Firmware.png
  2. Click Browse to select the firmware file.
  3. Browse to and select the patch file.
    • this will be the file ending in "RELEASE.PATCH-64-MULTICORE"
    • the other file ending in "RELEASE.PATCH-64-MULTICORE.checksum.xml" is the checksum file

  4. If you do not want to use the verification file you can change this under the following menu
    System Configuration > Miscellaneous Options > WUI SettingsLM_Firmware_optional.png
    change the Update Verification Options if needed
  5. Once the firmware is selected and uploaded, click Update Machine.
  6. Follow the prompts to apply the patch.

Note: If the above Step 3 fails due to the error message "License disallows further software updates", please see this Knowledge Base Article on how to resolve this, and for more details on the LoadMaster license.

Step 4) Reboot

You will be prompted to reboot the LoadMaster. Please do so.

Step 5) Clear the browser cache

After patching, if there are any problems using the WUI, please clear the browser cache and restart the browser.

Step 6) Repeat the process for the partner unit (if applicable)

LoadMaster Highly Available (HA) pairs require each unit be patched separately. Following this process will achieve the least amount of down time since once one fail-over is required. The overall process is as follows:

  1. Patch the Standby unit via the individual IP address.
  2. Reboot the upgraded unit.
  3. Check to ensure the patched unit is back online (try to access the LoadMaster administrative IP address, which usually the eth0 IP address).
  4. Now the patch the active unit.
  5. Reboot the upgraded unit.

 



Was this article helpful?
39 out of 43 found this helpful

Comments

Avatar

AmitRawat

Thanks for sharing the article.

0
Avatar

user user

I use a HA pair. This was my upgrade path:
1. Update the active VLM via shared IP.
2. Reboot.
3. As soon as the upgraded VLM came back up, it became active again. I didnt do a thing.
4. Then I upgraded the standby unit via its own IP: Local administration - Update Software.

0
Avatar

Philip O'Connor

Hello, Thank you for sharing your experience.
On the LoadMaster WUI under HA Parameters, you might have had the option Switch to Preferred Server enabled. This is normally not enabled by default. Changing it to no Preferred Host before preforming the update will prevent the unit for becoming master again. However you might wish to return to this setting after the upgrade is completed.

0
Avatar

Erik van Kruiselbergen

One question. Will the websites and exchange still be available while performing the update on the active VLM?

0
Avatar

Stephen Wong

when I go to "software update", it shows "license disallows any further software..."

0
Avatar

paul

If you are using a free version for development, you cannot update you would have to backup and start again?

0
Avatar

technik

How long would an update on a single machine take?
We have VLM-2000 with has currently the 7.1-30-75 firmware.

0
Avatar

mariog

Hello how do I find which model I have..
on home the appliance model is empty :

Licensed until: unlimited
Support Level:
Support Until: none
License Type:
License Status: Single Perm
Appliance Model:

0
Avatar

Per-Olof Hagstrom

These steps do not seem like the most optimal way of upgrading an HA-pair setup, at least not from uptime perspective. Wouldn't it be better to first connect directly to the passive node, upgrade it, wait for it to come back, then fail over, and then upgrade the second unit which now is passive? Or is there a specific reason you "have to" connect to the active/shared IP?

0
Avatar

Justin Federico

@per.hagstrom

Thank you for your comment. There is no specific reason for the software upgrades to be performed from the shared IP other than this IP is the Management IP of the pair. You will have less downtime/less fail-overs if you perform the upgrade on the standby LM first. Basically it is a matter of preference as either process would be supported. As with all such maintenance we suggest that the software upgrades be performed during a scheduled window.

0
Avatar

Rajeshkumar A

Hi Support,

We have LM-4000 HA pair with one as HA first mode & another as HA second mode.
When logged in to HA IP , System Status shows in Display HA second mode Device IP & Serial, this means the device with HA Second mode is Active & HA first mode device is passive?

Then which One to be upgraded first.

Rajesh.

0
Avatar

Justin Federico

@rajeshkumar

Master/Standby has no dependence on First/Second mode. First/Second mode is simply an identifier used to tie each unit to its respective settings in the shared configuration.

In order to identify which unit is the Standby, log in to each individual IP address rather than the shared (HA) IP address. At the upper right of the screen each unit is identified as "Master" or "Standby".

Alternatively you can log into the shared (HA) IP address. The unit being accessed from the shared address is always Master so by process of elimination the other unit is the Standby.

I hope this helps to clarify the process. Thank you very much for you inquiry.

0
Avatar

John Pitton

As per.hagstrom pointed out, it's typically best to update the standby unit first and then reboot it. Here are my steps, and you'll notice I switch the preferred server after updating and rebooting the standby unit. This will allow for even less down time since you don't have to wait for the timeout period of the HA health checks, however I also leverage "Inter HA L7 Persistency Updates" so I essentially don't see any connection drops.

1) Update the standby unit, and in my case it's the "Second HA" unit.
2) Reboot the standby unit
3) Confirm standby unit is operational and functioning correctly after the reboot.
4) On the Active unit(this is my "First unit") , change the "Switch to Preferred Server" to the standby unit(Second HA), which will then make the Second HA unit Active, and the "First HA" unit will automatically change to standby.
5) Rinse and repeat here; so I update the First HA unit, reboot it, and then make it Active again through the "Switch to Preferred Server"

0
In this document