Kemp LoadMaster Firmware Upgrade Path
This article describes the mandatory Firmware upgrade path that needs to be followed to ensure a successful upgrade of your Kemp LoadMaster or ECS Connection Manager.
Updating to 7.2.x
Find your currently running LMOS release in the table below at left and follow the upgrade path shown at right to upgrade LMOS to a newer version. Please also refer to these resources for additional information:
- See this article for guidance on selecting an LMOS 7.2.x release.
- See the Release Notes for all firmware versions.
- Also see the Hardware Upgrade Notes below for restrictions on hardware updates based on model.
|Currently Running Release
|5.0.x / 5.1.x
|4.3.x (and previous)
|Contact Kemp Support.
Hardware Upgrade Notes
The NG line of LoadMaster and ECS Connection Manager hardware appliances (released in 2023) use the UEFI boot method. Previous hardware models used the BIOS boot method. What this means for you is that you will only be able to update hardware with new firmware using update images that support the boot method used by the hardware being updated. See the table below for the restrictions.
|NG hardware models (2023)
|Previous hardware models
FIPS Mode Upgrade Path
With LMOS 188.8.131.52, FIPS mode is updated to use the OpenSSL 3.0.8 FIPS Object Module (FOM). The previous version of the FOM (1.0.2) used in earlier FIPS mode releases will no longer be maintained.
The following LMOS versions use the Legacy FOM:
- 184.108.40.206 and below
- 220.127.116.11 through 18.104.22.168
The following LMOS versions use the OpenSSL 3 FOM:
- All future 7.2.54.x versions will include the OpenSSL 3 FOM.
- A version of LMOS subsequent to 22.214.171.124 will also include the OpenSSL 3 FOM; this is expected to be released in 2024.
Updating Legacy FOM Systems
Generally, you can upgrade any system running the existing legacy 1.0.2 FOM to any LMOS version running the latest 3.0.8 FOM.
Note that if you are downgrading the system -- for example, going from 126.96.36.199 to 188.8.131.52 -- some functionality introduced after 184.108.40.206 will no longer be available. Although we make every effort to move features from the top of tree to the LTSF branch as soon as they are stable, there is always a bit of a lag between feature introduction and back-porting to the 7.2.54.x branch.
Updating OpenSSL 3 FOM Systems
At this time, there is no update available that can be applied to the system when running in FIPS mode. The FIPS mode update mechanism will refuse to install a patch using the Legacy FOM to a system running the OpenSSL 3 FOM. A 220.127.116.11 release is planned for mid-2024.
Switching to the Previous Partition
Note that it is still possible to return to the previous update partition containing the version running the Legacy FIPS module, as long as there has been no update applied to the system since installing 18.104.22.168. Note, however, that any configuration changes made in between the installation of 22.214.171.124 and the time when you switch back to the previous partition will be lost -- such as newly uploaded security certificates. You should take a backup of the system before you change partitions so you can restore configuration changes after switching partitions.
XML Update Verification Notes
Note to users who are on firmware versions before 126.96.36.199 / 188.8.131.52 and are using the XML verification feature in the LoadMaster UI. The following upgrade path must be used:
- Patch to 184.108.40.206 / 220.127.116.11 (using the pre18.104.22.168 XML file)
- Patch to the desired LMOS version using the single XML file provided with the release.