Supported upgrade models and paths

Trust Protection Platform supports several upgrade models, allowing for high availability but slower upgrades, or faster upgrades with service interruption. You must be on a supported origin versionClosed (Upgrade origin version) When upgrading Venafi Trust Protection Platform from the currently-installed version to a newer version, the currently-installed version is referred to as the origin version. before you upgrade to 23.1.

DID YOU KNOW?  You do not need to uninstall Trust Protection Platform prior to upgrading. You can install new versions over older versions.

As of September 2023 Venafi provides product support for Venafi Platform versions 21.2.x to 23.1.x. Venafi also provides upgrade support from any supported version to the current version.

If you are running Venafi Platform version 21.2 or older, you must first upgrade to a supported version (21.2 or higher).

Once you are on a supported version, you can upgrade to 23.1. Be sure to check out the version-specific documentation for the intermediate version for upgrade instructions and important considerations before upgrading. ClosedShow example.

Here is one example of why you need to check the important considerations for the intermediate versions. Support for MSSQL 2012 was removed for a time, but was reintroduced in 21.4. If you are using MSSQL 2012 in your origin version, and you want to continue using it in 23.1, you cannot upgrade to versions 21.1 to 21.3, since those versions don't support MSSQL 2012.

EXAMPLE  If your origin version is 20.3 and you want to upgrade to 23.1, you can't upgrade directly. Your recommended upgrade path would be two steps: First, upgrade to at least 21.2 (the minimum supported version). Once your entire Venafi cluster has upgraded to 21.2 or later, follow these instructions to migrate the entire cluster to 23.1.

The following table lists the patch versions that have been tested for compatibility with the 23.1 release.

Upgrade version compatibility
Origin version
21.2.4+
21.3.3+
21.4.6+

22.1.6+
22.2.2+
22.3.1+
22.4.1+

There are three different upgrade models you can follow:

  • Offline upgrade

  • In-place rolling upgrade

  • Replace rolling upgrade

For details about these upgrade models, and for information to help you select the correct model for your organization, see About rolling upgrades.

Server Agent Upgrade Paths

Server Agent 23.1 supports upgrades with the full installation package on all OS platforms.

Agent Upgrade Work is bit-specific. Agent Upgrade Work cannot update a 32-bit Server Agent to the 64-bit version. You'll need to use the full installer to upgrade from 32-bit to 64-bit.

Agent Upgrade Work will not send versions that are not listed in the table below. In cases where the work isn't sent, multi-stage upgrades via an intermediate version may be available. Upgrade via full platform-specific installer is always available.

Server Agent 23.1 supported upgrade paths for Venafi Update package:

Current Version Operating System Final Version
21.2.x, 21.3.x, 21.4.x, All, including Linux, Solaris, AIX 23.1
22.1.x, 22.2.x, 22.3.x, 22.4.x All, including Linux, Solarix, AIX 23.1