Upgrading Secret Server

Please see the Secret Server On-Premises Upgrade Checklist prior to upgrading.
See Upgrading to 10.9.000005/33 for instructions specific to that upgrade.
If upgrading to 10.7.000000 or later, using SQL Server 2008 R2 as the Secret Server database is no longer supported. In addition, the existing MS SQL database must be version 2012 or later for this upgrade. Otherwise, if the upgrade fails and you attempt to roll it back, the previous installation will not work. For more information, see the Secret Server Release Notes.
Customers upgrading to 10.6.000000 or later and are using RabbitMQ, please see Clearing RabbitMQ Message Queues.
Customers using the Integrated Windows Authentication (IWA) feature need to perform a workaround when upgrading to Secret Server 10.6 with a Distributed Engine. IWA is the Windows feature where users log on their Windows domain only once—once logged on, any additional domain logons are done automatically without having to reenter a user name and password.
Upgrading to Secret Server version 8.9.00000 and above will require Windows Server 2008 R2 or greater.
If you are upgrading to Secret Server version 8.5.000000 and above, there are changes in the .NET Framework version you will need to be aware of along with some additional steps in the upgrade process. For more information, see Secret Server and Secret Server Cloud .NET Framework 4.8 Mandatory Upgrade.
Upgrading to Secret Server version 10.0.000000 and above will require configuring integrated pipeline mode on the Secret Server Application Pool. Please see Changing IIS to Not Stop Worker Process in IIS 7.0 and Later for details on configuring integrated pipeline mode in IIS. If using Integrated Windows Authentication you will also need to update IIS authentication settings as detailed in Configuring Integrated Windows Authentication. If you are at version 9.1.000000 and below, you will need to first upgrade to 9.1.000001 before you can upgrade to 10.0.000000 and above.
If you are doing an incremental upgrade from Version 9.1.000000 to a higher version, the system may require additional time to process the changes before proceeding. A typical symptom of this behavior will be the software will redirect you to the home page. If this happens, please allow up to 24 hours before retrying the upgrade. If the issue persists, please contact technical support. You should lose no other functionality of the software whilst this occurs.
If you have Privilege Manager installed, the Secret Server upgrade process will begin an upgrade for Privilege Manager as well.

How Upgrades Work

Secret Server periodically polls the update server to detect new updates. If the "Allow Automatic Checks for Software Updates" option is enabled in the Admin > Configuration menu, you will see the "An update is available (xx.x.xxxxxx)" link after logging in with an administrator account. The steps below can be used to perform an upgrade for versions 7.1.000015 and higher. If you have an older version of Secret Server, please contact Delinea technical support for assistance.

Before You Begin

  1. Ensure you will have access to account credentials for the server hosting Secret Server AND the SQL Server instance hosting your Secret Server database.

  2. Ensure you have a recent backup of the application files and database available.

  3. If you use clustering, stop the application pools on all of the servers except the one that is currently the "primary."

How to Upgrade

  1. From a computer that has outbound network access, click on the upgrade link to go Admin > Upgrade. The Upgrade Secret Server page appears:

  2. Ensure your install is backed up:

    All your data is encrypted using the encryption.config file in your Secret Server application folder. Your data cannot be decrypted without it. Thus, it is critical that you backup the application folder and its contents before proceeding.

    1. Backup the database named SecretServer at the address listed.

    2. When finished backing up both, click to select the The Secret Server database and application folder have been backed up check box.

  3. Click the Continue button. Another Upgrade Secret Server page appears.

  4. Click the Download Latest Version button to download Secret Server. Wait for the download to finish. The Install Secret Server Upgrade page appears.

  5. Click the Upgrade button. The upgrade starts. When it is finished, the Secret Server Upgrade Installation Status page appears.

  6. Click the Return to Home button to return to the dashboard. The upgrade is complete.

  7. If you intend to use Web clustering, proceed to Upgrading Secret Server with Web Clustering.