Upgrading Secret Server Without Outbound Access

This topic only applies to Secret Server On-Premises.
Upgrading to Secret Server version 10.0.000000 and above will require configuring integrated pipeline mode on the Secret Server Application Pool. Please see Changing IIS to Not Stop Worker Process in IIS 7.0 and Later for details on configuring integrated pipeline mode in IIS. If you use Integrated Windows Authentication you will also need to update IIS authentication settings as detailed in Configuring Integrated Windows Authentication. If you are at version 9.1.000000 and below, you will need to first upgrade to 9.1.000001 before you can upgrade to 10.0.000000 and above.

How Upgrades Work

Secret Server periodically polls our update server to detect updates. If your Secret Server instance is on an internal network that has no outbound access or goes through a proxy, Secret Server will not be able to perform updates automatically.

If this is the case, outbound access is needed to the following connections in your firewall if you want automatic updates:

  • d36zgw9sidnotm.cloudfront.net:443
  • updates.thycotic.net:443
  • updates.thycotic.net:80

The following steps can be used to perform an upgrade for versions 7.1.000015 and higher. If you have an older version of Secret Server, please contact Delinea technical support for assistance.

Procedure

Step 1: Open the Upgrade Secret Server Wizard

From a computer that has outbound network access and Secret Server access, follow these steps:

  1. Open the Secret Server Upgrade page:

    1. In a web browser, go to: http://<YourSecretServerURL>/Installer.aspx?patch=true

    2. Replace <YourSecretServerURL> with your actual Secret Server URL.

    3. The upgrade wizard will appear.

  2. Enable Maintenance Mode:

    1. Click Enable Maintenance Mode.

      This temporarily prevents users from changing roles, secrets, or secret-related data such as dependencies, templates, and password requirements.

    2. For more information, see Maintenance Mode FAQ.

  3. Back up Secret Server:

    1. Back up the Secret Server application folder

    2. Back up the Secret Server database.

  4. To confirm backup completion, on the upgrade page, select the checkbox labeled: The Secret Server database and application folder have been backed up.

  5. Click Continue. The next page of the wizard will appear.

Step 2: Get and Upload the Latest .zip File

  1. Download the latest version of the .zip file by clicking the Download Latest Version button on the installer page.

    Example file name: Version_10_2_000000.zip. Note where you save it. You also can find the downloadable update files below.

  2. Click the Choose File button to add the Secret Server .zip file you just downloaded.

    To verify the file hashes for the latest version using the posted hash values, refer to Secret Server Download Hashes.
    Do not use the fresh-install SecretServer.zip file or setup.exe that is first downloaded from Delinea.com. Only use the Get Latest Version link—there are differences between the upgrade file and the fresh-install zip file.

  3. Click the Upload Upgrade File button. You will see a message confirming the file was successfully uploaded, and the Install This Version button appears.

  4. Click the Install this Version button. The Upgrade Secret Server page appears (not shown).

Step 3: Upgrade Secret Server

  1. Click the Upgrade button. The upgrade automatically processes, and once it has finished you will see a confirmation page.

  2. Click Return to Home to return to the dashboard.

Offline Installation Download Files

If you do not have access to another installation of Secret Server or you are upgrading from an earlier version, click one of the following links, depending on your current installed version: