Jump to:navigation, search
Wiki






























De.png
En.png
Fr.png






Securepoint UTM Firmware-Update with CLI
Last adaptation to the version: 12.6.1
New:
notempty
This article refers to a Resellerpreview

11.8 11.4

Access: UTM-IP:Port or UTM-URL:Port
Port as configured at Network / Appliance Settings / Webserver
Default-Port: 11115
i.e.: https://utm.ttt-point.de:11115
Default: https://192.168.175.1:11115
Extras CLI


General

  • The new firmware is downloaded by the UTM completely independently, but the new update is not activated without consent
  • The UTM checks once an hour for a possible update
  • Due to the update distribution system, it is possible that the update will not be obtained immediately.
    It is not possible to skip this distribution process
    If an update is urgently required, although the distribution process does not yet provide it, an image can be downloaded via the Reseller Portal. This can be used as a boot image. For hardware UTMs, physical access to the device is required for this.
      
  • The UTM always downloads a complete firmware image for the corresponding version


Command Description

Check for update and download

system upgrade info indicates which versions are available on the system.

Inside the system the command update is used for updating after entering new parameters (e.g.: system interface update after entering a new IP address). A new software version represents a new operating system version (firmware) and is a upgrade within the system.

As a return there is a listing of max. 3 versions.
oldThe previous version
cur The currently running version
new The available new version

firewall.foo.local>system upgrade info
name|version
----+-------
old |12.6.0
cur |12.6.0.1
new |12.6.1 
firewall.foo.local> 

This system has been updated from 12.6.0 to the now active version 12.6.0.1 and an update to version 12.6.1 is available.

system upgrade update If no new version is available on the UTM new | none, this command can be used to check whether an update is available.

firewall.foo.local>system upgrade update
-- empty answer from 'spupdater'
firewall.foo.local>

If a new version was loaded successfully, there is no error message ('empty answer'). But even with a 'parse error' a version was loaded.

system upgrade updatelatest Manueller Download der neuesten Firmware, auch wenn diese UTM noch nicht in der normalen Verteilung vorgesehen ist.
  • Dieser Befehl kann nur alle 10 Minuten ausgeführt werden.
  • system upgrade forceupdate Deletes the new directory and performs a download if more recent software is available.
    system upgrade hint Outputs what options are available at the current time.

    firewall.foo.local>system upgrade hint
    message
    -------
    dryrun, rollback
    firewall.foo.local>
    

    Rollback

    system upgrade rollback Performs a rollback. The previous version is reactivated.
    notempty
    Configuration changes in the new version are reset in the process.

    notempty
    The UTM system restarts automatically

    Update

    system upgrade dryrun Performs an update to the version listed in the new line.
    notempty
    The UTM system restarts automatically

    firewall.foo.local> system upgrade dryrun
    
    Broadcast Message from root@firewall.foo.local
            (somewhere) at 14:12 ...
    
    the system is going down for reboot soon
    
    
    message
    -------
    going down for reboot
    

    Once the system is restarted, a new login is required.

    firewall.foo.local> system upgrade hint
    message
    -------
    finalize
    firewall.foo.local>
    
    To permanently complete the update, the command system upgrade finalize is still required.
    .

    Before this, a factory reset must not be performed under any circumstances!

    Eula acceptance

    system upgrade confirm eula Acceptance of the EndUserLicenceAgreement. Eula must be accepted.

    firewall.foo.local> system upgrade hint
    message
    -------
    confirm eula finalize, decline
    firewall.foo.local>
    

    Privacy policy acceptance

    system upgrade confirm privacy Acceptance of the privacy policy. The privacy policy must be accepted.

    firewall.foo.local> system upgrade hint
    message
    -------
    confirm privacy finalize, decline
    firewall.foo.local>
    

    Eula and privacy policy rejection

    system upgrade decline Rejection of the eula and privacy policy. The update cannot be installed in this case.

    Set startup version

    system upgrade finalize When this command is used, this version is used permanently. Otherwise, the system would start again with the previous version when rebooting.

    firewall.foo.local> system upgrade finalize
    firewall.foo.local>
    

    Verification that the new version is now also displayed as the currently running version:

    firewall.foo.local> system upgrade info
    name|version
    ----+-------
    old |12.6.0.1
    cur |12.6.1
    new |none 
    

    Here the version running before the update should now be listed under old and the new version accordingly as cur. The command system upgrade hint now returns:

    firewall.foo.local> system upgrade hint
    message
    -------
    rollback
    

    Here only "rollback" should be returned.
    . If this is the case, the update is completed successfully.