Access Manager prior to 3.1 SP4 should be first upgraded to 3.1 SP4. For upgrading Access Manager 3.1 SP4 or later to 3.1 SP5, you need to upgrade the components in the following order:
Administration Console
Identity Servers
Access Gateways
SSL VPN Servers
IMPORTANT:The J2EE agents upgrade is not supported.
While you are upgrading the components, be aware of the following:
You must upgrade the components to 3.1 SP5 before you can migrate the components to a new operating system. See Section 8.3, Migrating to Newer Operating Systems.
Back up the customized Tomcat files on your Access Manager components.
If you have customized the tomcat5.conf file or the server.xml file, back up these files before upgrading. These files are overwritten during the upgrade process.
(Conditional) The location of the keystores on the Administration Console for the Embedded Service Provider of the Access Gateway Appliance changed in Access Manager 3.0.1. If you installed the Access Gateway Appliance with Access Manager 3.0 and upgraded it to 3.1 SP3, the keystores are in the old location. The SLES 9 Access Gateway Appliance works with the keystores in either the old or the new location. However, when you migrate your SLES 9 Access Gateway Appliances to SLES 11, the SLES 11 Access Gateway Appliance ceases to function because it cannot find the Embedded Service Provider keystores. The upgrade script automatically cleans up the keystores for you. After the upgrade, the keystores are in the new location.