How To Article | HTA-20230623-AVW-01 iProtect Access / Security | How To Articles | How to update iProtect™ to 10.3  |
How to update the iProtect™ Application.
Introduction
This how-to guide provides you with instructions on how to update your iProtect system to the latest 10.03 version, allowing you to take advantage of the latest improvements and features.
Update workflow
Download files
Download the latest files on our download section of the knowledgebase:
iProtect Serverbox
IProtect Database
Pre-checks
Before the update it is required that the state of the system is known. Not functioning readers, nodes and lines must be noted. If possible, restore the connections first, if this is not possible, then put the relevant lines inactive. Check and test database couplings and other custom intergrations, it's best to test them on a 10.3 test-system first to see if they work or still need adjustments first.
Compatibility and discontinued hardware/software is noted in the release notes:
Minimal requirements / tested versions:
Firmware intrusion detection (Unii 2.4.0 / XL 3.11 / ML is EOL)
Rootfs Pluto's (5.68a)
Firmware polyx (UBIFS)
Diva/Sense (2.6.13)
iProtect version 10.1.37
Network requirements
Since iProtect version 10.03 the network communication between the server and the Pluto devices has changed. Previously, we were only using a TCP77 connection, but now we are able to communicate over secure WebSockets.
https://en.wikipedia.org/wiki/WebSocket
For this reason, some additional ports need to be opened. See the page below for more details.
Network sockets - IPROTECT Access
Firewall settings
The firewall on the iProtect server is set by default to allow network traffic with TKH access control controllers. When connecting a third-party system to iProtect, the necessary network port settings must be added to the firewall.
These firewall rules can be adjusted via the system's Cockpit Panel, which is accessible at the following URL: https://{ipaddress/hostname}/cockpitpanel
Getting the necessary files
Creating a new Backup of the iProtect system and download the Backup from the maintenance page.
Updating the iProtect version.
First, it is important to bring the server fully up to date, you can do this by going to the “Software updates” tab in CockpitPanel and then running a scan to see if any updates are available.
Cockpitpanel is reachable by the url https://{ipadress/hostname}/cockpitpanel
Install the new serverbox at the maintenance page.
Go to the iProtect™ maintenance page (Click on the iProtect maintenance tab in cockpitpanel)
Activate the maintenance functions by clicking on the activating button at the top left.
Go to file upload section at the maintenance page (Install > Upgrade > Configuration)
Click on the “...” button below Upload iProtect™ (1) and select the new maintenance page version and click on the “Post” button.
Refresh your browser webpage.
Install the new iProtect™ version at the maintenance page.
Install > Upload iProtect (1)
Click on the “...” button and select the new iProtect™ package and click on the “Post” button.
When the “Check requirements” button appears, press it and a check will be done. Check the log and see what is needed to continue.
if the check is passed you get a “Start Upgrade” button and can start the upgrade by a click on this button.
You can follow the installation at the User interface logging, if you see the messages below the Gui is ready and you can login in iProtect™ again (only the root user can login at this point)
Installing the new license:
https://tkhsecurity.atlassian.net/l/cp/51UgXjhX
If a new license is needed, please contact our orderdesk.
Activating lines
To be sure all lines and nodes gets the latest software, select the system default Provisioner group.
Go to iProtect™ menu option Installation > Hardware > Line
Select System default at the Provisioner group options.
The components under the line config will automatically be provided with the latest firmware version.
Activate the line’s now, the Door controllers will get the new software and start with the installation automatically. The doors will be non-functional for 5-10 minutes. Open doors beforehand if they are critical.
When updating iProtect to version 10.03, all network controllers will be updated automatically to a new rootFS version. This update will be processed in the background and will take aprox 20 - minutes (depending on network speed).
During the preparation of the Pluto rootfs update, the customer will not experience any inconvenience.
When the update is complete, the system administrator must reboot the controller. Booting up the controller will take approximately 2-5 minutes (depending on network speed). During this time, the customer may experience problems opening the door.
Finishing the update
When all lines are updated and the re-index message is gone, you can finish the update with the button in the menu:
Installation > Database restore > Activate line
Some points to check at the end of the update:
Readers
Database couplings
Client login (remove browser cache)
Import / Export
iNVR
Printing badges/cards
Intercom
browser certificate