Updating Conductor firmware

How to update the firmware for an Airwall Conductor.

Roles
System Administrators

Firmware downloads

Important: Before you roll out a Conductor firmware update, create, download, and archive a Conductor database backup. See Create a Conductor database backup.

If your Conductor has access to Tempered's release repository on the Internet, the latest firmware downloads for your Conductor (and Airwall Edge Services) are automatically available on the Conductor Settings page. Otherwise, you can download the software from Latest firmware and software and upload it to your Conductor.

Update non-HA Conductor firmware

CAUTION: When you are updating firmware, stay on the page (do not navigate away or log out). If something interrupts a Conductor firmware update (for example by a power outage), it may leave the Conductor in a corrupted state.
  1. Log in to the Conductor using a system administrator account.
  2. Go to Settings > General Settings > Firmware Updates, and find the version you want.
    Note: You can also download firmware from Latest firmware and software and then upload it to the Conductor.
  3. For the update you want, select Download. The Conductor downloads the update to your Conductor.
    Note: If you're uploading the firmware update, select Upload Firmware, select the Conductor firmware file you downloaded, and then select Upload. Wait on that page until the upload is complete.
  4. When it completes, select Install to install the update.
Verify the firmware version under the Configuration section on the Settings page.

Update a Conductor HA pair

When upgrading a pair of HA Conductors, the sequence in which you perform the steps below between master and standby is critical:
  1. Download, but do not install, the new firmware to the current active Conductor 1.
  2. Install the new firmware on the standby Conductor 2 first. When it finishes the update, it reboots and becomes an active Conductor.
  3. Install the new firmware on the now original active Conductor 1.
  4. Last, demote the former standby Conductor 2 to the standby role
This table shows the sequence of the update.
Step Conductor 1 Conductor 2
1

Active

Download firmware to the current active Conductor 1

Standby
Result: The HA pair synchronizes the firmware update so it is available on Conductor 2
2

Active

Standby

Install the firmware update on Conductor 2

Result: After the update, Conductor 2 reboots, and becomes active, so both Conductors are active. This prevents replication from happening while you complete the update of the HA pair.
3

Active

Install the firmware update to Conductor 1.

Active

Result: Both Conductors are updated and both are active.
4

Active

Active

Return Conductor 2 to the standby role.

Result: The HA pair is updated with no interruptions to service, and return to normal operation.

Active

Standby

Detailed instructions to update an HA pair

  1. Log in to the active Conductor 1 using a system administrator account.
    CAUTION: During the update process, stay connected to the Conductor, and do not navigate away from the UI. Uploads and updates may take several minutes to complete. If the Conductor firmware update is interrupted (for example by a power outage), it may leave the Conductor in a corrupted state.
  2. Go to Settings > General Settings > Firmware Updates, open the version subtab, and find the Conductor update you want to install.
  3. To the right of the update, select Download. Stay on the page while it downloads.
  4. Log out of the active Conductor, and log in to the standby.
  5. Go to Settings > General Settings > Firmware Updates, and open the version subtab. The new firmware update has synced from the active Conductor and should be listed in the Firmware Update section.
  6. On the standby Conductor, for the update you want, select Install. Stay on the page until the installation completes. After the update installs successfully, the standby Conductor reboots and becomes an active Conductor.
  7. Log in to the original active Conductor 1, and go to Settings > General Settings > Firmware Updates.
  8. Next to the update you want, again select Install. Stay on the page until the installation completes. After the update installs successfully, the Conductor 1 reboots.
  9. Log back in to the original standby Conductor 2 and go to Settings. In the Airwall Conductor high availability section, select Edit Settings and then select Demote to standby.