SafeGuard Enterprise: How to update to SafeGuard Enterprise 5.50

---

ssij wrote:
I've tried with both XP Pro SP3 32-bit and Vista Biz SP2 32-bit.

As for the MSI files and install order,

First, I tried this:

Install SGxClientPreInstall.msi

Install SGNClient.msi with ADDLOCAL=ALL

Install SGN_CP_Client.msi (v5.50)

The CP Client fails outright, both scripted and unscripted.  When I ran the installer unscripted, I got the error "Please reboot before starting the Install process".  No matter how many times I reboot, it will still give me this error.  I emailed support about it, and they told me to delete the pendingfilerenameoperations key in the registry (referring to this KBA), but that did not work.

The second time around, I tried:

Install SGxClientPreInstall.msi

Install SGNClient.msi with ADDLOCAL=ALL

Uninstall SGN_CP_PortProtectorClient.msi (from v5.40)

Install SGN_CP_Client.msi

As explained in this KBA.  This also fails, both scripted and unscripted.  When run unscripted, I get an error message saying, "The Client Configuration file is not reachable".  Support thought that this refers to the client configuration MSI file, but the path is referring to C:\Documents and Settings\All Users\Application Data\Utimaco\SafeGuard Enterprise\CFP\ClientConfig.scc, not an MSI.  Either way, I was under the impression that I didn't need to install a v5.50 client configuration msi on the client when upgrading from from v5.40.

I initially did not reboot on after the client upgrade, and the CP install failed.  Even after rebooting, the CP install still fails on both tries.

I'm kinda stumped as to why this isn't working.  Am I doing something wrong?

---

Hi ssij,

While it looks like you are going down the correct path, I have a feeling a small detail might be overlooked. According to the Release Notes (RN) found with the installation software named readsgn_5_eng.html, section 5.8 explains the steps to upgrade SGN CP 5.35 and higher to SGN 5.50. Here's the pasting from the RN:

SGN ConfigurationProtection Module can’’’’t be updated to SGN 5.50 directly due to security constraints. In order to get the new version of the ConfigurationProtection Module installed properly the existing version has to be removed beforehand.

The approved update procedure is the following:
     Step 1: update SGN (do not reboot afterwards)
     Step 2: remove old CP client (SGN_CP_PortProtectorClient.msi)
     Step 3: install new CP client (SGN_CP_Client.msi)

The existing <Client Config.msi> you created for your location does not need to be removed and reinstalled. The error about the Client Configuration file is correct, but as you pointed out, it's the ClientConfig.scc and not the .msi file.

Also, this is in the RN "On updating the Configuration Protection Module the policy needs to be reapplied to be taken into account."

If you are stil having trouble, try removing CP (SGN_CP_Client.msi (assuming you already tried to upgrade to 5.50 otherwise use SGN_CP_PortProtectorClient.msi for 5.40) using the SGNClient.msi first, do not reboot, remove the CP client, reboot, then install the SGNClient.msi to include the CP component, do not reboot, then install the new CP client (SGN_CP_Client.msi).

---

ssij wrote:
I've tried with both XP Pro SP3 32-bit and Vista Biz SP2 32-bit.

As for the MSI files and install order,

First, I tried this:

Install SGxClientPreInstall.msi

Install SGNClient.msi with ADDLOCAL=ALL

Install SGN_CP_Client.msi (v5.50)

The CP Client fails outright, both scripted and unscripted.  When I ran the installer unscripted, I got the error "Please reboot before starting the Install process".  No matter how many times I reboot, it will still give me this error.  I emailed support about it, and they told me to delete the pendingfilerenameoperations key in the registry (referring to this KBA), but that did not work.

The second time around, I tried:

Install SGxClientPreInstall.msi

Install SGNClient.msi with ADDLOCAL=ALL

Uninstall SGN_CP_PortProtectorClient.msi (from v5.40)

Install SGN_CP_Client.msi

As explained in this KBA.  This also fails, both scripted and unscripted.  When run unscripted, I get an error message saying, "The Client Configuration file is not reachable".  Support thought that this refers to the client configuration MSI file, but the path is referring to C:\Documents and Settings\All Users\Application Data\Utimaco\SafeGuard Enterprise\CFP\ClientConfig.scc, not an MSI.  Either way, I was under the impression that I didn't need to install a v5.50 client configuration msi on the client when upgrading from from v5.40.

I initially did not reboot on after the client upgrade, and the CP install failed.  Even after rebooting, the CP install still fails on both tries.

I'm kinda stumped as to why this isn't working.  Am I doing something wrong?

---

Hi ssij,

While it looks like you are going down the correct path, I have a feeling a small detail might be overlooked. According to the Release Notes (RN) found with the installation software named readsgn_5_eng.html, section 5.8 explains the steps to upgrade SGN CP 5.35 and higher to SGN 5.50. Here's the pasting from the RN:

SGN ConfigurationProtection Module can’’’’t be updated to SGN 5.50 directly due to security constraints. In order to get the new version of the ConfigurationProtection Module installed properly the existing version has to be removed beforehand.

The approved update procedure is the following:
     Step 1: update SGN (do not reboot afterwards)
     Step 2: remove old CP client (SGN_CP_PortProtectorClient.msi)
     Step 3: install new CP client (SGN_CP_Client.msi)

The existing <Client Config.msi> you created for your location does not need to be removed and reinstalled. The error about the Client Configuration file is correct, but as you pointed out, it's the ClientConfig.scc and not the .msi file.

Also, this is in the RN "On updating the Configuration Protection Module the policy needs to be reapplied to be taken into account."

If you are stil having trouble, try removing CP (SGN_CP_Client.msi (assuming you already tried to upgrade to 5.50 otherwise use SGN_CP_PortProtectorClient.msi for 5.40) using the SGNClient.msi first, do not reboot, remove the CP client, reboot, then install the SGNClient.msi to include the CP component, do not reboot, then install the new CP client (SGN_CP_Client.msi).