Upgrading High Availability Pair

David,

if you a HA pair, the firmware update will proceed as follow:

• firmware is download on gui on both nodes
• slave nodes is upgraded to new firmware
• slave reboots
• if all it's ok with the slave, it becomes the master and the master becomes the slave
• the new slave then is upgraded and rebooted

Regards

Thanks!  If I was to take a WAG I would have upgraded the slave first.

I'm embarrassed to say I'm finally getting to this, since the site is so far away,and I wanted to attempt in person, but am finally doing remotely.  The slave will not allow me to replace it's backup firmware with the new image, saying "You do not have privilege to add/modify the configuration" despite being logged in as admin.  Logging in with the same admin account allows me to replace the backup on the primary.  What am I missing?  Do I need to put the primary on standby first? 

The procedure from support that worked is simply upgrade the master and reboot like it's a standalone.  It automatically upgrades the passive unit.  It did indeed.  Something with XG was actually easier than other firewalls!

Trying to update. 
All I get is an error: 

"When HA is configured, Firmware upgrade is not allowed on the non-primary machine"