How to apply RSA Authentication Manager 8.x base full kit versions and patches from the local hard drive using mounting option (script attached)
3 days ago
Originally Published: 2025-04-16
Article Number
000068028
Applies To
RSA Product set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue
Use this method if:
  • The size of the  Authentication Manager full kit or patch is too large and you cannot use the option of the web browser to upload the upgrade .iso image.
  • Neither the Windows Share nor NFS are applicable to be used during the upgrade process.
  • Using a CD/DVD is not an option because the system is in a remote location.
Resolution

To complete the patch process, follow the steps below:

Installation

  1. Go to the RSA Authentication Manager download page on the RSA Community.
  2. Click the link for the version of Authentication Manager that is deployed in your environment. For versions lower than Authentication Manager 8.4, please go to the RSA Authentication Manager product version page and select the correct version. 
  3. Download the am-update-<patch version>.zip file (for example, am-update-8.7.0.1.zip).
  4. Ensure that SSH access is enabled on the primary via the Operations Console (Administration > Operating System Access).
  5. Where SSH has been enabled, use a secure FTP client (for example, WinSCP) to copy the attached shell script into the /tmp directory on the Authentication Manager primary server.
  6. Use a tool such as PuTTY or via local console, to log in to the Authentication Manager primary server as the rsaadmin user. 
  7. Extract the *.zip file contents and move the am-update-<patch version>.iso to /tmp on the Authentication Manager primary.
  8. Download the rsa-am-DVD-Mount.sh script that is attached to this article and copy it to /tmp. This shell script will take as input the base version/patch iso image used for the upgrade of Authentication Manager using the CD/DVD method. 

Usage

  1. From the primary's command line, change to root: 
     sudo su -
  1. Change to the /tmp directory and change the permissions of the two files as follows:
cd /tmp
chmod 777 /tmp/<patchfilename>.iso
chmod 755 /tmp/rsa-am-DVD-Mount.sh
 
  1. Run the shell script with the following command:
 ./rsa-am-DVD-Mount.sh 
 

If the error message of ./rsa-am-DVD-Mount.sh: /bin/bash^M: bad interpreter: No such file or directory displays then follow the steps below to solve the formatting issue:

vim ./rsa-am-DVD-Mount.sh
:set fileformat=unix
:wq!

If you are logged in as the rsaadmin user, the following error message will display a warning that you should be a root user to run the script, as shown:

1.jpg

  1. You will be asked to enter the <patchfilename>.iso as shown below :
2.jpg

In this example, the am-update-8.7.0.0.0.iso is moved to /tmp:
4.jpg
  1. If the file exists in/tmp, the mount processes completes and a "Mount Successful" message will display. The script will exit automatically after 20 seconds.5.jpg
  2. Open the Operations Console and navigate to Maintenance > Update & Rollback.
  3. Tap the link to Configure Update Source and select the option to Use DVD/CD as the update source.
  4. Click Save.
6.jpg
  1. Press Scan for Updates. The result of the scan should show a successful scan for update and that there is one available update found:
8.jpg
  1. Press Apply update.
9.jpg
Notes
  • If the upgrade iso image does not exist in /tmp, an error is shown, as seen here:3.jpg