--- title: "Software Upgrade" slug: "fortanix-data-security-manager-software-upgrade" updated: 2026-04-01T07:34:38Z published: 2026-03-17T09:28:29Z canonical: "support.fortanix.com/fortanix-data-security-manager-software-upgrade" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.fortanix.com/llms.txt > Use this file to discover all available pages before exploring further. # Software Upgrade ## 1.0 Introduction This article describes the steps to upgrade Fortanix-Data-Security-Manager (DSM) to the latest version available. > [!NOTE] > NOTE > > - The users must create a support ticket before proceeding with the upgrade. > - It is recommended to perform prechecks to ensure the cluster is healthy and ready for the upgrade. ## 2.0 Prerequisites Ensure the following: - A user with a system administrator role in Fortanix DSM. - A user with a shell administrator role in Fortanix DSM, if you are running the pre-checks. ## 3.0 Fortanix DSM Pre-Upgrade Checks For pre-upgrade checks before performing the DSM software upgrade, refer to one of the following guides: - *For manual pre-checks, refer to the*[*Fortanix DSM Software Upgrade Manual Prechecks*](/v1/docs/fortanix-data-security-manager-software-pre-upgrade-checks-manual)*.* - *For automated pre-checks using Sensu, refer to the*[*Fortanix DSM Software Automatic Prechecks Using Sensu*](/v1/docs/fortanix-data-security-manager-upgrade-prechecks-using-sensu-automated)*.* ## 4.0 Fortanix DSM Upgrade Steps Perform the following steps to upgrade the Fortanix DSM when a new software version is available: 1. Log in to the Fortanix DSM user interface (UI) using valid credentials. 2. Navigate to the **System Administration** account. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_Cluster_Landing_Screen(1).png) **Figure 1: System administration account** > [!NOTE] > NOTE > > It is recommended to run a manual backup and suspend the `cron` jobs before initiating the upgrade. 3. Click the **Software update** menu item in the DSM left navigation panel. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/DSM_Software_Upgrade_Menu_Item(1).png) **Figure 2: Software update tab** 4. On the **UPDATE SOFTWARE** tab, upload the package using one of the following ways, depending on the network connectivity : ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (1700)(1).png) **Figure 3: Upload the package** 1. **Online Cluster**: If the cluster is connected to the internet, enter the URL of the target version from [*here*](https://fortanix.zendesk.com/hc/en-us/articles/10644636415380-DSM-Installation-Package-Downloads-on-prem)**to upload the package to the cluster. This distributes the package to all the nodes in the cluster. 2. **Offline Cluster**: If the cluster is not connected to the internet, first download the package to a server with cluster access. Then, click **UPLOAD NEW SOFTWARE** to upload the package to the cluster. 5. After the cluster downloads and distributes the package, the status appears as “**Staged**” on the left side of the screen, and **INSTALL**becomes active. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (1701)(1).png) **Figure 4: Install the package** 6. Click **INSTALL**. A prompt will appear to confirm the installation. Click **Install**again to proceed. 7. Run the following command on one of the nodes (CLI) to view the installation progress: ```bash watch sudo kubectl get pods,nodes -o wide ``` ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (932).png) **Figure 5: View installation progress** 8. When the deploy pod in the pod list reaches the **COMPLETED**status, **FINISH**becomes enabled. Click **FINISH**, and the Fortanix DSM UI updates to display the latest software version as **DEPLOYED**. 9. Alternatively, run the following command on one of the nodes in the cluster to check the version deployed: ```bash cat /etc/fortanix/sdkms_version/sdkms_version ``` > [!NOTE] > NOTE > > Ensure to re-enable the `cron` jobs after completing the upgrade. ## 5.0 Fortanix DSM DR Node Upgrade Steps The Disaster Recovery (DR) node upgrade process for Fortanix DSM consists of steps to update the DR node with the latest software and reintegrate it into the cluster. This process maintains the security and functionality of your DSM infrastructure. Perform the following steps to upgrade a DR node: 1. Run the following command to remove and clean up the existing DSM software on the DR node: ```bash /opt/fortanix/sdkms/bin/sdkms_cleanup.sh ``` > [!NOTE] > NOTE > > DR node cleanup must be performed after the primary cluster has been successfully upgraded. 2. After cleaning up the existing DSM software, install the new DSM package to prepare the DR node for the upgrade. 3. Run the following command on any node within the primary cluster to generate a token that the DR node will use to join the cluster: ```bash kubeadm token create ``` 4. Run the following command to add the DR node to the primary cluster, using the token generated in *Step 3*: ```bash sdkms-cluster join --peer=ip_address –token= --self=self_ip_address ``` 5. Run the following command to remove the DR node from the cluster once it has successfully joined: ```bash sdkms-cluster remove --force --node nodename ``` Fortanix Data Security Manager (DSM) is the world’s first cloud service secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as other secrets such as passwords, API keys, tokens, or any blob of data. Your business-critical applications and containers can integrate with Fortanix DSM using legacy cryptographic interfaces (PKCS#11, CNG, and JCE) or using the native Fortanix DSM RESTful interface. ## Related - [Software Pre-Upgrade Checks - Manual](/fortanix-data-security-manager-software-pre-upgrade-checks-manual.md) - [Software Post-Upgrade Checks](/fortanix-data-security-manager-software-post-upgrade-checks.md) - [Group Key Encryption Key](/fortanix-dsm-group-key-encryption-key.md) - [Fortanix DSM with CyberArk Enterprise Password Vault](/fortanix-dsm-with-cyberark-enterprise-password-vault.md)