Installing and Upgrading WFI

Overview

This procedure describes how to install or upgrade TOS application extensions.

Upgrades

To upgrade an existing extension, download and install the latest version. You do not need to uninstall the existing version.

Upgrades to Vulnerability Mitigation App (VMA) provide newly-supported features and bug fixes, and integrate the latest changes from TOS.

  • Backward Compatibility: This extension is tested for backwards compatibility with the current and two previous versions of TOS.

  • Support and Bug Fixes:

    • Tufin provides customer support for the most recent version of this extension.

    • If there are issues related to TOS as well, support is provided if you are on the current version, or one of the previous two versions of TOS.

    • Bug fixes are applied only to the latest version of this extension.

To check your current version, click > About.

Before installation

  • Confirm that you have either a Google Chrome or Mozilla Firefox internet browser.

  • Extensions applications may require additional hardware and resources, depending on utilization. Consider expanding your resources if heavy use of the application is intended.

  • If you are not using TufinOS, we recommend that you open a support ticket for a walkthrough before installing an Extension application for the first time.

  • In SecureChange:

    • Create the necessary workflows before adding them to WFI.

    • Add the permission View Workflows tab and configure workflows for every WFI user or group of users who use WFI.

    • Create a WFI admin user with the following permissions:

      • View Settings tab and configure Orchestration Suite settings
      • View Workflows tab and configure workflows
      • Create and handle tickets on behalf of another user (via API only)

      Log into SecureChange with the WFI admin user.

If you are integrating a workflow with an ITSM solution, you will find an additional set of Prerequisites after the procedures for installing and getting Workflow Integrator started.

Install/upgrade WFI

You can download all installation files from the Customer Portal Download Center, either locally or to a relevant server.

  1. From the Download Center, select the Extension to download.

  2. After downloading the file, log in to the primary data node using SSH.

  3. Create a directory called /opt/extensions, and do the following:

    1. Copy and paste the downloaded installer run file to the directory.

    2. Run the command:

      # sh wfi-v<VERSION>.k3s.run

VMA is installed on the TOS cluster.

Troubleshooting installation

Error Message

Next Steps
Error: TOS isn't running

Potential cause: You are not using TufinOS, and the issue may be related to operating system user permissions.

Solution:  Contact Tufin Support for instructions.

Post installation/upgrade instructions

Set up the time zone

To change the time zone from inside the pod every time the pod restarts, run these commands:

# kubectl set env deployment/workflowintegrator TZ=<TIME_ZONE>
# kubectl set env deployment/workflowintegrator TZ=<TIME_ZONE>
# kubectl rollout restart deployment/workflowintegrator
# kubectl rollout restart deployment/workflowintegrator