Windows: Upgrading from 23.251 to the Latest Version

If you are running FileCloud in a high availability environment, to upgrade to the latest version, please Contact FileCloud Support.

FileCloud Support can help you upgrade or can provide a PDF with instructions if you would like to perform the upgrade without assistance.

Pre-upgrade

1. As always, make a full backup of your existing installation before upgrading.
   Backup on Windows

2. Beginning with version 23.252, a new group, Externals, automatically includes all External users, and the Everyone group does not include External users. External users who were include in the Everyone group in earlier versions of FileCloud are no longer included in it.
   
   The Externals group functions to prevent External users from having the same share, folder, and policy access as users in the Everyone group. 
   
   Previously created DLP rules that denied access to the Everyone group will now deny access to both the Everyone and Externals groups. Previously created DLP rules that allowed access to the Everyone group will continue to allow access to the Everyone group and not to the Externals group.
   
   If your use cases require that external users have the same access to files and folders as other users, you can give the Externals group the same permissions as the Everyone group by running the tool assignexternalsgroup.php.  See Assign the Externals Group the Same File Access as the Everyone Group for help.

3. Beginning in FileCloud 23.253, by default, a more granular dynamic content security policy replaces the existing content security policy in the .htaccess file. If you are upgrading, to make this change effective, you must make a small change to the Content-Security-Policy header in the .htaccess file:

   • Open the .htaccess file.

     in Windows:
     C:\xampp\htdocs\.htaccess

     in Linux:
     /var/www/html/.htaccess

   • Find the line that begins:
     Header set Content-Security-Policy:

   • Change set to setifempty:
     Header setifempty Content-Security-Policy:

     

4. If you have added custom rules to the .htaccess file, they will be overridden by the dynamic CSP feature. To solve this:
   Either:
   Disable the dynamic CSP feature with the setting TONIDOCLOUD_DYNAMIC_CSP_ENABLED. See Dynamic CSP in FileCloud.

   Or:
   Add the custom rules to the setting TONIDOCLOUD_DYNAMIC_CSP_EXTEND.

   To add the custom rules:

   1. On the FileCloud Server, open the cloudconfig file:

      In Windows:
      C:\xampp\htdocs\config\cloudconfig.php

      In Linux:

      /var/www/html/config/cloudconfig.php

   2. Add the setting in the format:

      define("TONIDOCLOUD_DYNAMIC_CSP_EXTEND",directive:source,source;[directive:source,source;]);
      

      
      

      for example:

      define("TONIDOCLOUD_DYNAMIC_CSP_EXTEND", "script-src:amazon.com;worker-src:amazon.com,google.com;");
      

       

5. If your system uses ServerLink, perform the following steps:

   1. Before upgrade, ensure all ServerLink nodes are fully synced and are at the same state.

   2. Make backups of all nodes as needed.

   3. Stop the FileCloud ServerLink client service in secondary nodes.

   4. Upgrade the primary node first.

   5. Upgrade each secondary node after upgrading the primary node.

   6. Start the FileCloud ServerLink client service in secondary nodes. (In HA setups, client service must run only in one of the servers from each secondary node.)

Note: All connected ServerLink nodes, both primary and secondary, must be upgraded to the same ServerLink version before enabling access to the site again.

• If your system uses MongoDB authentication or a custom IP binding, follow the steps at Disable MongoDB Authentication and IP Binding.

• If you are using or plan to use the Network Share Scanner, you are required to make some changes to the associated configuration files:

  • In C:\xampp\eventsapi\config.yaml:

    1. If you see the line data_path: data, delete it.

    2. If the field orchestrator is not set to etcd, change it to etcd:
       orchestrator: etcd

  • In C:\xampp\eventsapi\maestro-config.yaml

    • If you did not make changes to maestro-config.yaml previously:
      Replace the content of maestro-config.yaml with the content of maestro-config.dist.yaml.

    • If you made changes to maestro-config.yaml previously:
      Add the changes to maestro-config.dist.yaml, then remove maestro-config.yaml.
      Rename maestro-config.dist.yaml to maestro-config.yaml.

  • In C:\xampp\eventsapi\networker-config.yaml

    • If you did not make changes to networker-config.yaml previously:
      Replace the content of networker-config.yaml with the content of networker-config.dist.yaml.

    • If you made changes to networker-config.yaml previously:
      Add the changes to networker-config.dist.yaml, then remove networker-config.yaml.
      Rename networker-config.dist.yaml to networker-config.yaml.

Upgrade instructions

1. Before running the upgrade tool, confirm that each of your FileCloud services is running and that your storage is in a READY state.

2. Use the Windows Upgrade tool to do a full upgrade. (You cannot upgrade using the admin portal.)
   Upgrade using Update Tool (Windows Only)

3. For all upgrades, once upgrade is complete, refresh the browser using CTRL-F5 to clear any prior setup information from the cache.

Post Upgrade

Upgrade Windows environments using Solr and Solr+OCR

1. Upgrade FileCloud

2. Upgrade OpenJDK to version 17.

3. Set JAVA_HOME to the new version's path.

4. Log in to the FileCloud admin portal.

5. In the FileCloud Control Panel, and stop and restart Content Search.

   

Upgrade Windows environments using Solr and Solr+OCR

1. Upgrade FileCloud

2. Upgrade OpenJDK to version 17.

3. Set JAVA_HOME to the new version's path.

4. Log in to the FileCloud admin portal.

5. In the FileCloud Control Panel, and stop and restart Content Search.

   

FileCloud iOS mobile users

After you upgrade to FileCloud 23.261, to use FileCloud, iOS mobile users must upgrade to iOS 16+ and FileCloud 23.261.