The FIPS 140-2 compliant Aerospike Server Enterprise Edition for US Federal (aka US Federal or FE) was first released with server 6.0.
- When upgrading from Aerospike EE version 4.9 or 5.x, follow the instructions in Storage Format Upgrade in 6.0 Release.
- Back up
/opt/aerospike/smd/security.smdin your system metadata (SMD) Directory Structure and
aerospike.conf, the Aerospike configuration file.
- Fully remove the Aerospike EE package with your package manager. Example:
dpkg --purge aerospike-server-enterprise
(Reading database ... 11993 files and directories currently installed.)
Removing aerospike-server-enterprise (184.108.40.206-1) ...
Purging configuration files for aerospike-server-enterprise (220.127.116.11-1) ...
dpkg: warning: while removing aerospike-server-enterprise, directory '/usr/lib/systemd/system' not empty so not removed
dpkg: warning: while removing aerospike-server-enterprise, directory '/opt/aerospike/smd' not empty so not removed
dpkg -l | fgrep aerospike
ii aerospike-tools 7.0.3 amd64 Aerospike server tools.
- Download and install the Aerospike FE package. Example:
- Remove the skeleton
aerospike.confinstalled and replace it with your backed-up configuraton file.
- Validate that your SMD and TLS certificates are still in place. If they aren't, use a backup of the previous SMD version.
- In US Federal, password authentication is disabled. Use mTLS-based PKI authentication or LDAP for authentication. Refer to TLS configuration and Configuring access control.