Upgrade Fortify from 17.20 to 19.20

[Nghogare]

Dear All,

We are currently using Fortify 17.20 in our current pipeline and we want to upgrade it to 19.20.

However Microfocus told us that, we cant have a direct upgrade to 19.20, we must need to upgrade to either 18.20 or 19.10 before we actually migrate to 19.20.

We can install 18.20 or 19.10 on our machines, but  i am concerned about existing project migrations from 17.20. 

Do we need to migrate all project to 18.20 or19.10 and then migrate to 19.20 along with the application server upgrade, or we need to do only application server upgrade from 17.20 to 18.20 or 19.10 and then upgrade all projects to 19.20. Could you please help me regarding this? 

[ebell]

Please review the following information https://community.microfocus.com/t5/Fortify-User-Discussions/WebInspect-Enterprise-upgrade-from-18-10-to-19-20/td-p/2757788#M8593

[rhelsens]

Are you referring to Fortify SSC (web portal), or Fortify SCA (scanner) or both?

The SCA scanner can be upgraded directly from 17.20 to 19.20 anytime. You can install the newest version of the scanner on your build servers or scanning machines and start scanning.

The SSC portal documentation states that you cannot directly upgrade Fortify SSC portal to 19.20 from anything earlier than 18.20. Therefore you would need to do 17.20 > 18.20 > 19.20.  So yes, you are correct.

[Nghogare]

Hi rhelsens,

I am going to migrate both.

I am concerned about migrating my existing projects to 19.20.

How it will need to be done?

[Amrityam_Rout]

Hi @Nghogare
SCA upgrade - simply uninstall 17.20 SCA version from any build servers or any local machine and then install 19.20 SCA directly also make sure to upgrade rule packs by running fortifyupdate in CMD ( you may follow other procedures to update rulepacks)

SSC- a) first upgrade from 17.20 to 18.20
b) second upgrade from 18.20 to 19.20

Take a back up of your existing 17.20 SSC WAR file along with SSC db to restore if there is any issue during upgrade
Stop the tomcat service. replace the 18.20 SSC war file in tomcat web apps folder.
Start the Tomcat service and login the SSC UI using a token (you can refer the SSC upgrade document for that)
You need to provide your SSC db details and upload seed bundles.folllow the next-next screens as per upgrade guide.

Once you have upgraded to 18.20 and then follow above similar steps to upgrade to SSC 19.20
The beauty is all the steps are documented so clearly that you won't face any problem.
In case of any problem you always can connect with microfocus support team.

[Nghogare]

Thank much Amrityam. the steps you mentioned are easy to understand.

Regarding the documentation, is that available on Microfocus website?

Do you have the link handy?

[Amrityam_Rout]

Hi @Nghogare,

You can refer below documents from microfocus website:

1) SCA - https://www.microfocus.com/documentation/fortify-static-code-analyzer-and-tools/1920/SCA_Guide_19.2.0.pdf    (Page no - 29)

2) SSC - https://www.microfocus.com/documentation/fortify-software-security-center/1920/SSC_Guide_19.2.0.pdf  (Page no -138)

Hope that helps!!

[Nghogare]

Thanks much Amrityam.