LATEST VERSION: 1.9 - RELEASE NOTES
IPsec Add-On for PCF v1.9

Uninstalling the IPsec Add-on for PCF

Page last updated:

This topic describes how to uninstall the IPsec Add-on for PCF from your deployment and how to verify the uninstallation.

Uninstall IPsec Add-on

To uninstall the IPsec Add-on, follow the steps below:

(Optional) Set Optional Flag to True

When uninstalling IPsec, the optional flag must be set to true in the runtime config of the current deployment before the properties can be removed. If your flag is already set this way, you can continue with the uninstallation with the procedure Remove IPsec Properties below.

To set the optional flag to true, do the following:

  1. Retrieve the latest runtime config by running the following command:

    bosh -e my-env runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
    

    Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location that you want to save the runtime configuration.

    For example:

      $ bosh -e my-env runtime-config > /runtime/config/
    

  2. In the runtime config, set the optional flag to true under IPsec properties.

  3. Update the runtime config by running the following command:

    bosh -e my-env update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
    

    Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location of the runtime configuration you are updating.

    For example:

      $ bosh -e my-env update-runtime-config --name=ipsec /runtime/config/
    

  4. Navigate to your Installation Dashboard in Ops Manager.

  5. If you are using Ops Manager v2.3 or later, click Review Pending Changes. For more information about this Ops Manager page, see Reviewing Pending Product Changes.

  6. Click Apply Changes.

  7. Wait for the installation to complete.

Remove IPsec Properties

After your optional flag is set to true in your runtime config, then you can proceed with the removal of the IPsec properties.

To do this, follow the steps below:

  1. Retrieve the latest runtime config by running the following command:

    bosh -e my-env runtime-config > PATH-TO-SAVE-THE-RUNTIME-CONFIG
    

    Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location that you want to save the runtime configuration.

    For example:

      $ bosh -e my-env runtime-config > /runtime/config/
    

  2. In the runtime config, remove all IPsec properties under the releases: and addons: sections.

  3. Update the runtime config by running the following command:

    bosh -e my-env update-runtime-config --name=ipsec PATH-TO-SAVE-THE-RUNTIME-CONFIG
    

    Where PATH-TO-SAVE-THE-RUNTIME-CONFIG is the location of the runtime configuration you are updating.

    For example:

      $ bosh -e my-env update-runtime-config --name=ipsec /runtime/config/
    

  4. Navigate to your Installation Dashboard in Ops Manager.

  5. If you are using Ops Manager v2.3 or later, click Review Pending Changes. For more information about this Ops Manager page, see Reviewing Pending Product Changes.

  6. Click Apply Changes.

Verify the Uninstallation

To verify the uninstallation of the IPsec Add-on is successful, follow the steps below:

  1. Use bosh ssh to SSH into one of the VMs in your deployment. For more information, see BOSH SSH

  2. Run monit summary. If IPsec has uninstalled successfully, it does not show the ipsec process.

Create a pull request or raise an issue on the source for this page in GitHub