Skip to content

Updating Keycloak


Hint - version changes

The new Keycloak version comes with some important changes, see Changes


Updating from Version 15.0.0 and Later

... with Automatic Ex- and Import of the Configuration

Hint - internal data structure changes

Due to Keycloak-internal data structure changes the installation script proceeds as follows:

  1. Export of the old Keycloak configuration (with timestamp and keycloak version).
  2. Move the old configuration (*.install-bak).
  3. Update Keycloak.
  4. Reimport the exported configuration.
  1. In a browser, log on to the SEAL Systems delivery platform with your logon data:

    https://delivery.sealsystems.de

    Hint - logon data

    You receive the logon data from your Technical Project Manager at SEAL Systems.

  2. Download the Keycloak - 23.0.0.66 - rpm folder. It is saved as Keycloak - 23.0.0.66 - rpm.zip.

  3. Extract .zip archive:

    unzip "Keycloak - 23.0.0.66 - rpm.zip"
    
  4. Change to the Keycloak - 23.0.0.66 - rpm directory and start installing the package:

    cd "Keycloak - 23.0.0.66 - rpm"
    
    sudo sh install.sh
    

    Hint - insufficient java version

    If the Java Version is insufficient, the install.sh script stops the installation with an error. Keycloak 22.0 requires at least version 17, see requirements.

  5. Open the required firewall ports:

    sudo sh firewall.sh
    
  6. Change to the common configuration directory:

    cd /opt/seal/etc
    
  7. Check the configuration files:

    Among other things the installation script checks for the presence of *.rpmnew and *.rmpsave files.

    • *.rpmnew files contain the new default configuration of the updated software.

    • *.rmpsave files contain the latest customized configuration. These files are kept after the old software version has been uninstalled. You can use them to restore your latest configuration in the updated software.

    You have to transfer the configuration settings from these files manually.

  8. Start the service:

    sudo systemctl start seal-keycloak
    
  9. Import the old Keycloak configuration into the new version.


Back to top