How To
ForgeRock Identity Platform
Does not apply to Identity Cloud

How do I perform a rolling upgrade of DS (All versions)?

Last updated Jan 12, 2023

The purpose of this article is to provide information on performing a rolling upgrade of DS.

Performing a rolling upgrade

A rolling upgrade is the recommended approach to upgrading; new versions of DS will install and work seamlessly with older versions of DS in a cluster. On connection, each DS node negotiates the protocol with the connected node, which allows a newer node to speak to an older node as necessary. Replication will also work between different versions of DS.


As with any software upgrade, we strongly recommend testing the procedure in your own development environment first and ensuring you have up to date backups and recovery plans in case you encounter any issues. You should also make sure you read the release notes relating to the new version of DS so that you are fully aware of all the changes.

A rolling upgrade (sometimes called a sequential upgrade) involves the following steps:

  1. Disable DS server 1 node from the load balancer.
  2. Stop DS server 1.
  3. Upgrade DS server 1 as described in the Upgrade.
  4. Check that DS server 1 is operating correctly after the upgrade.
  5. Re-enable the successfully upgraded DS server 1 node in the load balancer.
  6. Repeat steps 1 to 5 for each node until they are all upgraded.

See Also

FAQ: Upgrading DS


Related Training

ForgeRock Directory Services Core Concepts (DS-400)

Related Issue Tracker IDs


Copyright and Trademarks Copyright © 2023 ForgeRock, all rights reserved.