IBM QRadar

 View Only

 A few questions about upgrading Qradar on Azure

Paulo Silva's profile image
Paulo Silva posted Wed March 19, 2025 11:14 AM

Hello, soon I will have to perform an update of QRadar from version 7.5 UP7 to version UP9. However, the environment is hosted on Azure, and a series of questions have arisen during the planning process.

We took these questions to support, but it was recommended that we contact the Expert Labs team before proceeding. Before doing so, I would like to know if you have already encountered any doubts/issues that I will list in this post:

  1. Regarding the Secure Boot option, it appears that this option is natively enabled on virtual machines, and we cannot disable it as it is a prerequisite for Azure service compliance. What impact could this option have during the upgrade?

  2. We have some external disks mounted to store environment backups. After the upgrade, will QRadar automatically reconnect to these disks, or will we need to intervene manually?

  3. In our environment, the data disk and the operating system disk are separate. After the upgrade, is the script capable of remounting these disks automatically?

Rory Bray's profile image
Rory Bray posted Fri March 28, 2025 12:54 PM

Hi Paulo,

  1. There is an issue with secure boot when upgrading from UP7 to UP8. However, you are able to upgrade from UP7 to UP9 directly and that will work with secure boot enabled.
  2. Disks mounted via /etc/fstab should remain in-place after the upgrade. Are you mounting /store/backup itself, or some other non-QRadar directory/mount point?
  3. Separate OS and Data disk is correct for Azure, it will remain after upgrade.

Related Content