For versions of TFA greater than 12.1.2.4.1 the way TFA secures it’s communication among nodes has changed. This new TFA communication change has to be completed across ALL nodes of the TFA configuration in order to avoid communication problems. TFA will be upgraded on each node locally as part of the application of the PSU. This process will simply apply the new software and restart TFA but will not put in place the new connection model. This is phase 1 of the TFA upgrade.
For phase 2, TFA will wait for up to a maximum of 24 hours within which to complete the application of the PSU on all nodes before automatically completing the implementation of the new TFA communication model. Once TFA has been upgraded on all the nodes then the phase 2 should occur within 10 minutes. Until the application of the PSU has been completed on all the nodes (phase 1) and the new TFA communication model has been implemented (phase 2) TFA may display messages stating:
TFA-00103 – TFA is not yet secured to run all commands
Once TFA has been upgraded on all nodes in the configuration (phase 1) TFA will generate new SSL keys and send them to the valid nodes in the cluster and restart TFA on each of these nodes (phase 2) . On completion of this second phase TFA should be able to process commands normally using the new communication model.