TrueNASTrueNAS Stable Version Documentation
This content follows TrueNAS 24.10 (Electric Eel) releases. Use the Product and Version selectors above to view content specific to a different software release.

Updating SCALE Enterprise HA

TrueNAS Enterprise
This procedure only applies to SCALE Enterprise (HA) systems. If attempting to migrate from CORE to SCALE, see Migrating from TrueNAS CORE.

Updating Enterprise (HA) Systems

If the system does not have an administrative user account, create the admin user as part of this procedure.

Take a screenshot of the license information found on the Support widget on the System > General Settings screen. You use this to verify the license after the update.

To update your Enterprise (HA) system to the latest SCALE release, log into the SCALE UI using the virtual IP (VIP) address and then:

  1. Check for updates. Go to the main Dashboard and click Check for Updates on the System Information widget for the active controller. This opens the System > Update screen. If an update is available it shows on this screen.

  2. Save the password secret seed and configuration settings to a secure location. Click Install Manual Updates. The Save configuration settings window opens. Select Export Password Secret Seed then click Save Configuration. The system downloads the file with sensitive system data. Keep this file in a secure location.

Why should I save the secret seed?

The secret seed is used to decrypt encrypted fields in the TrueNAS configuration database. Various fields are encrypted because they might contain sensitive information such as cryptographic certificates, passwords (not user login passwords), or weak hashing algorithms (for example, NT hashes of SMB users).

When a config file is restored without the secret seed, encrypted fields are set to empty values. This means various services can break due to the missing information. Examples are SMB via local accounts and apps. Always select the option to save the secret seed when downloading the system config file!

Note, the secret seed does not store local users passwords in any form, only a hash of the password sufficient for authentication. Hashed passwords are not encrypted.

What happens if I do not save the secret seed? You might be prompted to enter a default password or reset the password. The UI should allow users to log into the system with their current password but might be prompted to enter a new password. Users can connect a keyboard and monitor to the system and enter a new password if they cannot log into the web UI or reset the current password.

Is there a default password for the system? Enterprise users are issued a password to enter if prompted for such a password after the system resets. Community users are not issued a default password and the system does not generate a default password for this purpose. If you cannot log into the UI with the current administration password, connect a keyboard and monitor to the system server to reset the password.

After logging into the system, recheck all system settings to verify the configurations are correct, and then test to verify the system is working as desired. When complete and the system is operating per the desired configuration, download and save the system configuration with the secret seed option selected and keep it in a secure location.

It is a best practice to always save the secret seed with the system configuration file after making system configuration changes to have a current backup copy to use should the need arise.

  1. Select the update file and start the process. Click Choose File and select the update file downloaded to your system, then click Apply Update to start the update process. After the system finishes updating it restarts.

  2. Sign into the TrueNAS UI. If using root to sign in, create the admin account now. If using admin, continue to the next step.

  3. Verify the system license after the update. Go to System > General Settings. Verify the license information in the screenshot of the Support widget you took before the update matches the information on the Support widget after updating the system.  

  4. Verify the admin user settings, or if not created, create the admin user account now. If you want the admin account to have the ability to execute sudo commands in an SSH session, select the option for the sudo access you want to allow. Also, verify Shell is set to bash if you want to give the admin user the ability to execute commands in Shell. To set a location where the admin user can save or browse files, and then select the dataset path in Home Directory. If set to the default /nonexistent files are not saved for this user.

  5. Test the admin user access to the UI.

a. Log out of the UI.

b. Enter the admin user credentials in the sign-in splash screen.

  1. After validating access to the TrueNAS UI using the admin credentials, disable the root user password. Go to Credentials > Local User and edit the root user. Select Disable Password and click Save.

Finish the update by saving your updated system configuration file to a secure location and create a new boot environment to use as a restore point if it becomes necessary.