The IdM server packages are updated when the system packages are updated:
[root@ipaserver ~]# yum update
This is the easiest way to upgrade the server because it automatically pulls in updates for related services, like SSSD, which provide Identity Management functionality.
To upgrade the IdM server packages specifically, run
yum on the master server:
[root@ipaserver ~]# yum update ipa-server
It can take several seconds for the update process to apply all of the changes.
It is not necessary to update all servers and replicas at precisely the same time; the IdM servers will still work with each other and replicate data successfully. The older IdM servers will simply lack the new features.