As per the documentation link given below, an Advanced Authentication (AA) appliance should be updated or upgraded only using the Configuration Console https://<IP_Address>:9443.

https://www.netiq.com/documentation/advanced-authentication-64/install-upgrade-guide/data/gettng_ltst_onln_offln_updts.html

There were reports that AA appliances were updated/upgraded by customers using 'zypper' command. After that, the Configuration Console 'Online Update' tile of appliance always show a red '!' sign even though channels have no pending packages/patches.

The notification can be cleared by clicking the 'Upgrade Appliance Now' link available on the 'Product Upgrade' tile of the Configuration Console. The Appliance requires a reboot to complete the process as a few packages seem to get installed.

Ensure that a complete backup of all AA appliances are available prior to proceed with 'Upgrade Appliance Now' link.