I have not done it but just in case you didn’t know, you can directly upgrade from Cisco Security Manager 3.3.1 to Cisco Security Manager 4.2. I presume you’ve purchased PR50-U-4.2-K9. Cisco TAC will not assist you in the upgrade exercise, as it’s not covered under the Cisco SAS service.