Environment
- App Control Agent: All Supported Versions
- App Control Console: All Supported Versions
Objective
Upgrade Agents using the Console either manually or automatically.
Resolution
Automatically Upgrading Agents:
Agents that are in a Policy with the option Allow Upgrades (Server 8.9 or Earlier) or Automatically Upgrade Agents (Server 8.10 and Higher) turned on will be automatically upgraded after the Console Upgrade feature is turned on.
- Login to the Console.
- Navigate to Rules > Policies.
- Add the following view criteria.
- On Server 8.9 or earlier:
- Click Show Columns > add Allow Upgrades > Apply.
- On Server 8.10 or higher:
- Click Show Columns > add Automatically Upgrade Agents > Apply.
- Edit the relevant Policies accordingly.
Manually Upgrading Agents:
Agents that are in a Policy with the option Allow Upgrades (Server 8.9 or Earlier) or Automatically Upgrade Agents (Server 8.10 and Higher) turned off can be manually upgraded after the Console Upgrades feature is turned on.
- Login to the Console.
- Navigate to Assets > Computers.
- Check the box next to the relevant Computer(s) then: Action > Upgrade Computers.
Turning Console Upgrades On:
When a new Agent Installer is uploaded to the Server the ability to upgrade Agents (manually or automatically) via the Console is turned off automatically. Before turning this feature on verify your Policy is configured for either Automatic or Manual Agent Upgrades accordingly.
- Login to the Console.
- Navigate to the gear icon > System Configuration > Advanced Options.
- Scroll to the bottom of the page and adjust the following setting.
- On Server 8.9 or earlier:
- Edit > Carbon Black App Control Agent > Automatic Agent Upgrades > Enabled.
- On Server 8.10 or higher:
- Edit > Carbon Black App Control Agent > Allow Agent Upgrades > Enabled.
Additional Notes
- App Control Server 8.10 included an update to the wording of these settings to clarify their use.
- Only Linux and macOS Agents will need Tamper Protection temporarily disabled to allow the upgrade.
- Windows Agents should have Tamper Protection enabled during the upgrade.
- By default the App Control Server will attempt to upgrade 1 Agent every 10 seconds when Automatic Upgrades is enabled.
- On average, total upgrade pacing is ~360 per hour assuming no errors occur. This pacing helps prevent unnecessary load on the App Control Server.
- The Agent will not receive any new Config List changes once it has entered the upgrade cycle.
- Anytime the App Control Server or Agent Installer is upgraded the Console Upgrade feature will be automatically turned off.
- Major Agent Upgrades (such as 7.x to 8.x) involve the same activity as Agent Initialization.
Related Content
