App Control: How to Upgrade Agents Using the Console

[#1]

Environment

• App Control Agent: All Supported Versions
• App Control Console: All Supported Versions

Objective

Upgrade Agents using the Console either manually or automatically.

Resolution

Automatically Upgrading Agents:
Agents that are in a Policy with the option Allow Upgrades turned on will be automatically upgraded after the Console Upgrade feature is turned on.

1. Login to the Console.
2. Navigate to Rules > Policies.
3. Click Show Columns > add Allow Upgrades > Apply.
4. Edit the relevant Policies accordingly.

 

Manually Upgrading Agents:
Agents that are in a Policy with the option Allow Upgrades turned off can be manually upgraded after the Console Upgrades feature is turned on.

1. Login to the Console.
2. Navigate to Assets > Computers.
3. Check the box next to the relevant Computer(s) then: Action > Upgrade Computers.

 

Turning Console Upgrades On:
When a new Agent Installer is uploaded to the Server the ability to upgrade Agents (manually or automatically) via the Console is turned off automatically. Before turning this feature on verify your Policy is configured for either Automatic or Manual Agent Upgrades accordingly.

1. Login to the Console.
2. Navigate to the gear icon > System Configuration > Advanced Options.
3. Scroll to the bottom of the page and click: Edit > Carbon Black App Control Agent > Automatic Agent Upgrades > Enabled.

Additional Notes

• Only Linux and macOS Agents will need Tamper Protection temporarily disabled to allow the upgrade.
• Windows Agents should have Tamper Protection enabled during the upgrade.
• By default the App Control Server will attempt to upgrade 1 Agent every 10 seconds when Automatic Upgrades is enabled.
• On average, total upgrade pacing is ~360 per hour assuming no errors occur. This pacing helps prevent unnecessary load on the App Control Server.
• The Agent will not receive any new Config List changes once it has entered the upgrade cycle.
• Anytime the App Control Server or Agent Installer is upgraded the Console Upgrade feature will be automatically turned off.
• Major Agent Upgrades (such as 7.x to 8.x) involve the same activity as Agent Initialization.

Related Content

App Control: Agents Won't Update CL Version When Agent Upgrade Is Pending
App Control: How To Upload Rule and Agent Packages to the Server
App Control: Intermittent Slow Console Performance