App Control: How to Upgrade an App Control Server

[#1]

Environment

• App Control Server: All Supported Versions
• Microsoft Windows: All Supported Versions

Objective

Upgrade an App Control Server installation.

Resolution

NOTE: The latest Cumulative Update for SQL Server must be installed before upgrading App Control Server.
Please review the SQL Server Upgrade instructions.

 

1. Before proceeding with the steps below please be sure to first:
   • Verify the Supported Upgrade Paths.
   • Verify the Operating Environment Requirements (OER).
   • Verify 3x the size of the database as free disk space where database files stored.
   • Verify Growth Restrictions for database tables.
   • Download the latest App Control Server installer from the Release Information and Downloads.
2. Take a new, known-good, full backup of the DAS database
3. Login to the App Control Server as the App Control Service Account.
4. If an Agent is installed on the application server it is recommended to temporarily:
   1. Disable Tamper Protection.
   2. Move it to Local Approval.
5. Make sure the SQL Agent and Backups/Scheduled Tasks are disabled during the upgrade, as they can cause a lock on the database, resulting in longer upgrades and failure.
6. Stop the App Control Server and App Control Reporter services.
7. Perform upgrade of the App Control Server software.
8. Once completed, login to the Console and verify Agents are beginning to show as Connected.

Note: Upgrading the App Control Server software does not upgrade the Agent or Rules Installers. This is done through a separate process.

Additional Notes

• Some upgrades require a reclassification of rules. This takes place automatically after an upgrade, the Console could be down for 5-30 minutes on average while this classification takes place.
• During the Server upgrade: Agents will continue to enforce based on the Disconnected Enforcement Level specified in the Policy. By default, this is the same as the Connected Enforcement Level.
• Event information is stored locally in the Agent's cache and reported to the Server once the connection is restored.
• The App Control Console will not be available while the upgrade is taking place.
• For more detailed instructions, please refer to the "Server Installation Guide" for the version being upgraded to.
• For upgrading the App Control Agents, please see the relevant user guide for the version installed.

Related Content

• App Control: What Happens When an Agent is Disconnected?
• App Control: How to Find the Service Account Used for the App Control Server Service
• App Control: How To Upload Rule and Agent Packages to the Server
• App Control: How to Upgrade Agents Using the Console
• Create a Full Database Backup - SQL Server
• Carbon Black App Control Documentation