agent certificate problems after upgrade