DCS Linux Agent Remote Upgrade from DCS 6.9.0/6.9.1 to DCS 6.9.2/6.9.3+

Products

• Data Center Security Server Advanced

Issue/Introduction

DCS Linux Agent remote upgrade is now supported for DCS 6.9.0 and DCS 6.9.1 Linux agents. 
DCS Linux Agent remote upgrade is also supported for DCS 6.9.2 to 6.9.3+

Environment

Data Center Security: Server Advanced

DCS Linux Agent Versions
6.9.0
6.9.1
6.9.2
6.9.3

OS
Amazon Linux 2
CentOS 7/8/9
RHEL 7/8/9
Rocky Linux 8/9
Oracle Linux 7/8/9
SLES 12, SLES 15 
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS

Cause

Remote Agent Upgrade from DCS 6.9.0 or 6.9.1 to DCS 6.9.2 or higher stopped working after Single Agent Support in DCS 6.9.2.

• Single Agent uses a different structure on the repository
  
  
• DCS 6.9.0 and 6.9.1 agents are unable to understand new repo structure used from 6.9.2 (Single Linux Agent) onwards.

Resolution

Remote agent upgrade is now supported for DCS 6.9.0 and 6.9.1 Linux agents

• A new Agent package (hotfix) is posted on respective repositories for DCS 6.9.0 (6.9.0.399) and DCS 6.9.1 (6.9.1.541) Agents
  
  
• For Remote Agent upgrade to work, the build numbers should be equal or higher than the above build numbers
  
  
• The new packages understand the repository structure used in Single Linux agent
  
  
• The updated 6.9.0/6.9.1 Agents (hotfix) supports remote upgrade to 6.9.2 or 6.9.3+

 

Release Version	Repository Name	Repository URL
DCS 6.9.0	6.9.0	https://linux-repo.us.securitycloud.symantec.com/6.9.0/
DCS 6.9.1	6.9.1	https://linux-repo.us.securitycloud.symantec.com/6.9.1/
DCS 6.9.2	SAL/1.1	Single Agent Repo, SAL/1.1 https://linux-repo.us.securitycloud.symantec.com/SAL/1.0/
DCS 6.9.3	SAL/1.2	Single Agent Repo, SAL/1.2 https://linux-repo.us.securitycloud.symantec.com/SAL/1.2/

 

Step 1) Update the Agent to a newer build of the same version (No Reboot Required) - Only for DCS 6.9.0 and DCS 6.9.1 Agents

The steps below will remotely update the 6.9.0 or 6.9.1 Agents to the latest hotfix using the same (6.9.0/6.9.1) repository

How to upgrade from DCS 6.9.0 or DCS 6.9.1 to a newer version of that Agent that can understand the repository details used by the 6.9.2 and 6.9.3 Agents

Below are the steps to be performed in the given sequence remote upgrade the Agents

Note: You may see a message that a reboot is required during this step, you do not have to reboot as long as your also doing Step 2 below

• • • From the Unified Management Console, select the assets or security groups where your 6.9.0/6.9.1 Agents are present. Click on the “Upgrade Now” button from ‘Assets’ / ‘Security Groups’ page to update the Agent to the hotfix version 
      
      
    • The Agent upgrade can be performed using the below command.
      • # /usr/lib/symantec/installagent.sh

Step 2) Setting the Agent to use the newer repository (No reboot required)

Note: Your DCS Management Server needs to be DCS 6.9.2 or DCS 6.9.3+ as the newer Unix SDCSS Agent Diagnostics policy is required. This step can also be used to update a 6.9.2 Agent to 6.9.3+

Works with Hotfixed 6.9.0 or 6.9.1 Agents, as well as 6.9.2 Agents
The example below outlines the steps to update to 6.9.3, if you want to update to 6.9.2, set the target version in the policy to 6.9.2

• • In the Java Console, create a copy of the latest Agent Diagnostic policy, then rename it "Upgrade to 6.9.3"
    • Edit the "Upgrade to 6.9.3" diagnostic policy
    • Click on Advanced agent settings
    • Check the box next to "Edit DCS Repository configuration"
    • Check the "update repo name for agent upgrade"
    • Select 6.9.3
      
      
      
      
  • Apply the "Upgrade to 6.9.3" policy to the security group you want to upgrade
    
    
    • Wait for the event to display that the repository has been changed to SAL/1.2
      
      

 

Step 3) Upgrade the Agent to DCS 6.9.2 or DCS 6.9.3 (Reboot may be required if the KMOD is also updated)
From the Unified Management Console, select the assets or security groups where your Agents are present. Click on the “Upgrade Now” button from ‘Assets’ / ‘Security Groups’ page to update the Agent to 6.9.2 or 6.9.3 

Wait for the Event "AgentUpgrade: Upgrade status ... successful ..Agent Version.. KMOD version"

The Agent upgrade can also be performed using the below command.
# /usr/lib/symantec/installagent.sh