"Upgrade Blocked" status when attempting to upgrade App Control agents
search cancel

"Upgrade Blocked" status when attempting to upgrade App Control agents


Article ID: 286481


Updated On:


Carbon Black App Control (formerly Cb Protection)


Agent shows as "Upgrade Blocked" within the Assets > Computers > "Upgrade Status" column.


  • App Control Agent: All Supported Versions
  • App Control Console: All Supported Versions


The Configlist Version (CL Version) on the endpoint is lower than the CL Version for Upgrade as shown at the top of the page in the Console > Assets > Computers.


  1. Verify the Agent is showing as Connected in Assets > Computers.
  2. Remove the pending Agent Upgrade so the Configlist Updates to the endpoint will resume.
  3. Verify the Agent is not a Duplicate Computer, and re-register if necessary.
  4. Navigate to Assets > Computers > Show Columns > add CL Version > Apply.
  5. Verify the Agent's CL Version meets or exceeds "CL Version for Upgrade before attempting to upgrade again.
  6. If necessary, navigate to https://ServerAddress/shepherd_config.php and change the Property MinConfigListVersionForUpgrade to match the Current CL Version.

If the issue persists, or is impacting multiple machines at the same time, further investigation will be required.

Additional Information

  • When a new Agent Host Package installer is uploaded to the Server the current Configlist Version is written to the Shepherd Config MinConfigListVersionForUpgrade
  • If the Agent has been disconnected for an extended period, then it is possible the Configlist will need to be manually pushed.
  • Confirm "Automatic Agent Upgrades" (Server 8.9 or Earlier) or "Allow Agent Upgrades" (Server 8.10 and Higher) setting is enabled.
  • The Agent can also be manually upgraded, further options mentioned here.