Windows
Manual Upgrade via CMD (Major)
These steps should be used when the Agent Product GUID has changed.
- Log in to the App Control Server.
- In Windows Explorer, navigate to "C:\Program Files (x86)\Bit9\Parity Server\hostpkg"
- Copy the files: ParityHostAgent.msi and configlist.xml to a location that is accessible to the endpoint being upgraded.
- From an administrative command prompt execute:
msiexec /i /qN "C:\Path\To\ParityHostAgent.msi" B9_CONFIG="C:\Path\To\configlist.xml" /L*v+ "C:\Temp\AgentUpgrade.log"
Manual Upgrade via CMD (Minor)
These steps should be used when the Agent Product GUID has not changed.
- Log in to the App Control Server.
- In Windows Explorer, navigate to "C:\Program Files (x86)\Bit9\Parity Server\hostpkg"
- Copy the file ParityHostAgent.msi to a location that is accessible to the endpoint being upgraded.
- Note: Do not rename ParityHostAgent.msi. Doing so for a minor upgrade will cause the upgrade to fail with the message "Error determining package source type"
- From an administrative command prompt execute:
msiexec /fvamus "C:\Path\To\ParityHostAgent.msi" B9_NOCONFIG=1 /L*v "C:\Temp\AgentUpgrade.log"
Upgrades via 3rd Party Utilities
NOTES:
- It is recommended to follow the same upgrade pacing as the Server (max 360 Agent upgrades/hr) when upgrading via 3rd party utilities.
- Agent upgrades via 3rd party utilities require temporarily enabling allow_upgrade=1 before issuing the relevant upgrade command.
- An Agent Config can be created for All Hosts in a specific Policy with this Value:
allow_upgrade=1
- Having this Agent Config received by the Agent, prior to issuing the upgrade command, would remove the requirement to script authenticating with the Agent and using the setconfigprop command.
- This Agent Config should only be used temporarily, and disabled after upgrades are completed.
- Issue the commands:
cd "C:\Program Files (x86)\Bit9\Parity Agent"
dascli password GlobalCLIPassword
dascli setconfigprop allow_upgrade=1
- Pass the relevant (Major/Minor) upgrade command
- Remove the flag:
cd "C:\Program Files (x86)\Bit9\Parity Agent"
dascli password InsertCLIPasswordHere
dascli setconfigprop allow_upgrade=0
macOS
Manual Upgrade via Terminal
- Log in to the App Control Server.
- In Windows Explorer, navigate to "C:\Program Files (x86)\Bit9\Parity Server\hostpkg"
- Copy the upgrade file Bit9MacInstall.bsx to a location that is accessible to the endpoint being upgraded
- From terminal issue the commands:
cd /Applications/Bit9/tools
./b9cli --password InsertCLIPasswordHere
./b9cli --tamperprotect 0
cd ~/Downloads
sudo bash Bit9MacInstall.bsx
- Re-enable tamper protection after the upgrade completes:
./b9cli --tamperprotect 1
Linux
Manual Upgrade via Terminal
- Log in to the App Control Server.
- In Windows Explorer, navigate to "C:\Program Files (x86)\Bit9\Parity Server\hostpkg"
- Copy the upgrade file Bit9RedHat{6,7,8 or 9}Install.bsx to a location that is accessible to the endpoint being upgraded
- From terminal issue the commands:
cd /opt/bit9/bin
./b9cli --password InsertCLIPasswordHere
./b9cli --tamperprotect 0
sudo bash Bit9Redhat{6,7,8,9}Install.bsx
- Re-enable tamper protection after the upgrade completes:
./b9cli --tamperprotect 1
All Platforms (via Console)
Automatically Upgrading
Agents that are in a Policy with the option Allow Upgrades (Server 8.9 or Earlier) or Automatically Upgrade Agents (Server 8.10 and Higher) turned on will be automatically upgraded after the Console Upgrade feature is turned on.
- Log in to the Console and navigate to Rules > Policies.
- Click Show Columns > Automatically Upgrade Agents (or Allow Upgrades) > Apply.
- Edit the relevant Policies accordingly.
Manually Upgrading
Agents that are in a Policy with the option Allow Upgrades (Server 8.9 or Earlier) or Automatically Upgrade Agents (Server 8.10 and Higher) turned off can be manually upgraded after the Console Upgrades feature is turned on.
- Log in to the Console and navigate to Assets > Computers.
- Check the box next to the relevant Computer(s) then: Action > Upgrade Computers.
Turning Console Upgrades On
When a new Agent Installer is uploaded to the Server the ability to upgrade Agents (manually or automatically) via the Console is turned off automatically. Before turning this feature on verify your Policy is configured for either Automatic or Manual Agent Upgrades accordingly.
- Log in to the Console and navigate to Settings > System Configuration > Advanced Options > Edit.
- Locate the section Carbon Black App Control Agent > Automatic Agent Upgrades (or Allow Agent Upgrades)
- Choose Enabled and click Save.