Upgrade the App Control Server

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Upgrade the App Control Server installation.

Environment

• App Control Server: All Supported Versions
• Microsoft Windows: All Supported Versions

Resolution

NOTE: The latest Cumulative Update for SQL Server must be installed before upgrading App Control Server. Please review the SQL Server Upgrade instructions.

 

1. Before proceeding with the steps below please be sure to first:
   • Verify the Supported Upgrade Paths
   • Verify SQL Server is on the latest Cumulative Update.
   • Verify the Operating Environment Requirements (OER)
   • Verify the Rules Installer is version 1.16+
   • Download the latest App Control Server installer.
   • The first upgrade to 8.10.2 (or higher) may take longer than normal and is expected.
2. Take a new, known-good, full backup of the DAS database
3. Log in to the App Control Server as the App Control Service Account.
4. If an Agent is installed on the application server it is recommended to temporarily:
   1. Temporarily disable Tamper Protection.
   2. Temporarily move the Agent to Local Approval.
5. Stop the Carbon Black App Control Server and Reporter Services
6. Make sure the SQL Agent and Backups/Scheduled Tasks are disabled during the upgrade, as they can cause a lock on the database, resulting in longer upgrades and failure.
7. Perform upgrade of the App Control Server software.
8. Validate the Carbon Black App Control Server and Reporter Services are started
9. Log in to the Console and verify Agents are beginning to show as Connected.

Note: Upgrading the App Control Server software does not upgrade the Agent or Rules Installers. This is done through a separate process.

Additional Information

• Some upgrades require a reclassification of rules. This takes place automatically after an upgrade, the Console could be down for 5-30 minutes on average while this classification takes place.
• During the Server upgrade: Agents will continue to enforce based on the Disconnected Enforcement Level specified in the Policy. By default, this is the same as the Connected Enforcement Level.
• Event information is stored locally in the Agent's cache and reported to the Server once the connection is restored.
• The App Control Console will not be available while the upgrade is taking place.
• For more detailed instructions, please refer to the "Server Installation Guide" for the version being upgraded to.
• For upgrading the App Control Agents, please see the relevant user guide for the version installed.
• App Control Server Install logs can be found here.