Install or Upgrade the Rules or Agent Packages

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Steps to install or upgrade the Rules or Agent packages on the App Control Server.

Environment

• App Control Console: All Supported Versions
• Rules Installer: All Supported Versions
• Agent Installer: All Supported Versions

Resolution

Remotely via the Console:

1. Download the latest Rules or Agent installer.
2. Extract the executable from the zip.
   

   Example Filename: MacHostPackageInstaller_VERSION.exe

3. Log in to the Console and navigate to: Settings (gear icon) > Update Agent/Rule Versions.
4. Drag and drop (or browse to) the extracted executable.
5. Confirm the relevant Installer has updated by navigating to: https://ServerAddress/InstallerVersions.php

Note: The App Control Server will require full validation of the certificates associated with the Agent/Rule Installers. If the application server cannot complete this validation, follow the steps here.

Locally on the application server:

1. Log in to the application server as the Carbon Black Service Account.
2. Manually install the necessary certificates.
3. Download the latest Rules or Agent installer and extract the executable from the zip:
   

   Example Filename: MacHostPackageInstaller_VERSION.exe

4. Right click the exe > Run as administrator

Note: If using a Managed Service Account a utility (such as PsExec) will need to be used to execute the installer. Example command with PsExec:

PsExec.exe -u domain\msaaccount$ "C:\Path\To\WindowsHostPackageInstaller_VERSION.exe"

If the Install is failing here are the steps for troubleshooting package installation. 

Additional Information

• When a new Agent Host Package installer is uploaded to the Server the current Configlist Version is written to the Shepherd Config MinConfigListVersionForUpgrade
• Updating the Agent/Rule Installers will require restarting of the App Control Server service. During this process access to the Console will temporarily be unavailable.
• Do not navigate away from the Update Agent/Rule Versions page while uploads are processing.
• If using Unified Management to manage multiple App Control Servers: New Rule and Agent Installers must be uploaded to each server separately. The Management Server does not broadcast these packages to the Managed Servers.