Update Operating System (Windows, Linux, macOS) With an Agent Installed
search cancel

Update Operating System (Windows, Linux, macOS) With an Agent Installed

book

Article ID: 288722

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Upgrade or patch the Operating System (Windows, Linux, macOS) with an Agent installed.

Environment

  • App Control Agent: All Supported Versions
  • Microsoft Windows: All Supported Versions
  • Linux: All Supported Versions
  • Apple macOS: All Supported Versions

Resolution

Windows

Major OS/Kernel Update (Ex: Windows 10 to Windows 11)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Agent (Desktop, Server, Embedded).
  2. Decide whether to
  3. Begin the major upgrade.

Minor OS/Kernel Update (Ex: Windows 11 version 23H2 to Windows 11 version 24H2)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Agent (Desktop, Server, Embedded).
  2. Navigate to Rules > Software Rules > Updaters and verify the following are Enabled:
    • Windows 8, 10 and Server 2012 Updates
    • Windows Update Temporary Files - Do Not Report
  3. Verify the Agent Configs from this article exist and are enabled.
  4. Agent can remain in its current Enforcement Level for a minor OS/kernel update.

 

Linux

Major OS/Kernel Update (Ex: RHEL 8.x to 9.x)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Linux Agent.
  2. Move the Agent into a Policy where the Mode is set to Disabled.
  3. Begin the major upgrade.
  4. After the upgrade has completed, move the Agent back to the relevant Policy.

Minor OS/Kernel Update (Ex: RHEL 9.2 to 9.5)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Linux Agent.
  2. Verify the Updater, "Red Hat Software Update" is turned on in Rules > Software Rules > Updaters.
  3. Agent can remain in its current Enforcement Level for a minor OS/kernel update

 

macOS

Major OS/Kernel Update (Ex: macOS 14.x to 15.x)

  1. Verify the OS/kernel version being upgraded to is fully supported by the macOS Agent.
  2. Move the Agent into a Policy where the Mode is set to Disabled.
  3. Begin the major upgrade.
  4. After the upgrade has completed, move the Agent back to the relevant Policy.

Minor OS/Kernel Update (Ex: macOS 15.1 to 15.3)

  1. Verify the OS/kernel version being upgraded to is fully supported by the macOS Agent.
  2. Verify the Updater, "Red Hat Software Update" is turned on in Rules > Software Rules > Updaters.
  3. Agent can remain in its current Enforcement Level for a minor OS/kernel update

Additional Information

  • More details can be found in the Managing Computers > "Operating System Updates on Linux Agents" section of the User Guide.
  • The Operating System Support Policy includes the target service levels:
    • Maintenance releases (service packs) - Target 30 days
    • Minor releases (Red Hat 6.6 to 6.7, Mac OS 10.10.4 to 10.10.5) – Target 30 days
    • Major releases (Windows 8.x to Windows 10, Mac OS 10.10 to 10.11) – Target 90 days
  • Updating the operating system to a version with a different major, minor or build number (for example, if any of the numbers in 10.0.35 change) with the Agent in place will require a Cache Consistency Check be run automatically after the update.
  • Verify the version of the operating system being deployed is currently supported by the Agent by visiting the App Control Documentation > Agent Documentation > Windows Agent OER.
  • More details can be found in the User Guide section, "Operating System Updates on Windows Agents".
Powered by Wolken Software