Update Operating System (Windows, Linux, macOS) With an Agent Installed
search cancel

Update Operating System (Windows, Linux, macOS) With an Agent Installed

book

Article ID: 288722

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Upgrade or patch the Operating System (Windows, Linux, macOS) with an Agent installed.

Environment

  • App Control Agent: All Supported Versions
  • Microsoft Windows: All Supported Versions
  • Linux: All Supported Versions
  • Apple macOS: All Supported Versions

Resolution

Windows

Major OS/Kernel Update (Ex: Windows 10 to Windows 11)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Agent (Desktop, Server, Embedded).
  2. Decide whether to
  3. Begin the major upgrade.

Minor OS/Kernel Update (Ex: Windows 11 version 23H2 to Windows 11 version 24H2)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Agent (Desktop, Server, Embedded).
  2. Navigate to Rules > Software Rules > Updaters and verify the following are Enabled:
    • Windows 8, 10 and Server 2012 Updates
    • Windows Update Temporary Files - Do Not Report
  3. Verify the Agent Configs from this article exist and are enabled.
  4. Agent can remain in its current Enforcement Level for a minor OS/kernel update.

 

Linux

Major OS/Kernel Update (Ex: RHEL 8.x to 9.x)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Linux Agent.
  2. Move the Agent into a Policy where the Mode is set to Disabled.
  3. Begin the major upgrade.
  4. After the upgrade has completed, move the Agent back to the relevant Policy.

Minor OS/Kernel Update (Ex: RHEL 9.2 to 9.5)

  1. Verify the OS/kernel version being upgraded to is fully supported by the Linux Agent.
  2. Verify the Updater, "Red Hat Software Update" is turned on in Rules > Software Rules > Updaters.
  3. Agent can remain in its current Enforcement Level for a minor OS/kernel update

 

macOS

Major OS/Kernel Update (Ex: macOS 14.x to 15.x)

  1. Verify the OS/kernel version being upgraded to is fully supported by the macOS Agent.
  2. Move the Agent into a Policy where the Mode is set to Disabled.
  3. Begin the major upgrade.
  4. After the upgrade has completed, move the Agent back to the relevant Policy.

Minor OS/Kernel Update (Ex: macOS 15.1 to 15.3)

  1. Verify the OS/kernel version being upgraded to is fully supported by the macOS Agent.
  2. Move the Agent to Local Approval
  3. Begin the minor upgrade
  4. After the upgrade has completed, move the Agent back to the relevant Policy

Additional Information

  • More details can be found in the Managing Computers > "Operating System Updates on Linux Agents" section of the User Guide.
  • The Operating System Support Policy includes the target service levels:
    • Maintenance releases (service packs) - Target 30 days
    • Minor releases (Red Hat 6.6 to 6.7, Mac OS 10.10.4 to 10.10.5) – Target 30 days
    • Major releases (Windows 8.x to Windows 10, Mac OS 10.10 to 10.11) – Target 90 days
  • Updating the operating system to a version with a different major, minor or build number (for example, if any of the numbers in 10.0.35 change) with the Agent in place will require a Cache Consistency Check be run automatically after the update.
  • Verify the version of the operating system being deployed is currently supported by the Agent by visiting the App Control Documentation > Agent Documentation > Windows Agent OER.
  • More details can be found in the User Guide section, "Operating System Updates on Windows Agents".
Powered by Wolken Software