App Control: Agent Upgrades Failing on Server 2003 and XP
search cancel

App Control: Agent Upgrades Failing on Server 2003 and XP

book

Article ID: 288816

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

  • Multiple agent upgrade errors:
    Failed to download upgrade package: https://APPCSERVER/hostpkg/pkg.php?pkg=/ParityHostAgent_sha1.msi. Invalid file format

Environment

  • App Control Windows Agent: All Supported Versions
  • Windows Server 2003 and XP

Cause

  • The "ParityHostAgent_sha1.msi" installer file is required for agent upgrades on older Server 2003/XP systems due to SHA1 signature changes
  • The App Control Server requires that the latest VMware AppC SHA1 Root Certificate is installed on the server or it deletes the "ParityHostAgent_sha1.msi" file automatically

Resolution

  1. Install/verify that the new VMware AppC SHA1 Root Certificate is present on the server
  2. Install the latest agent host package from VMware docs
  3. Enable Agent Upgrades:
    • Verify that the Allow Upgrades option in the policy settings is correct for each policy you need to update.
    • Navigate to System Configuration > Advanced Option > Automatic Agent Upgrades > Enabled

Additional Information

Alternatively, you can manually upgrade the endpoints:
  1. Copy the installer file from the server here - "C:\Program Files (x86)\Bit9\Parity Server\Hostpkg\ParityHostAgent_Sha1.msi"
  2. Move it onto the endpoint and manually upgrade the agent using the steps in this KB