When a new Agent installer is uploaded to the Server, the global option to upgrade Agents (manually or automatically) via the Console is turned off. Before turning this feature on, verify which Policies are configured to start Automatic Upgrades and which are not, and adjust accordingly.
Log in to the Console and navigate to Rules > Policies.
Click Show Columns > Automatically Upgrade Agents (or Allow Upgrades) > Apply > Review which Policies are set for automatic upgrades
Agents that are in a Policy with the option Automatically Upgrade Agents (Server 8.10+) or Allow Upgrades (Server 8.9+) checked on will start upgrading immediately after the Console Upgrade feature is turned on.
Log in to the Console and navigate to Settings > System Configuration > Advanced Options > Edit.
Locate the section Carbon Black App Control Agent > Automatic Agent Upgrades (or Allow Agent Upgrades)
Choose Enabled and click Save.
To Start Agent Upgrades
To upgrade ALL agents in a Policy > Go to Rules > Policies > Edit the relevant Policies > Select the Checkbox for "Automatically Upgrade Agents"
To upgrade ONE agent at a time > Go to Assets > Computers > Check the box for the relevant Computer(s) > Action > Upgrade Computers
In Windows Explorer, navigate to "C:\Program Files (x86)\Bit9\Parity Server\hostpkg"
Copy the file ParityHostAgent.msi to a location that is accessible to the endpoint being upgraded.
Note: Do not rename ParityHostAgent.msi. Doing so for a minor upgrade will cause the upgrade to fail with the message "Error determining package source type"
It is recommended to follow the same upgrade pacing as the Server (max 360 Agent upgrades/hr) when upgrading via 3rd party utilities.
Agent upgrades via 3rd party utilities require temporarily enabling allow_upgrade=1 before issuing the relevant upgrade command.
An Agent Config can be created for All Hosts in a specific Policy with this Value:
allow_upgrade=1
Having this Agent Config received by the Agent, prior to issuing the upgrade command, would remove the requirement to script authenticating with the Agent and using the setconfigprop command.
This Agent Config should only be used temporarily, and disabled after upgrades are completed.