Install or Upgrade the Rules or Agent Packages
search cancel

Install or Upgrade the Rules or Agent Packages


Article ID: 286721


Updated On:


Carbon Black App Control (formerly Cb Protection)


Steps to install or upgrade the Rules or Agent packages on the App Control Server.


  • App Control Console: All Supported Versions
  • Rules Installer: All Supported Versions
  • Agent Installer: All Supported Versions


  • Remotely via the Console:

    1. Download the latest Rules or Agent installer
    2. Extract the executable from the zip. Ex: "MacHostPackageInstaller_VERSION.exe"
    3. Log in to the App Control Console and navigate to Settings (gear icon) > Update Agent/Rule Versions.
    4. Drag and drop (or browse to) the extracted executable.
    5. Confirm the relevant Installer has updated by navigating to: https://ServerAddress/InstallerVersions.php

    Note: The App Control Server will require full validation of the certificates associated with the Agent/Rule Installers. If the application server cannot complete this validation, follow the process below.

    Locally on the application server:

    1. Log in to the application server as the Carbon Black Service Account.
    2. Manually install the necessary certificates.
    3. Download the latest Rules or Agent installer and extract the executable from the zip:
      Example Filename: MacHostPackageInstaller_VERSION.exe
    4. Right click the exe > Run as administrator

    Note: If using a Managed Service Account a utility (such as PsExec) will need to be used to execute the installer. Example command with PsExec:

    PsExec.exe -u domain\msaaccount$ "C:\Path\To\WindowsHostPackageInstaller_VERSION.exe"

Additional Information

  • When a new Agent Host Package installer is uploaded to the Server the current Configlist Version is written to the Shepherd Config MinConfigListVersionForUpgrade
  • Updating the Agent/Rule Installers will require restarting of the App Control Server service. During this process access to the Console will temporarily be unavailable.
  • Do not navigate away from the Update Agent/Rule Versions page while uploads are processing.
  • If using Unified Management to manage multiple App Control Servers: New Rule and Agent Installers must be uploaded to each server separately. The Management Server does not broadcast these packages to the Managed Servers.