Upgrade Agents

As a Set Administrator you can upgrade Agents on end user PCs, Macs, and Servers.

Upgrade Windows and macOS agents

Prerequisite for upgrade in the EPM Management Console

To upgrade the EPM agent on macOS Catalina 10.15, define the following computer profile on the endpoint:

  • Kernel Extension Configuration Profile: Approve CyberArk Kernel Extensions signed by Team ID: DF8U2CCCD8

  • System Extension Configuration Profile: Approve CyberArk System Extensions signed by Team ID: DF8U2CCCD8

  • PPPC - Grant Full Disk Access for CyberArk System Extension

Upgrade

  1. In the EPM Management Console, select My Computers and then select Upgrade or Uninstall Agents.

  2. You can group and filter the computers in your set on which agents are installed. For details, see My Computers.

  3. Select Computer > Check Agents with Older Version to select those computers whose agents are not upgraded with the latest policies.

  4. Select Computer > Invert Selection to select those computers whose agents are upgraded.

  5. Select Action > Upgrade Checked to upgrade the selected computers.

    Or,

    Select Action > Upgrade All Older to upgrade all computers whose agents are not upgraded with the latest policies.

  6. To stop the upgrade process, select Action > Cancel Upgrade.

Upgrade immediate enforcement agents

  1. In the EPM Management Console, select My Computers and then select Download Agent Installation to display the Download Agent Installation Package window.

  2. Select and download the relevant Immediate Enforcement Agent MSI installation file.

  3. Uninstall the Immediate Enforcement Agent from the endpoint machine.

  4. Install the Immediate Enforcement Agent MSI installation file.

Upgrade macOS agents

Upgrade the CyberArk EPM agent on macOS with the upgrade wizard.

Download package

  1. In the EPM Management Console, select My Computers and then select Download Agent Installation to display the Download Agent Installation Package window.

  2. In CyberArk EPM Agent for macOS platforms, click Download package to download the installation package.

  3. Unzip this package and extract the installation files:

    • CyberArkEPMConfiguration.json

    • Install CyberArk EPM.app.zip

    • SupportScripts

      • Jamf-Scripts-Examples

        • jamfCyberArkEPMInstall_11.5_PreconfiguredSet

        • jamfCyberArkEPMUninstall

    • release_version.txt

  4. Unzip Install CyberArk EPM.app.zip before starting.

Before upgrade

If agent self-defense is enforced, generate a unique secure token to use for upgrade. For information about creating this token, see Bypass agent protection.

Upgrade

  1. Double click Install CyberArk EPM to open the installation wizard, then click Install to start the upgrade process.

  2. Specify the credentials of the administrator who will install the EPM agent.

  3. If agent self-defense is enforced, the wizard prompts you for the secure token that suspends the CyberArk EPM agent self-defense. Specify the token you created before starting the upgrade wizard, then click Continue.

  4. Select the EPM configuration file. Click Open, then browse to the file and select it , and then click Open.

  5. In macOS Monterey, after you run the uninstall command, the following message appears.

    Click OK to continue.

  6. When the installation finishes, click Close.