Updating/Upgrading
- How can I manage update strategies for groups and agents?
- What does Update Staged mean?
- Does Cyber Crucible require a reboot to update?
- Will Cyber Crucible update multiple versions at once?
- What is your software update strategy?
How can I manage update strategies for groups and agents?
Manage Group Update Settings
Groups have auto-updating enabled by default and agents follow their group update settings by default. Group update settings can be seen on the Groups page:
The first column shows if the group has auto-update turned on or off. The second column shows what version is approved for updates for agents in this group that are not overriding their group update settings.
When groups have auto-update turned on, the approved agent version column will show the latest agent version released and is not editable.
When groups have auto-update turned off, the approved agent version column is editable by double clicking the cell and selecting which version you want to approve. There also is an option to turn updating off completely (the “Do Not Update” option). Note that agents will not downgrade versions.
Note that the group update settings are applied when installing an agent for deciding which version the agent should install with. If the group has auto-update turned off and “Do Not Update” selected, then the agent will default to installing with the latest available agent version.
Manage Agent Update Settings
Agents will follow their group’s update settings by default, but agents can be configured to override their group update settings to follow their own. The Agent update settings can be seen on the Agents page:
When an agent is overriding their group update settings, the auto-update and approved agent version columns are editable where users may configure the agent’s update settings to follow instead of following the group update settings.
When an agent is following their group update settings, the auto-update and approved agent version columns are not editable and will show the group update settings.
What does Update Staged mean?
Updating Cyber Crucible is an automated, multi-step, protected process.
The update requires a reboot to take effect, after it is retrieved from the Cyber Crucible servers.
While some updates require multiple steps from very old versions, updates can skip multiple versions if necessary.
For example, the below machines downloaded 4.4.0.6, but did not reboot before 4.4.0.7 was released.
They now will have 4.4.0.7 running when they reboot.
In more detail, updating Cyber Crucible requires the following steps:
The Cyber Crucible software receives notice that an update is available.
This update notice is RSA signed, to ensure an attacker cannot force a malicious update. This update notice is verified to be true. This is part of Cyber Crucible’s zero trust product design.
The update is downloaded by the agent.
The update is validated, to ensure it has not been corrupted or otherwise tampered with.
The update stages the new software for installation. Cyber Crucible protection mechanisms in memory and on disk prevent it from being upgraded or the software replaced, except during boot.
Notification is sent to the Cyber Crucible serves that the update is ready and properly positioned, post verification.
Upon reboot, the update is applied to the software, and the Cyber Crucible software responds with the new version. The “Update Staged” notice disappears.
Does Cyber Crucible require a reboot to update?
Yes, there are a variety of memory, file system, and operating system protections Cyber Crucible software leverages to protect itself from attackers tampering or degrading its performance.
This is part of the Cyber Crucible zero trust product design in use.
Updating requires replacing the driver and services.
A window is created upon reboot, in which Cyber Crucible software allows a properly verified update to occur.
An update is ready for reboot when the following is observed in the Manage Agents page.
Will Cyber Crucible update multiple versions at once?
While updating multiple versions can rarely need multiple updates, updates normally are done all once, even if an agent is multiple versions behind the newest.
For example, the agents seen below first downloaded 4.4.0.6 to update. They did not reboot to apply the update before 4.4.0.7 was released. When 4.4.0.7 was released, the agents downloaded and staged 4.4.0.7.
When the systems reboot, Cyber Crucible 4.4.0.7 will be running, and the Staged Update message will disappear.
What is your software update strategy?
Cyber Crucible software does not rely on continual streams of signature updates, trying to catch up to attackers.
Around once per month, new features, zero trust methodology enhancements, and behavioral analytic module enhancements are released.
All software releases by Cyber Crucible are also tested, approved, and certified by the Microsoft Hardware Compatibility Program after passing our own rigorous testing.
Upgrading requires a reboot before an update is in effect.
Manage Group Update Settings
Groups have auto-updating enabled by default and agents follow their group update settings by default. Group update settings can be seen on the Groups page:
The first column shows if the group has auto-update turned on or off. The second column shows what version is approved for updates for agents in this group that are not overriding their group update settings.
When groups have auto-update turned on, the approved agent version column will show the latest agent version released and is not editable.
When groups have auto-update turned off, the approved agent version column is editable by double clicking the cell and selecting which version you want to approve. There also is an option to turn updating off completely (the “Do Not Update” option). Note that agents will not downgrade versions.
Note that the group update settings are applied when installing an agent for deciding which version the agent should install with. If the group has auto-update turned off and “Do Not Update” selected, then the agent will default to installing with the latest available agent version.
Manage Agent Update Settings
Agents will follow their group’s update settings by default, but agents can be configured to override their group update settings to follow their own. The Agent update settings can be seen on the Agents page:
When an agent is overriding their group update settings, the auto-update and approved agent version columns are editable where users may configure the agent’s update settings to follow instead of following the group update settings.
When an agent is following their group update settings, the auto-update and approved agent version columns are not editable and will show the group update settings.