Seqrite Endpoint Protection 8.6

EPP 8.4.x to EPP 8.6 Upgrade

Print Friendly, PDF & Email

Overview

Seqrite Endpoint Protection (EPP) is an integrated solution for managing and regulating multiple Endpoint Protection products across different geographical locations. IT administrators can easily connect to the server from any location to view the latest security status, configure product policies, receive notifications, and address critical network events from a single dashboard.

Important:

  • For multisite deployments, upgrade the AGR (Control Centre) first, followed by the SSR (Site Server).
  • Before proceeding for server upgrade take a backup at multiple locations.
  • The backup will be restored only on 8.6 server.

Prerequisites

  • EPP Version – EPP 8.6 .
  • Operating System– Ubuntu 24.04.3 and above with signed Kernel Version 6.14 to 7.0
  • Take a backup of 8.4.x server. Refer the Disaster Recovery Steps guide.

Important Prerequisite: Encrypted USB Devices

USB devices encrypted using the SQ Encryption Utility may become inaccessible when migrating between EPP On-Premise and EPP On-Cloud, or during any other migration that changes the Product Key.

Before migration:

  • Identify USB devices encrypted using the SQ Encryption Utility.
  • Back up the data stored on the affected devices.
  • Format the affected USB devices.

After migration:

  • Restore the backed-up data to the USB devices.
  • Re-encrypt the devices using the new Product Key.

Caution: Do not proceed with a migration that changes the Product Key until the encrypted USB devices have been checked and the required steps have been completed.

Disk Space Requirements:

  • Download: At least 25 GB disk space must be available.
  • Installation: At least 21 GB disk space must be available. (Ubuntu 24.04.3)

Note: Users can upgrade from 8.4.1 or 8.4.2 to 8.6.

How to Upgrade to EPP 8.6 Server

The upgrade process is executed from the 8.4.x server console. Verify that all prerequisites are fulfilled before beginning the installation to upgrade to EPP 8.6 Server.

Manual Upgrade for EPP 8.4.x Server

  1. Log in to the server machine as root using Vsphere, MobaXterm, or a physical machine.

  2. Place the upgradepack.sh script on the server machine.

  3. Copy the upgradepack.sh file to /opt/Seqrite_EndPoint_Security/deployment/clientpackager/upgradepack

  4. Execute bash upgradepack.sh from the terminal/console.

  5. You can check the execution status of upgradepack.sh script by checking logs which is present in following location: /opt/Seqrite_EndPoint_Security/log/upgradepack.log

    Note: In case of a failure, the script automatically rolls back the changes. No manual intervention is required. The rollback status can be verified in the upgradepack_rollback.log file located at: /opt/Seqrite_EndPoint_Security/log/upgradepack_rollback.log

  6. Once executed, avoid human interaction (e.g., interrupting with ctrl+c or ctrl+z).

  7. Offline Activation: After enabling the new features, proceed with offline activation tool to activate the newly enabled functionality.

Note:

  • After a successful upgrade, the user will be redirected to the EPP 8.6 console and can log in with EPP 8.4.x credentials.

  • Check the execution status of upgradepack.sh in the logs located at /opt/Seqrite_EndPoint_Security/log/upgradePacklogs.txt.

  • In case of upgrade failure, the previous data remains unchanged. The user will be redirected to the EPS 8.4.x server login page. Check the failure status in /opt/Seqrite_EndPoint_Security/log/upgradeLogsTestStatus.txt.

Roaming Service

Roaming Service will be in disabled state after upgrade if it is enabled/disabled in 8.4.x console. Re-enable the Roaming Service after server upgrade.

EDR

Reinstall the EDR setup using the latest available version (e.g., Version 2.2) on both the Control Center and Site Server.

Important: Do not upgrade the client before completing the EDR installation. The client upgrade must be performed only after the EDR installation is successfully completed.

Patch Management

The Administrators can use existing 8.4 patch server with 8.6 as well.

How to Upgrade to Patch Management Server

Before upgrading Patch Management services:

  • Administrators can use existing 8.4 patch server with 8.6 as well
  • Administrators can configure patch management server if not installed

Note:

  • Perform patch sync with the existing Patch server to the defined policies to use the Patch Management feature. (this is optional)
  • Perform patch scan and patch install on the registered endpoints.

Standalone Update Manager Upgrade

  • Install the latest 8.6 standalone Update Manager to distribute updates to the configured endpoints. The update manager downloads updates for both 10.13 and 10.15 client versions across Windows, Linux, and Mac OS platforms.

Client Upgrade

This section covers upgrading clients from v8.4.x with Client Agent (CA) version 10.13.x to EPP 8.6 CA 10.15.0.0 version for Windows and Linux.

Note: Upgrade is available for Windows and Linux clients only.

How to Upgrade Windows Client

  1. Log in to the console page.
  2. Go to the Client Status page.
  3. Select the endpoint that needs to be upgraded.
  4. From the Client Action, select Upgrade Client.

    5. Alternatively, you can send this command to upgrade multiple clients from Group Action.

  5. Click Submit.

    6. Note: On the Upgrade Settings screen, change the maximum number of days value from its default value. After selecting the required value, click Upgrade to proceed.

  6. View and verify status logs in the Action log section.
  7. A consent prompt appears. Accept the consent and it starts reboot the system to upgrade.
    The client is now upgraded to EPP 8.6 CA v10.15.0.0 successfully.

Important:
It is recommended to upgrade to the latest version 10.15.0.0 client to avoid discrepancies, such as the generation of encryption reports.

How to Upgrade Linux Client

  1. On the console, go to the Client Status page.
  2. Select the endpoint for upgrade.
  3. From the Client Action list options, select Upgrade Client.
  4. Click Submit.
    The client is now upgraded to EPP 8.6 CA (10.15.0.0 – Windows and Linux) successfully. View and verify status logs in the Action log section.
    Note: Upgrade supports Linux 64-bit only.

How to Upgrade Mac Client

Upgrade for Mac clients is currently unavailable. Users must reinstall the Mac client and upgrade it to the latest version.

Update Agent Upgrade

To upgrade the Update Agent to version 8.6:

  • Ensure all operating system host files include the hostname and IP address of the Update Agent for seamless installation.
  • The update agent downloads updates for 10.15.x client versions across Windows, Linux, and Mac OS platforms.
Was this page helpful?
Yes No