Before upgrading the Apex One server and agent, take note of the following:
-
On the Apex One server, manually create a backup of the following forensic folder and database for Data Loss Prevention:
-
<Apex One server installation folder>\PCCSRV\Private\DLPForensicData
-
<Apex One server installation folder>\PCCSRV\Private\DLPForensicDataTracker.db
Important
Take note of the file location. After the upgrade process is complete, restore the forensic folder and database to the same location. -
-
The installation package includes updates to the firewall drivers. If you have enabled the Apex One firewall in your current server version, deploying the package may cause the following agent endpoint disruptions:
-
When Common Firewall Driver update starts, agent endpoints are temporarily disconnected from the network. Users are not notified before disconnection.An option on the Apex One web console, which is enabled by default, postpones the Common Firewall Driver update until the agent endpoint is restarted. To avoid the disconnection issue, ensure that this option is enabled.To check the status of this option:
-
Go toand click the Security Settings tab.
-
Go to the Firewall Settings section. The option is Update the Apex One firewall driver only after a system restart.
-
-
After deploying the package, the TDI driver's previous version still exists on the agent endpoint and the new version is not loaded until the endpoint is restarted. Users are likely to encounter problems with the Security Agent if they do not restart immediately.If the option to display the restart notification message is enabled on the web console, users are prompted to restart. However, users who decide to postpone the restart are not prompted again. If the option is disabled, users are not notified at all.The option to display the restart notification message is enabled by default. To check the status of this option:
-
-
Go toand click the Agent Control tab.
-
Go to the Alert Settings section. The option is Display a notification message if the endpoint needs to restart to load a kernel mode driver.
-
-
-
-
The Apex One server cannot upgrade to this version if:
-
The agent is running Login Script (
AutoPcc.exe
) at the time of server upgrade. Ensure that no agent is running Login Script before upgrading the server. -
The server is performing database-related tasks. Before upgrading, check the status of the server database (
DbServer.exe
). For example, open Windows Task Manager and verify that CPU usage forDbServer.exe
is 00. If CPU usage is higher, wait until usage is 00, which signals that database-related tasks have been completed. If you run an upgrade and encounter upgrade problems, it is possible that database files have been locked. In this case, restart the server computer to unlock the files and then run another upgrade.
-
Use one of following upgrade methods: