Skip to content
Docs sslbrain sslbrain.com

Step 5 of 8 · Updates

Keep service agents up to date

Copy link to the page “Keep service agents up to date”

Update the service agent from the server page and check that the selected version checks in.

What you need

Copy link to the section “What you need”
  • Administrator access to the appliance.
  • A server with a service agent that checks in.

Update one server

Copy link to the section “Update one server”
  1. Open the server under Servers › All servers.
  2. Find Technical › Service agent and select the offered version under Version.
  3. Click Update and confirm. If the appliance asks, click Download, activate and update or Activate and update.
  4. Wait for the next check-in. The service restarts during the update.

Check that it works

Copy link to the section “Check that it works”

The Service agent panel shows the selected Version and an updated Last check-in. The result shows Updated from … to ….

Next step

Copy link to the section “Next step”

Continue with Prove the domain is yours if you are connecting the server for the first time.

If it fails

Copy link to the section “If it fails”
  • Service agent updates are off. → ask the owner to select Manual or Automatic under Appliance › Maintenance › Updates.
  • The catalog is missing or expired → check the appliance connection to sslbrain Cloud (EU) and try again once the catalog has been fetched.
  • The update is waiting for the server → follow The service agent does not check in.
  • The result shows rollback or failure → read the result and reason code on the server page. Also read the update log on Windows or the service agent log on Linux.
  • The page asks for manual installation → use the instructions below.

How updates are controlled

Copy link to the section “How updates are controlled”

The owner chooses under Service agent updates on Appliance › Maintenance › Updates:

  • Automatic (recommended): one server first, then at most 10% on the same platform at a time. A failure stops automatic rollout of that version.
  • Manual: an administrator updates from the server page or server list.
  • Off: no updates are sent to service agents.

Integration updates and service agent updates are controlled separately.

Several servers need updating

Copy link to the section “Several servers need updating”

Select the servers under Servers › All servers and click Update service agent. Confirm and read the response showing how many updates were sent and skipped. Each server’s result appears on its page.

The update rolls back

Copy link to the section “The update rolls back”

If the selected version does not check in within 10 minutes, the server tries to reinstall the version it was running. The appliance shows the result and who reported it. A failed rollback needs action on the server; read the log before retrying. An update that has not been fetched within 24 hours is abandoned.

The page asks for manual installation

Copy link to the section “The page asks for manual installation”

Follow the server’s message if the selected version needs to be installed on the server. On Windows, the MSI can update the service agent and keep its settings:

msiexec /i https://sslbrain.com/agent.msi /qn /norestart

Without internet access, download the MSI on Servers › Add server › With service agent and copy it to the server; use the local file path in the command. If the page asks for an install code, use the Windows instructions or the Linux instructions.

Service agents without an install code

Copy link to the section “Service agents without an install code”

The Service agent panel shows whether the server is Installed with an install code. If the page asks you to reinstall with a code, click Create an install code and follow the command on Servers › Add server › With service agent. If the server looks like a reinstall, an administrator must check and approve it.