Keep sslbrain up to date
Copy link to the page “Keep sslbrain up to date”Update the appliance to the signed version offered under Updates.
What you need
Copy link to the section “What you need”- An administrator sign-in to the appliance.
- A backup you have downloaded from the appliance.
Update the appliance
Copy link to the section “Update the appliance”- Open Appliance › Maintenance › Updates and click Check for updates.
- Read Release note and check that the page says the version is signed.
- Click Update now, then Confirm update. The update starts within a minute.
- Wait for the web interface to restart, then open the page again.
Check that it works
Copy link to the section “Check that it works”Last update shows Completed and Installed version shows the chosen version. Certificates on servers keep working during the update.
If it fails
Copy link to the section “If it fails”- The version is not signed yet and cannot be installed → wait and click Check for updates later.
- The appliance has no host controller → follow the instructions on the Docker page to add it or update from the host.
- Aborted, the version did not change → read Update log and follow The update fails.
- The web interface does not respond → use the console as described below.
Choose what updates automatically
Copy link to the section “Choose what updates automatically”On the same page, save your choices for:
| Switch | Effect |
|---|---|
| Appliance updates | Installs signed appliance versions. |
| Modules | Downloads and updates modules. Downloading does not activate them. |
| Integrations and service agents | Downloads integrations and the service agent’s installation files. |
| Automatic agent approval | Approves service agents using a one-time key or code. |
An install code from Servers › Add server approves the server regardless of the switch. Without a code, the server waits for an administrator. Downloads cannot be switched off while automatic approval of integration versions is enabled under Appliance › Integrations › Automatic.
Renewal always runs. Each installation plan’s Install on renewal decides whether the certificate is also installed, see Renewal.
Keep service agents up to date
Copy link to the section “Keep service agents up to date”The Service agent updates card offers Automatic (recommended), Manual and Off. Only an Owner can change the choice. The server checks the signature and reinstalls the version it was running if the chosen version does not check in within 10 minutes. See Keep service agents up to date.
When the web interface does not respond
Copy link to the section “When the web interface does not respond”On the virtual appliance, choose 6 Update to the latest version in the console menu. Wait for WORKED. or FAILED (exit N). On failure, choose 4 View logs, then 2 The controller: updates, restarts, signature checks.
If the software cannot start, choose 9 Danger zone and 6 Reinstall the appliance software (data kept). This reinstalls the running version and keeps the data. Docker has no console menu.
Keep the host up to date
Copy link to the section “Keep the host up to date”Host updates covers the virtual appliance’s console, login, SSH and controller. The default Security fixes only, automatically (default) leaves other fixes waiting for approval. Automatically in the service window applies fixes during the window; Manual only requires approval for all fixes.
Ubuntu downloads security updates automatically. A required restart takes place at 03:00. On a Docker host, you manage host updates yourself.