Upgrading Endpoint Security Clients

This section includes procedure for upgrading endpoint clients:

You can upgrade to E80.x clients from earlier versions of E80.x clients with these requirements:

• You must upgrade both the Initial Client and the Software Blade Package at the same time. You cannot upgrade the Initial Client by itself.
• During the upgrade you cannot remove the Full Disk Encryption Software Blade.
• You can change all other Software Blades and all Software Blade configuration settings.

Client upgrade workflow:

1. For E80.20 and earlier Endpoint Security Clients with legacy (before E80) VPN clients, remove all Firewall related blades. Do this before the upgrade.
2. Make sure that the clients are connected to an Endpoint Security Management Server of the higher version.
3. Get a complete package with Initial Client and the Software Blade Package. Get this from the Software Deployment tab in one of these ways:
   • Download a package from the Packages for Export window.
   • In the Software Deployment Rules window, right-click in a rule and select Download Package. This includes the Initial Client and Software Blade Package.
4. Deploy the package.

Related Topics Upgrading with Deployment Rules Upgrading with an Exported Package Gradual Upgrade

Upgrading with Deployment Rules

The Client Settings Policy controls if users can postpone an upgrade installation or if the upgrade is installed on clients immediately. You can configure the settings in the Client Settings Policy. Edit the Default installation and upgrade settings.

To upgrade clients with Software Deployment Assignments:

1. In the Deployment tab, select a rule and change its Endpoint Client Version in the Client Version column.

   All computers are assigned to that Policy rule will be upgraded.

2. Optional: Change who the rule applies to in the Applies To column.
3. Select File > Save or click the Save icon.
4. Select File > Install Policies or click the Install Policies icon.
5. The Endpoint Agent on each assigned client downloads the new package. The client installation starts based on the settings in the Client Settings policy rule. You can configure:
   • If the Client Settings policy forces installation and automatically restarts without user notification.
   • If the Endpoint Agent sends a message to the user that an installation is ready and gives the user a chance to postpone the installation or save work and install immediately.
6. The Endpoint Agent installs the new client.

   If the user does not click Install now, installation starts automatically after a timeout.

7. After installation, the Endpoint Agent reboots the computer.