Upgrading Server Agents

You can define work for upgrading Server Agents to the latest version. Upgrading agents is typically done in batches. For that reason, you might want to create a separate group to which you can assign a Server Agent work for performing agent upgrades. You can then be very selective about which agents you are upgrading.

IMPORTANT If you are using (or plan to use) the Server Agent with Trust Protection Foundation, carefully review Before upgrading Trust Protection Foundation or the Server Agent table before upgrading.

To upgrade Server Agents

(Conditional) If necessary, obtain the Server Agent update package from Palo Alto Networks Support Services.

If you already have the Palo Alto Networks Trust Protection Foundation 26.2.zip file, extract the contents to a temporary directory to find the Updater package file (*.vupkg) at the root of the folder (for example, Venafi Agent Upgrade 26.2.xx.xx.xxxxx.vupkg).
Copy the updater package to <Palo Alto Networks Home Directory>:\Program Files\Venafi\Packages.
Use Trust Protection Foundation Updater with Admin rights to install the update package.
Log in to Certificate Manager.
On the Certificate Manager menu bar, click Clients > Work Settings.
(Conditional) If you have not yet created Server Agent upgrade work, click Add Work.

For more information, see Creating new work and About Work Types.
On the Work page, open the work you want to configure by clicking it.
Under Agent Upgrade Configuration, select Yes to enable it.
(Optional) Under Upgrade agents to latest version, select Yes.
Click Save.

When you are finished, assign the new work to the group you plan to use for conducting Server Agent upgrades.