Upgrading Server Agents

You can define work for upgrading Server Agents to the latest version. Upgrading agents is typically done in batches. For that reason, you might want to create a separate group to which you can assign a Server Agent work for performing agent upgrades. You can then be very selective about which agents you are upgrading.

IMPORTANT If you are using (or plan to use) the Server Agent with Trust Protection Foundation, carefully review Before upgrading Trust Protection Foundation or the Server Agent table before upgrading.

To upgrade Server Agents

(Conditional) If necessary, obtain the Server Agent update package from CyberArk Support Services.

If you already have the CyberArk Trust Protection Foundation 25.3.zip file, extract the contents to a temporary directory to find the Updater package file (*.vupkg) at the root of the folder (for example, Venafi Agent Upgrade 25.3.xx.xx.xxxxx.vupkg).
Copy the updater package to <CyberArk Home Directory>:\Program Files\Venafi\Packages.
Use CyberArk Updater with Admin rights to install the update package.
Log in to Certificate Manager - Self-Hosted.
On the Certificate Manager - Self-Hosted menu bar, click Clients > Work Settings.
(Conditional) If you have not yet created Server Agent upgrade work, click Add Work.

For more information, see Creating new work and About Work Types.
On the Work page, open the work you want to configure by clicking it.
Under Agent Upgrade Configuration, select Yes to enable it.
(Optional) Under Upgrade agents to latest version, select Yes.
Click Save.

When you are finished, assign the new work to the group you plan to use for conducting Server Agent upgrades.