How to convert Cortex XDR agent to Critical Environment version

[Piotr_Kowalczyk]

Hi

We have server which has Cortex XDR agent 7.9, as we can't upgrade and the end of support for this version is 11 of September 2023 I want to convert it to 7.9-CE which gives me additional time. I checked the documentation but can't find clear answer how to do this - can somebody help please?

[aspatil · Accepted solution]

Hi

Thank you for reaching out to the Live Community. Please allow me to address your questions.
I hope you are aware that from March 2023, the Windows Azure code signing patch is must to upgrade the agents.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Compatibility-Matrix/Windows

Once you have ensured that the Patch is supported, kindly check whether your OS version supports 7.9 CE version upgradation. You can find same in above link.

Once the prerequisites are checked, you can follow below instructions to upgrade the agent:
1. Create a installation Package with the required version(Endpoints->Agent Installation):

2. Go to All Endpoints-->Find out the Server on which agent upgradation is required--> Right click and select Upgrade Agent version.

2. Select the installation package which you have created and upgrade.

3. Another way is to do it from Action Center. 

 a. Go to Incident Response-->Response-->Action Center & select New Action.

b.Select Agent Upgrade --> Select Windows --> Choose Installation Package --> Click Next

C. Select Targets and schedule the update.

Please mark the response as "Accept as Solution" if it answers your query.

[nsinghvirk · Accepted solution]

Hello @Piotr_Kowalczyk 

Thanks for reaching out on LiveCommunity!

In order to upgrade to a critical environment version, you need to follow below steps.

1. Enable Critical environment version creation on your XDR tenant.

1. Navigate to Settings → Configurations → Agent Configurations → Critical Environment Versions.

2. Enable Critical Environment Versions to be Created and Installed in the Tenant.

2. Create a critical environment installation package.

     a. Navigate to Endpoints → Agent Installations -> Create a new installation package.

     b. Enter a unique Name and an optional Description to identify the installation package.

     c. Select the platform and package type based on operating system.

     d. While choosing the version, you need to select the version that ends with [CE] e.g. 7.9.101.42637[CE]

     e. Click Create.

Once the installation package status is completed. Please upgrade the server manually to CE version by following below steps.

a. Navigate to  Endpoints → All endpoints.

b. Filter out the server that you want to upgrade.

c. Right click -> Endpoint control -> Upgrade agent version.

d. In the new window that pop up, select the Critical environment version that you just created in previous steps.

e. Choose the upgrade schedule and click "Upgrade".

Note: As CE versions do not contain all the updates and content existing in the standard version, we recommend restricting the use of these versions to the required minimum.

[Piotr_Kowalczyk]

Thank you!

[Piotr_Kowalczyk]

Thank you, this resolves my issue!