# How to Upgrade the Endpoint Agent

Canonical: https://www.nsecsoft.com/en/course/how-to-upgrade-the-endpoint-agent.html

Language: en-US

Updated: 2026-11-04T07:56:34.877605Z

Server\-side push endpoint agent upgrade Note: Endpoint Agent upgrade requires the corresponding version of the update\.cab file, which needs to be provided by contacting the vendor\. Upload the upgrade package 1\. Open the Ping32 Management Console 2\. Click More \-&gt; Endpoint Update 3\. Click Add \-&gt; Next \-&gt; Select the update\.cab file 4\. Click Next \[…\]

#### **Server-side push endpoint agent upgrade**

Note: Endpoint Agent upgrade requires the corresponding version of the `update.cab` file, which needs to be provided by contacting the vendor.

#### **Upload the upgrade package**

1\. Open the Ping32 Management Console 2. Click **More** -> **Endpoint Update** 3. Click **Add** -> **Next** -> Select the `update.cab` file 4. Click **Next** -> Select **Yes / No** at "Set this update file as the default version" ("No" is recommended) Description of "Whether to set as default version" **Yes**:

-   Set the currently pushed upgrade package as the default version (not recommended)
-   The endpoint agent installer generated by the Management Console is a new version
-   After setting to the default version, all endpoint agents will start to obtain the new version upgrade package

**No**:

-   The currently pushed upgrade package is not set as the default version (recommended option)
-   The installation package generated by the Management Console is still the old version used last time
-   The endpoint agent upgrade only takes effect on the designated endpoints checked in the subsequent steps.

#### Select the upgrade method

1\. Click **Next** -> Choose one of the following two methods:

-   **Only upload update files**: Only upload upgrade files to the server, the endpoint agent will not be upgraded
-   **Upload the update file and update the specified endpoint to this version**: You can select the specified endpoint for version upgrade (recommended)

2\. Click **Next** -> Select the endpoint that needs to be upgraded and perform the upgrade ![](<https://www.nsecsoft.com/site-assets/bd479a7e2f6829c160217f5ef8075eb7317c364c4447adfeb14f5da8239c94ec/9c3175a911dbb2b4f1232db4e03c0c8e5784b902191145076efc5efc1884c8ad/591865370ae990e6324e7b490e953c0890a0da25700f15227a1558d187074b0b/1-client-up.png>)

> Note:If **Yes** is selected in "Whether to set as the default version", not only the endpoints checked in the current interface will be upgraded, but the endpoints not checked will also get the latest upgrade file.Only if you select **No**, the upgrade will be strictly based on the specified endpoint.

#### Precautions

1\. After the endpoint pushes the upgrade, the endpoint agent usually obtains the upgrade file about half an hour later; the endpoint agent computer will automatically upgrade to the new version after being manually restarted.

-   If the encryption function is enabled on the endpoint, it may need to be restarted multiple times during the upgrade process.
-   After restarting, if the encrypted file cannot be opened or the file is opened with garbled characters, the endpoint agent computer needs to be restarted again.
-   If it still cannot be opened or the code is garbled after restarting multiple times, please contact the vendor for help.
-   Endpoints that are not online will automatically obtain the upgrade file and upgrade after being online.

2\. You can confirm whether the endpoint agent has obtained the upgrade file through the Management Console:Select the target endpoint in the endpoint list, and the endpoint information is displayed on the right, Click **More** -> **Endpoint Parameters**

-   Search parameters: **type `update`**, whose value is the new version number, If the new version number is displayed, it means that the endpoint agent has obtained the upgrade file and can be upgraded by restarting the computer.

#### **How to batch check which endpoint agents have obtained the upgrade files**

1\. Right-click on the blank space on the left side of the endpoint list 2. Hold down `Shift` and click **Advanced Endpoint List** 3. View the field **"Cache upgrade version"**

#### **Basic logic of endpoint upgrade**

1\. The upgrade package file will be uploaded to the server directory:

-   Server location: `\Ping32\Server\DataDB\s3\ping32\update`

2\. After pushing the upgrade package from the Management Console, the server will simultaneously deliver the upgrade policy to the endpoint agent. 3. The endpoint agent requests and downloads the upgrade file from the server. 4. After downloading, the endpoint agent stores the upgrade file in the local directory:

-   Endpoint Agent location: `C:\Program Files (x86)\Cached Backup`
-   This directory is a hidden directory and can be entered directly by entering the path in the address bar.

5\. The local cache directory will contain files related to the new version number, and the endpoint agent computer will be automatically upgraded to the new version after restarting.
