Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Setup
  4. Cylance Endpoint Security Setup Guide
  5. Managing updates for the CylancePROTECT Desktop and CylanceOPTICS agents
  6. Manage updates for the CylancePROTECT Desktop and CylanceOPTICS agents

Manage updates for the
CylancePROTECT Desktop
 and
CylanceOPTICS
 agents

You need to create zones with devices reserved for testing agent updates. You will associate these zones with the Test and Pilot update rules. You can add your own update rules for testing or for production deployment. For more information about creating zones, see Setting up zones to manage CylancePROTECT Desktop and CylanceOPTICS. 
  1. In the management console, on the menu bar, click
    Settings > Update
    .
  2. If necessary, create an update rule. For example, you can create a rule for testing agent updates.
    1. Click
      Add New Rule
      .
    2. Type a name for the rule.
    3. Click
      Submit
      .
  3. Click an update rule. For example, click
    Test
    .
  4. Expand
    Zones
     and select the zones that you want to assign to this update rule.
  5. Expand
    Agent
     and select an update option.
    If you do not want to update the agent version on a device, use the
    Do not update
     setting. You must also make sure that the device is not in another zone with another update rule (including the Production rule) that specifies an update to the agent (auto-update or a specific version). If a device is in a zone with an update rule that specifies an update, it will be updated. If a device is associated with multiple update rules that specifies an update, the agent will be updated according to the rule with the highest rank.
  6. Select the
    Auto-Update Linux Driver
     check box to allow the agent to automatically update to the latest driver to support the latest
    Linux
     kernel. 
  7. Expand
    CylanceOPTICS
     and select an update option.
    You can select Auto-Update only if you configured the
    CylancePROTECT Desktop
     agent to use Auto-Update.
  8. Repeat steps 2 to 7 for the
    Pilot
     update rule, or a rule that you created for pilot testing.
  9. Repeat steps 2 to 7 for the
    Production
     update rule, or a rule that you created for production. You don’t assign zones to the default
    Production
     update rule because it applies to all devices that are not in a zone with an update rule.
    If the
    CylancePROTECT Desktop
     agent is set to Auto-Update in the Production update rule, the Test and Pilot rules are not available. Update rules that you create are not affected by the configuration of the Production update rule.
  10. Click
    Save
    .
  • If you added update rules, click the arrows next to the rules to set the ranking. Rules at the top of the list take priority over rules lower on the list. The Test, Pilot, and Production rules are always at the bottom of the list and you cannot change their ranking. The Production update rule is applied to devices that aren't in any zone with an update rule, and devices in zones where none of the rules have a specified an update to the agent.
  • To trigger an update of the
    CylancePROTECT Desktop
     agent on a device before the hourly interval, on the device, right-click the
    CylancePROTECT Desktop
     icon in the system tray and click
    Check for Updates
    , restart the Cylance service, or run the following command from the Cylance directory: 
    CylanceUI.exe–update
  • If memory protection, script control, and/or device control are enabled in the device policy, a reboot of the device following the agent installation or upgrade is recommended, but not strictly required. A reboot will ensure that any new policy settings have taken full effect.