Skip Navigation

Manage updates for the
CylancePROTECT Desktop
,
CylanceOPTICS
, and
CylancePERSONA Desktop
agents

You can use update rules to manage updates of the
CylancePROTECT Desktop
,
CylanceOPTICS
, and
CylancePERSONA Desktop
agents on devices. Test, Pilot, and Production update rules are available for this purpose. You can also add additional update rules to manage agent updates based on your organization's needs. You can configure
Cylance Endpoint Security
to automatically push updates to a specific version or the latest available version, or you can turn off automatic updates so that you can manage the software distribution using your organization’s preferred method.
Note the following:
  • BlackBerry
    recommends that you test agent updates using the Test and Pilot update rules first, with devices reserved for testing and evaluation purposes, before managing updates for the Production update rule or additional rules that you add for production deployment.
  • If a device is using the latest version of an agent, you can use update rules to install an earlier version. A device will always update to the agent version that you specify.
  • If the
    Linux
    driver on a device is updated manually, update rules will not upgrade or downgrade the driver. This is to prevent the automated system from overwriting an action taken by an administrator.
Create zones with devices reserved for testing agent updates. For more information about creating zones, see Setting up zones to manage CylancePROTECT Desktop, CylanceOPTICS, and CylancePERSONA Desktop devices. You will associate these zones with the Test and Pilot update rules. The Production update rule applies to all devices that do not belong to other update rules. You can add your own update rules for testing or for production deployment.
  1. In the management console, on the menu bar, click
    Settings > Update
    .
  2. Click the
    Test
    rule.
  3. Expand
    Zones
    and select the zones that you want to assign to this update rule.
  4. Expand
    Agent
    and select an update option.
  5. Expand
    CylanceOPTICS
    and select an update option.
    You can select Auto-Update only if you configured the
    CylancePROTECT Desktop
    agent to use Auto-Update.
  6. Expand
    CylancePERSONA
    and select an update option.
    You can select Auto-Update only if you configured the
    CylancePROTECT Desktop
    agent to use Auto-Update.
  7. Repeat steps 2 to 6 for the
    Pilot
    update rule.
  8. Repeat steps 2 to 6 for the
    Production
    update rule. You don’t assign zones to the Production update rule because it applies to all devices that do not belong to other update rules.
    If the
    CylancePROTECT Desktop
    agent is set to Auto-Update in the Production update rule, the Test and Pilot rules are not available. Update rules that you create are not affected by the configuration of the Production update rule.
  9. If you want to add a new update rule for testing or production deployment, do the following:
    1. Click
      Add New Rule
      .
    2. Type a name for the rule.
    3. Click
      Submit
      .
    4. Repeat steps 2 to 6 for the new update rule.
  10. Click
    Save
    .
  • If you added update rules, click the arrows next to the rules to set the ranking. Rules at the top of the list take priority over rules lower on the list. The Test, Pilot, and Production rules are always at the bottom of the list and you cannot change their ranking.
  • To trigger an update of the
    CylancePROTECT Desktop
    agent on a device before the hourly interval, on the device, right-click the
    CylancePROTECT Desktop
    icon in the system tray and click
    Check for Updates
    , restart the Cylance service, or run the following command from the Cylance directory:
    CylanceUI.exe–update