Upgrade procedures

Architecture with a Global Center

Check the Global Center and Centers' health

It is highly recommended that you check the health of the Centers connected to the Global Center and of the Global Center itself before proceeding to the update. To do so:

Procedure


Step 1

Connect to the Center in SSH.

Step 2

Type the following command:

systemctl --failed

The number of listed sbs-* units should be 0, otherwise the failure must be fixed before proceeding with the update.

If one or several sbs services are in failed state like below, it has to be fixed before proceeding to the update.

Usually, a reboot of the Center is enough to solve the issue. If not, contact the product support.

Step 3

Repeat the previous steps for the other Centers and the Global Center.


Update the Global Center

In the case of a distributed architecture, you must first update the Global Center, then its Centers.

You can do so through the corresponding Center's Cisco Cyber Vision application or using its Command Line Interface.

To update the Global Center:

  • Through the Cisco Cyber Vision application:

    1. Go to cisco.com and retrieve the following file:

      File name: CiscoCyberVision-update-combined-<VERSION>.dat

    2. Navigate to Admin > System.

    3. Click System Update.

    4. Browse to select the update file.

  • Through the Command Line Interface (CLI):

    1. Go to cisco.com and retrieve the following file:

      File name: CiscoCyberVision-update-center-<VERSION>.dat

    2. Launch the update using the following command:
      sbs-update install /data/tmp/CiscoCyberVision-update-center-<VERSION>.dat

To update the Centers:

Connect to each Center's Cisco Cyber Vision application or CLI and repeat the same procedure used to update the Global Center.

Update the sensors

The update of the sensors is done from their corresponding Center (not from the Global Center). You must repeat the following procedures from each of your Centers to cover all sensors of your industrial network. Procedures differ between hardware sensors and IOx sensors.

Update hardware sensors

To update hardware sensors:

If you used the combined file to update the Center which owned the sensor, the hardware sensors (IC3000 and Sentryo Sensors) were updated at the same time.

If not, the update needs to be done from the Command Line Interface (CLI):

Procedure

Step 1

Go to cisco.com and retrieve the following file:

File name: CiscoCyberVision-update-sensor-<VERSION>.dat

Step 2

Launch the update using the following command:

sbs-update install /data/tmp/CiscoCyberVision-update-sensor-<VERSION>.dat

Update IOx sensors

To update IOx sensors:

If you have installed the sensor with the sensor management extension, the upgrade of the extension will also update all sensors reachable by the Center.

Procedure

Step 1

Go to cisco.com and retrieve the following file:

File name: CiscoCyberVision-sensor-management-<VERSION>.ext

Step 2

In Cisco Cyber Vision, navigate to Admin > Extensions.

Step 3

In the Actions column, click the Update button, and browse to select the update file.

If one or several sensors were not updated by the extension update:

Step 4

Navigate to Admin > Sensors > Sensor Explorer.

Step 5

Click Manage Cisco devices, then click Update Cisco devices.

A pop up with all remaining IOx sensors connected to the Center appears. Click Update.

If you have not installed one or several sensors with the sensor management extension, you can upgrade them with the sensor package from the platform's local manager or from the platform's Command Line Interface. This procedure is detailed in the corresponding sensor installation guide.

  • Cisco IE3x00 and Cisco IR1101 file names: CiscoCyberVision-IOx-aarch64-<VERSION>.tar or CiscoCyberVision-IOx-Active-Discovery-aarch64-<VERSION>.tar

  • Catalyst 9300 and Catalyst 9400 file names: CiscoCyberVision-IOx-x86-64-<VERSION>.tar or CiscoCyberVision-IOx-Active-Discovery-x86-64-<VERSION>.tar


Architecture with a single Center

Update the Center

You can update the Center through its Cisco Cyber Vision application or using its Command Line Interface.

  • Through the Cisco Cyber Vision application:

    1. Go to cisco.com and retrieve the following file:

      File name: CiscoCyberVision-update-combined-<VERSION>.dat

    2. Navigate to Admin > System.

    3. Click System Update.

    4. Browse to select the update file.

  • Through the Command Line Interface (CLI):

    1. Go to cisco.com and retrieve the following file:

      File name: CiscoCyberVision-update-center-<VERSION>.dat

    2. Launch the update using the following command:

      sbs-update install /data/tmp/CiscoCyberVision-update-center-<VERSION>.dat

Update the sensors

Sensor upgrade is done from the Center. Update procedures differ between hardware sensors and IOx sensors.

Update hardware sensors

To update hardware sensors:

If you used the combined file to update the Center which owned the sensor, the hardware sensors (IC3000 and Sentryo Sensors) were updated at the same time.

If not, the update needs to be done from the Command Line Interface (CLI):

Procedure

Step 1

Go to cisco.com and retrieve the following file:

File name: CiscoCyberVision-update-sensor-<VERSION>.dat

Step 2

Launch the update using the following command:

sbs-update install /data/tmp/CiscoCyberVision-update-sensor-<VERSION>.dat

Update IOx sensors

To update IOx sensors:

If you have installed the sensor with the sensor management extension, the upgrade of the extension will also update all sensors reachable by the Center.

Procedure

Step 1

Go to cisco.com and retrieve the following file:

File name: CiscoCyberVision-sensor-management-<VERSION>.ext

Step 2

In Cisco Cyber Vision, navigate to Admin > Extensions.

Step 3

In the Actions column, click the Update button, and browse to select the update file.

If one or several sensors were not updated by the extension update:

Step 4

Navigate to Admin > Sensors > Sensor Explorer.

Step 5

Click Manage Cisco devices, then click Update Cisco devices.

A pop up with all remaining IOx sensors connected to the Center appears. Click Update.

If you have not installed one or several sensors with the sensor management extension, you can upgrade them with the sensor package from the platform's local manager or from the platform's Command Line Interface. This procedure is detailed in the corresponding sensor installation guide.

  • Cisco IE3x00 and Cisco IR1101 file names: CiscoCyberVision-IOx-aarch64-<VERSION>.tar or CiscoCyberVision-IOx-Active-Discovery-aarch64-<VERSION>.tar

  • Catalyst 9300 and Catalyst 9400 file names: CiscoCyberVision-IOx-x86-64-<VERSION>.tar or CiscoCyberVision-IOx-Active-Discovery-x86-64-<VERSION>.tar