The following procedure shows you how to upgrade your ExtraHop system to the latest firmware release. While the firmware upgrade process is similar across all ExtraHop appliances, some appliances have additional considerations or steps that you must address before you install the firmware in your environment. If you need assistance with your upgrade, contact ExtraHop Support.
Here are some important considerations and requirements about upgrading ExtraHop appliances.
- Verify that your Reveal(x) 360 system has been upgraded to version 8.6 before upgrading your self-managed sensors.
- If you have multiple types of ExtraHop appliances, you must upgrade them in
the following order:
- Command appliance
- Discover appliances
- Explore appliances
- Trace appliances
- If you have a Command appliance, apply the following guidance:
- For large Command appliance deployments (managing 50,000 devices or more), reserve a minimum of one hour to perform the upgrade.
- The Command appliance firmware version must be greater than or equal to the firmware version of all connected appliances.
- If you have Explore appliances, apply the following guidance:
- Do not upgrade Explore appliances to a firmware version that is newer than the version installed on connected Command and Discover appliances.
- After upgrading the Command and Discover appliances, halt the ingest
of records from the Command and Discover appliances before upgrading
the Explore appliance. If you are upgrading from a firmware version
prior to 7.4, temporarily remove any
connected Explore appliances, or alternatively, disable triggers that commit records and disable the
automatic flow records setting. If you are upgrading
from firmware version 7.4 or later, after upgrading the Command
Discover appliances disable record
ingest on the Explore cluster before upgrading the
You must re-enable these settings after all nodes in the Explore cluster are upgraded.
- You must upgrade all Explore nodes in an Explore cluster. The
cluster will not function correctly if nodes are on dissimilar
Important: The message Could not determine ingest status on some nodes and Error appear on the Cluster Data Management page in the Administration settings of the upgraded nodes until all nodes in the cluster are upgraded. These errors are expected and can be ignored.
- You must enable shard reallocation from the Cluster Data Management page the Administration settings after all nodes in the Explore cluster are upgraded.
- If you have Trace appliances, apply the following guidance:
- Do not upgrade Trace appliances to a firmware version that is newer than the version installed on connected Command and Discover appliances.
- Download the firmware for the appliance from the ExtraHop Customer Portal to your computer.
- Log in to the Administration settings on the ExtraHop system through https://<extrahop-hostname-or-IP-address>/admin.
- In the Appliance Settings section, click Firmware.
- Click Upgrade.
On the Upgrade Firmware page, select one of the following options:
- To upload firmware from a file, click Choose File, navigate to the .tar file you want to upload, and click Open.
- To upload firmware from a URL, click retrieve from URL instead and then type the URL in the Firmware URL field.
- If you do not want to automatically restart the appliance after the firmware is installed, clear the Automatically restart appliance after installation checkbox.
The ExtraHop system initiates the firmware upgrade. You can monitor the progress of the upgrade with the Updating progress bar. The appliance restarts after the firmware is installed.
If you did not choose to automatically restart the appliance, click
Reboot to restart the system.
After the firmware update is installed successfully, the ExtraHop appliance displays the version number of the new firmware on the Administration settings.
Note: Your browser might time out after 5 minutes of inactivity. Refresh the browser page if the update appears incomplete.
If the browser session times out before the ExtraHop system is able to complete the update process, you can try the following connectivity tests to confirm the status up the upgrade process:
- Ping the appliance from the command line of another appliance or client workstation.
- From the Administration settings on a Command appliance, view the appliance status on the Manage Connected Appliances page.
- Connect to the appliance through the iDRAC interface.
- If you disconnected any Explore appliances from Command and Discover appliances, make sure to reconnect them. If you disabled any triggers, automatic flow records, or disabled record ingest, make sure to re-enable those settings.