How To Upgrade the Windows-Based User-ID Agent

How To Upgrade the Windows-Based User-ID Agent

• These steps are applicable if you are currently running any of the following versions or older
  
  • 9.0.6-101 or older
  • 9.1.5-108 or older
  • 10.0.7-104 or older
  • 10.1.2-104 or older
  • 10.2.4-107 or older
  • 11.0.1-104 or older

High-level steps

• [REQUIRED] Back up the User-ID Agent configuration

• Install the User-ID Agent

• Restore the User-ID Agent configuration and start the agent

1. Back Up the User-ID Agent configuration
   1. On your Windows Server, navigate to “C:\Program Files (x86)\Palo Alto Networks\User-ID Agent”.
   2. Create a compressed archive of the contents of this folder and save the archive to a different location.

Note: The path specified above is the default installation location. If you installed the User-ID Agent in a different location on your server, back up the files from that path instead.

2. Download the User-ID Agent installation file

   1. How to download the User-ID Agent from Support Portal

3. Exit the User-ID Agent application

4. Stop the “User-ID Agent” service
   1. Open the Services application on your Windows server.
   2. Locate the service named “User-ID Agent”. Right-click the service and select “Stop” as shown in the screenshot below.

5. Install the User-ID Agent
   1. Open the Windows Start menu, right-click the Command Prompt program, and select “Run as Administrator”.
   2. From the command line, run the file you downloaded. For example, if you saved the file to the Desktop, enter the following:

C:\Users\administrator.acme>cd Desktop 

C:\Users\administrator.acme\Desktop>UaInstall-<version>.msi

1. 3. Follow the setup prompts to install the agent using the default settings. By default, the agent gets installed to “C:\Program Files(x86)\Palo Alto Networks”, but you can use the “Browse” button to select a different location.
   4. During installation you will see the pop-up window shown in the screenshot below, which reminds you to perform the backup at step 1. Click “Yes”.
   5. When the installation completes, click “Close”.

1. 6. During installation, if you see the message in the screenshot below, open the “Services” application and stop the “User-ID Agent” service again. Then click “Try Again” on the installation screen.

6. Restore the User-ID Agent configuration
   1. From the backup you took at step 1, extract the following files: 
      1. “UserIDAgentConfig.xml”
      2. Any custom certificate files. Please do not extract the default certificate files.
      3. Any other XML and TXT files present. The names of the files depend on your specific configuration.
   2. Place these files in “C:\Program Files(x86)\Palo Alto Networks\User-ID Agent”, or the location where you installed the User-ID Agent.
   3. Select the option to “Replace the file in the destination” if prompted.

7. Start the User-ID Agent

   1. From the Windows Start menu, open the User-ID Agent application and confirm it is running.

1. 2. Confirm that the User-ID Agent service is running.