SolarWinds RMM: Digital Certificate Update

Update March 8, 2021

The digital certificate for our SolarWinds MSP products has been revoked, as of 7:00PM EST on March 8, 2021.

***********************************************************************************

Following our previous communication regarding digital certificates of MSP products, we are posting an update to the GA and RC Windows agents in RMM with the release of 10.9.17 GA and 10.10.3 RC. The new agent versions are to ensure that newly installed devices have the correct digital certificates. The macOS and Linux Agents are not affected by the updated digital certificate.

Action Required Site Installation Packages, Automation Manager, Managed Antivirus (MAV-BD), Patch Management,

Action is required if you previously created Site Installation Packages.

Action is required if you previously downloaded the ‘Automation Manager’ desktop application.

Action may be required to ensure a timely update of Managed Antivirus (MAV-BD) if policy settings have been changed to delay the upgrade.

Action may be required to ensure a timely update of the Patch Management Engine if no Patch Management actions are scheduled to occur before the digital certificate expires.

No Action Required – All Other RMM Services

No other action is needed as the other services upgrade automatically.

In addition to the RC and GA Agent, we are releasing digital certificate updates to the following services: Patch Management, Managed Antivirus (MAV-BD), Backup Manager, Web Protection, NetPath, Take Control and Automation Manager.

The updates to the digital certificates are currently rolling out across all RMM territories.

How to check for agent versions and take action:

Site Installation Packages

  • Possible action required: If you previously created Site Installation Packages, replace them with the new GA agent (v10.9.17) to ensure updated features are installed by default. To create a new Site Installation Package, log into RMM, and go to the Agent dropdown menu > Download Agent > Download Site Installation Package.

Backup Manager (Backup & Recovery Agent)
New version: 20.11.0.20350. To confirm you are running the latest version on a device, click ‘Assets’ on the south pane, then ‘Software’ to see the Backup Manager version.

Managed Antivirus (Bitdefender),
Please be advised we will be pushing an update for Managed Antivirus MAV-BD (v6.6.21.305) available for all modern Windows Operating Systems (Windows 7+ Windows Server 2008 R2+). This will be available as an update and fresh install. Included will also be an updated MAV Agent 51.6.2.13.

  • Possible action required: If you are running Managed Antivirus (MAV-BD), you must update to the latest version of MAV-BD to avoid any interruption between the RMM agent and MAV-BD after the certificate has been revoked. If MAV-BD has not been updated and the certificate has been revoked, the endpoint will continue to be protected locally but communication between the RMM agent and MAV-BD will no longer work. In this scenario, the endpoint will attempt a MAV-BD update to re-establish communication. If this is not possible, a reinstall will be required.

The new Bitdefender engine version should not require any reboot. If a reboot should be needed, it will be displayed in the RMM dashboard.

To see the version of the agent within the MAV check, navigate to the South Pane of the device and find the Managed Antivirus Check – Bitdefender and select the “More Information” link.  To see across devices, run the Managed Antivirus Protection Report under Reports > Managed Antivirus > Antivirus Protection Report. Ensure that the Agent Version and Engine Version columns are selected from the Column drop down.

Patch Management Engine
New version: 1.2.13. To confirm you are running the latest version on a device, click ‘Assets’ on the south pane, then ‘Software’ to see the SolarWinds Patch Management Engine version.

  • Possible action required: To ensure the Patch Management Engine updates before the digital certificate expires, we recommend you schedule or trigger a patch management event so that the Patch Management Engine update process is invoked. In the event the device is offline, you will need to upgrade the RMM agent to the new version (v10.9.17) so that Patch Management is also updated when the device comes online.

NetPath
New version: 1.15.6.12. To confirm you are running the latest version on a device, click ‘Assets’ on the south pane, then ‘Software’ to see the SolarWinds NetPath version.

Automation Manager
New version: 2.18.0.7. This covers both the ‘ScriptRunner’ agent and the Automation Manager application for download. To confirm you are running the latest version on a device, click ‘Assets’ on the south pane, then ‘Software’ to see the ScriptRunner version. For the Automation Manager application, look at the version number of the locally installed app.

  • Possible action required: If you previously downloaded the Automation Manager app, you should replace this with the updated version. First, remove the existing app from your machine, then go to the Settings dropdown menu in RMM and select Script Manager – you can download the updated Automation Manager app from this dialog.

Take Control (SolarWinds Engine)
New version: 7.00.21. To confirm you are running the latest version of the Viewer, check the version number on the title bar of a Take Control session. For the Agent, check the BASupSrcv.ini file:
C:\Programdata\getsupportservice_*\BASupSrvc.ini, where you will see the version number.

Web Protection
New version: 5.24.2.188. The new Web Protection agent should not require any reboot.  If a reboot is required, it will be displayed within the RMM dashboard. To confirm you are running the latest version on a device, click ‘Assets’ on the south pane, then ‘Software’ to see the Advanced Monitoring Agent Web Protection version.

Other features and associated services require no updates at this time.

How to Automatically Update the RMM Monitoring Agent
As general best practice, we recommend you keep the RMM agent up to date. To automatically update the RMM monitoring agent for your devices, log into RMM and go to the Agent dropdown menu > Agent Auto-update Settings. Here you can select the latest GA agent (v10.9.17). To see which agent version devices are currently running, go to the Reports dropdown menu > Device Inventory Report.

This entry was posted in N-sight. Bookmark the permalink.