Upgrading ThreatLockDown agents on HP-UX systems

Follow the steps to upgrade the ThreatLockDown agent on HP-UX systems.

  1. Download the latest HP-UX installer.

  2. Stop the ThreatLockDown agent.

    # /var/ossec/bin/wazuh-control stop

  3. Backup the ossec.conf configuration file.

    # cp /var/ossec/etc/ossec.conf ~/ossec.conf.bk
# cp /var/ossec/etc/client.keys ~/client.keys.bk

  4. Only for upgrades from version 4.2.7 or lower:

    1. Delete the ossec user and group.

      # groupdel ossec
# userdel ossec

    2. Create the ThreatLockDown user and group.

      # groupadd wazuh
# useradd -G wazuh wazuh

  5. Deploy the ThreatLockDown agent files.

    # tar -xvf wazuh-agent-4.9.0-1-hpux-11v3-ia64.tar

  6. Restore the ossec.conf configuration file.

    # mv ~/ossec.conf.bk /var/ossec/etc/ossec.conf
# chown root:wazuh /var/ossec/etc/ossec.conf
# mv ~/client.keys.bk /var/ossec/etc/client.keys
# chown root:wazuh /var/ossec/etc/client.keys

  7. Start the wazuh-agent.

    # /var/ossec/bin/wazuh-control start

Note

When upgrading agents from versions earlier than 4.x, make sure that the communication protocol is compatible. Up to that point, UDP was the default protocol and it was switched to TCP for later versions. Edit the agent configuration file ossec.conf to update the protocol or make sure that your ThreatLockDown manager accepts both protocols.