When software updates are made available by Trellix, an administrator can obtain, verify the integrity of, and install those updates. Software updates are downloaded to the appliance via an image fetch command. However, the software image will never be installed without explicit administrative intervention using the image install command. The appliance image files are digitally signed. The integrity of the image is always verified during the upgrade process. An image that fails an integrity check will not be loaded.
Important
Compliance is not applied automatically after an upgrade. After you upgrade to Release 9.0 or later, you must check and reapply compliance.