The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Upgrade to an IPv6 environment

  • Published on Sep 12, 2026
  • 2 minute(s) read
Prev Next

  1. Copy the upgrade file to /use/local/ess/update or /use/local/NitroGuard to update each device (ESM, ERC, ACE, ELM, ELS, and ADM).

  2. Reboot each device.

  3. Modify the /etc/NitroGuard/network.conf file to configure the IPv6 address for each device. For ADM, modify the /etc/rc.d/init.d/nitromode file.

  4. Reboot each device.

  5. Re-key each device:

    • Use the IPv6 address format (https://<IPv6 address>/#/login) to open the Trellix ESM UI.

    • Navigate to Device Properties → Key Management → Key Device.

    • Click the back button and enter the IPv6 address of the device.

    • Click Next, enter the password, and then click Next.

    • Repeat these steps for the other devices.

  6. For ADM, in the /etc/rc.d/ini.d/nitromode file find the line that starts with MGT and add the active state and full IPv6 address. There is no separate netmask, use the CIDR notation ::/prefixlength. For example:

    MGT[0]="yes;10.25.115.18;255.255.248.0;0.0.0.0
MGT[0]="yes;2607:8d40:42:3501:1111:ffff:ffff:1448/64"

  7. For ESM, complete the following:

    1. Verify all brokers and seeds and so on have an IPv6 address in the /etc/snowflex/snowflex.conf file.

    2. Add the IPv6 address to the /etc/tomcat/conf/snowservice.conf file.

    3. Restart the service, or reboot.

  8. For ERC, update the datasources with IPv6 addresses and roll out the changes.

  9. For ACE, you have to manually update the datasources to IPv6:

    1. In ESM, verify the current IP address of the datasources:

      nquery -d esm -q 'select id, name, ipaddress from ips where ipsid in (<ace datasources ipsid>)'

    2. If the IP address is IPv4, change it to IPv6:

      nquery -d esm -q 'update ips set ipaddress="<IPv6>" where ipsid in (<all ace datasources ipsid>)'

  10. For ELM, complete the following:

    1. If ELM storage was previously configured, update the IPv6 address of the storage server in the /etc/NitroGuard/storage.conf file.

    2. Use the following commands to restart the service:

      ELMStop
ELMStart

    3. Add ELM to ERC.

  11. For ELS, complete the following:

    1. If ELS storage was previously configured, update the IPv6 address of the storage server in the /etc/NitroGuard/storage.conf file.

    2. Use the following commands to restart the service:

      ELSStop
ELSStart
:
Related articles