Upgrading the appliance using the CLI

Use the commands in the following sections to upgrade the Network Security appliance.

Task list for upgrades

Perform the following steps (detailed in the sections that follow) to upgrade the appliance.

Important
Be sure to download the software image and guest image files from the configured DTI source server before beginning any installations.

Download and install the appliance software image

To download and install the software image:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Check for downloads:

hostname (config) # fenet image check
hostname (config) # show fenet image status

Download the software image:
```
hostname (config) # fenet image fetch
```

View the download progress:

hostname (config) # show fenet image status

   Progress of latest action taken:
   action fetch initiated                      Tue Nov 22 13:04:44 2016
   applying fetch for image                    lms
   fetching checksum of the requested image    done
   fetching requested image 7.9.0              initiated
   fetching requested image 7.9.0              done
   action fetch completed                      Tue Nov 22 13:06:03 2016 
   fetch-done: OS image downloaded successfully: image-lms_7.9.0.img

Note
If you have already downloaded the latest software, you may see an error: "Latest image already downloaded and ready to install (error)." To check which images are downloaded, use the following command:
hostname (config) # show fenet image list

Install the downloaded software image:
```
hostname (config) # image install image-lms_7.9.0.img
hostname (config) # image boot next
```
Note
If an upgrade process is interrupted or fails, the appliance software automatically falls back to the currently installed image.
Save your changes:
```
hostname (config) # write memory
```

Restart the appliance and accept the EULA

To restart the appliance and accept the EULA:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Restart the appliance:
```
hostname (config) # reload
```
After restarting the appliance, the system could display the Trellix End User License Agreement (EULA). Read the EULA. Click Yes if you agree to its terms, and then click Submit. If you do not accept the EULA, the appliance will not function.
After accepting the EULA, the login page is displayed. Wait a few minutes before logging in because database records are undergoing an update in preparation for the upgrade.
Note
You must access the appliance through the serial port if you want to monitor appliance boot activities. You can enter CLI commands through direct keyboard and monitor connection only before the boot loader begins loading the kernel, for example, to post output, and after the boot is completed.

Download guest images

Important
Default guest images are automatically downloaded and installed from the DTI source server. To download and install a guest image bundle or profile, you must first use the guest-images configure command to select the guest image.

This procedure describes how to install default and non-default guest images.

To download guest images:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

View the guest images configured for the appliance:
```
hostname (config) # show guest-images config
```
Download the guest images, but do not install them yet. Downloading guest images will take some time, so allow the download to run in the background.
```
hostname (config) # guest-images download
```
Wait for the appliance to fully download the guest images before beginning any installations.
Note
You can perform automatic downloads of available guest images. For details, see the fenet guest-images auto download and fenet guest-images auto update commands in the CLI Command Reference.
Confirm the guest image downloads are completed:
```
hostname (config) # show guest-images download
```
To cancel a download in progress:
```
hostname (config) # guest-images download cancel
```
To resume a download that has been interrupted for any reason:
```
hostname (config) # guest-images download resume
```
To download non-default guest images by specifying the server manifest:
Note
Perform this step if you do not need all available guest images.
1. Download the server manifest:
```
hostname (config) # guest-images download manifest [version <version-id>
```
2. Display available guest image bundles:
  hostname (config) # show guest-images available bundles
3. Note the bundle ID of the bundle of guest images that you want from the list displayed (only one bundle can be selected).
4. Select the guest image bundle to be installed, where bundle_id is obtained from the previous step:
  hostname (config) # guest-images configure bundle<bundle-id>
5. Verify that the bundle is properly selected:
```
hostname (config) # show guest-images config
```
6. Download the guest images from the Trellix network:
  hostname (config) # guest-images download
7. Monitor the download progress:
  hostname (config) # show guest-images download
To download a non-default guest image by specifying the version number:
Note
Perform this step if you do not need all available guest images.
Version download is supported for version 17.0101 or higher.
You can only install a guest image version that is newer than the currently installed version.
1. Display supported guest images.
```
hostname (config) # show fenet guest-images status
```
2. Download the specific guest image version from the Trellix network:
```
hostname (config) # guest-images download version <version-id> 
```
3. Monitor the download progress:
```
hostname config # show guest-images download
```
To update guest images with one or more profiles (mutually exclusive with default and bundle sets):
1. Download the server manifest:
```
hostname (config) # guest-images download manifest [version <version-id>]
```
2. Display available guest image profiles:
```
hostname (config) # show guest-images available profiles
```
3. Note the profile ID of the needed profile(s) from the list displayed.
4. Select the guest image profile to be installed:
```
hostname (config) # guest-images configure profile <profileID>
```
  where <profileID> is the profile you noted in the previous step.
5. Repeat the previous step for each additional profile needed.
6. Verify that all needed profiles are configured:
```
hostname (config) # show guest-images configuration
```
7. Download the guest images:
```
hostname (config) # guest-images download
```
8. Monitor the download progress:
```
hostname (config) # show guest-images download
```
  Note
  If you encounter a problem with a download, the output of the show guest-images download command will describe the issues, including notification about the specific file that was involved in the failure. Network connectivity issues cause download failures. Repeat the download using the guest images download command. The system will restart the download at the point at which it was interrupted or failed. If the problem persists, contact Trellix Technical Support.
Save your changes:
```
hostname (config) # write memory
```

Install downloaded guest image profiles

To download default guest images:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

After the download is complete, install the guest images:
```
hostname (config) # guest-images install
```
Verify that guest images are properly installed:
```
hostname (config) # show guest-images
```
Save your changes:
```
hostname (config) # write memory
```

Download and install guest images in a single command

To download and install default guest images:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Download and install guest images:
```
hostname (config) # guest-images download-and-install
```
Note
When the appliance is managed by a Central Management System appliance, the guest image download process is automated. The managed appliance is scheduled to check for guest image updates daily and then trigger the Central Management System appliance to download the requested guest image update for hosting. The managed appliance will automatically download and install the updates after the Central Management System appliance completes the download.

View the download status of the guest images:

hostname (config) # show guest-images download

To cancel a download in progress:

hostname (config) # guest-images download cancel

To resume a download that has been interrupted for any reason:

hostname (config) # guest-images download-and-install resume

To delete the partial download of Guest Images:

hostname (config) # guest-images download delete

Verify that the guest images are properly installed:
```
hostname (config) # show guest-images
```

Verify the upgrade

To verify the upgrade:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Display the version information for the current system image:
```
hostname (config) # show version
```
Display all guest images:
```
hostname (config) # show guest-images
```