Description
This article describes how to upgrade FSSO Collector Agent and its components.
Scope
Supported Microsoft AD environments as per appropriate FortiOS Release Notes.
Solution
To upgrade FSSO Collector Agent(s) and other FSSO components installed in MS AD environment, follow the steps below:
Upgrading FSSO Collector Agents.
- Download the installer from https://support.fortinet.com/Download/FirmwareImages.aspx by navigating to the FSSO folder under FortiOS version that is running on the FortiGate, which communicates with the Collector Agent(s) that are going to be upgraded:
Choose between 32bit version i.e. FSSO_Setup_5.0.0301.exe and 64bit ie. FSSO_Setup_5.0.0301_x64.exe based on the target operating system.
- Execute the installer. Confirm upgrading Fortinet Single Sign On Agent (Collector Agent):
- Confirm all steps, following the installation wizard to completion. Check the new version by selecting 'Show Service Status' in the FSSO Collector Agent GUI:
If the Collector Agent is in anything other than DC Agent mode, the upgrade is finished. Skip the steps below related to upgrading DC Agents as required.
However, if it is operating in DC Agent Mode, the DC Agent(s) needs to be upgraded as per the steps described below.
Upgrading DC Agents.
- Go to 'Show Monitored DCs', select 'Select DC to Monitor' and deselect all DCs that are selected, then confirm with 'OK'.
- Confirm removing the DC Agent from target DC - Confirm with 'Yes'.
WARNING: REBOOT the targeted DC -> select 'NO' this time
- The Select DC to Monitor section should now show the DCs deselected.
Select the DCs again. This will install new versions of the DC Agents to the selected DCs.
The next step is to confirm by selecting 'Yes'.
- Finally, the last prompt will be displayed, where it is necessary to select 'Yes' to reboot the DC.
Although it is recommended to do it after the installation to correctly monitor the DC for users’ logon events:
- After rebooting the DCs, confirm that the new version of DC Agent was installed by going to Select DCs to Monitor and waiting for the keepalive packet.
Or export configuration from Collector Agent's GUI, open it in a text editor and scroll to the bottom where the info about DC Agent version can be found at the bottom of the file:
After the upgrade, the configuration settings will remain.
Further notes:
If Terminal Server Agent(s) is used, upgrade it the same manner as Fortinet the Single Sign On Agent using TSAgent_Setup_5.0.0xxx.exe or its *. msi equivalent. Upgrading the TS Agent requires a reboot afterwards.
If the GUI version of the DC Agent is used, use the standalone installer to upgrade it.
- 32 bit DCAgent_Setup_5.0.0xxx.exe or .msi
- 64 bit DCAgent_Setup_5.0.0xxx_x64.exe or .msi
Agent versions can be different and there will be no compatibility issues with FortiOS. They will work, unless feature parity is required.
Related documents:
