Configure Automatic Agent Updates Without Internet Access

This topic describes the process for setting up automatic agent updates for your environment when your data center does not have external internet access.

If your data center does not have external internet access, you must perform the steps below to set up automatic agent updates. When this process is complete, your system indicates available agent updates on the Assignments and Images pages of the tenant administrator's console. See the Tenant Administration guide for more information.

Note: If you configured automatic agent updates in Horizon DaaS 9.0.0 or 9.0.1, the file locations you set are not migrated and must be configured again on the upgraded tenant.

Procedure

1. Create a directory called C:\WinFileShare\hotpatch.

2. Download the agent tarball file and extract it into the hotpatch directory.

3. Navigate to the subfolder called files.

4. Get the SHA256 value of the supportingFiles.tar file.

   1. Start PowerShell and navigate to the folder containing the newly extracted supportingFiles.tar file.

   2. Enter the following command:

      Get-FileHash supportingFiles.tar -Algorithm SHA256 >SHA256.txt
      

      Note the hash value that is returned, because you will use it in the Administration Console later.

      Note: If you are using Linux, you can use the following command instead:

      openssl dgst -sha256 supportingFiles.tar
      

5. In Service Center, click tenants > policy, and select your tenant.

   

6. Update policies as shown in the following table.

   Policy	New Value
   agentupdate.cachePath	/mnt/wem/___ is the IP address of the file server is the name of the share. For example: /mnt/wem/__192_168_1_100_My_Share
   agentupdate.cipherList	AES256-GCM-SHA384
   agentupdate.enable	true
   agentupdate.enablehotpatch	true
   agentupdate.job.repeatInterval	3600000
   agentupdate.job.startDelay	30000

7. In the Administration Console, click Settings > File Share.

8. Click New.

9. Fill out details for file share.

   

   Note: If you have not created a file server, assign a server to host your agent file share, create a file share, and configure share and NTFS permissions (read/write, and so on) before proceeding with next steps.

10. Select the check box on the new file share in the console then click More > Import.

    

11. Open the SHA256.txt file created previously, copy the checksum, paste it into the File Hash text box, and click Validate.

    The following success message displays:

    You can now begin updating images and assignments with the latest agent using the Update Agent feature.