Going from update mode back to enabled mode

[Jmac24]

I updated some Linux systems that are running Change Control from v6.3.0.180 to 6.3.0.749. We're not blocking anything in enabled mode, just monitoring \logging changes. Can I just run the task to put these back into enabled mode or do they need to be restarted first?

[Thussain · Accepted solution]

Please follow the step below to put the machine back to enable mode 

1. On the McAfee ePO console, select Menu | Systems | System Tree.
2. Apply the client task to a group or an endpoint:
   Group — Select a group in the System Tree and click the Assigned Client Tasks tab.
   • Endpoint — Select the endpoint on the Systems page and click Actions | Agent | Modify Tasks on a Single System
3. Click Actions | New Client Task Assignment to open the Client Task Assignment Builder page.
   
   
   8. a Select the Solidcore 8.x.x product and SC: Enable task type, then click Create New Task.
   9. On the Client Task Catalog page, specify the task name and add any descriptive information.
   10. Select the platform, the subplatform, and indicate whether to enable Change Control, Application Control, or both.
4. Deselect Reboot endpoint checkbox to enable Change Control and Application Control.
5. Click Save, then click Next to open the Schedule page.
   1. Specify scheduling details, then click Next.
   2. Review and verify the task details, then click Save.
6. Click Wake Up Agents to send your client task to the endpoint immediately
7. Verify that the software is enabled
8. Click Wake Up Agents to fetch properties immediately.
9. Click a system on the Systems page. The details for the selected system are displayed.
10. Select the Products tab and review the Solidcore version. Click the row to review the license status

[Jmac24]

I already have all that in place and know how to run a client task on a system. My question was whether or not I can re-enable without restarting after the update. The upgrade process has a reboot in between in the guide, but I am wondering if it is required before re-enabling. The reason is that these will be patched tomorrow and then restarted and I'd rather not have to restart them twice.

I guess another thing to ask: Is there harm in leaving them in update mode temporarily, since we are only monitoring, not blocking?

[BenEllis]

All upgrades require a reboot for the new version. I would recommend rebooting if you upgraded to load the new driver.

You can leave it in update mode if you are not blocking anything.

[ktankink]

Hi @Jmac24 MACC upgrades require a reboot to load the new kernel driver.  Until the systems are restarted, they will continue to run with the previous kernel driver, but yes, you can run in Enable mode until then. It is recommended to restart asap after MACC upgrades though.  If this is a Linux server, it's suggested to perform the upgrade during a maintenance window, where a reboot can typically be performed (depending on how you manage your servers).