[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThis guide provides instructions for performing a major upgrade of an existing remote agent to version 2.0.0 or higher on CentOS 7.9 or later using an installer.\u003c/p\u003e\n"],["\u003cp\u003eThe upgrade process involves five steps: installing Linux packages, installing OpenSSL 3.0.7, configuring OpenSSL 3.0.7 environment variables, installing Python 3.11, and installing Python 3.11 pip.\u003c/p\u003e\n"],["\u003cp\u003eAll of the provided commands must be executed separately within an open shell session until the completion of all the instructions.\u003c/p\u003e\n"],["\u003cp\u003eThe upgrade installation steps are supported in Google SecOps SOAR.\u003c/p\u003e\n"]]],[],null,["# Perform a major upgrade using installer for CentOS\n==================================================\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \nThis document explains how to perform a major upgrade for an\nexisting remote agent using the installer for CentOs 7.9 or later.\n\nTo install an agent on a fresh deployment,\nrefer to [Create an agent with installer on CentOS](/chronicle/docs/soar/working-with-remote-agents/create-agent-with-installer-on-centos).\n| **Note:** Installation requires superuser privileges. Some dependencies must be accessible to non-root users. As such, we don't recommend changing the root user's `umask` from the `0022` default value.\n\nAgent 2.0.0\n-----------\n\nThis major upgrade to remote agents with version 2.0.0 and higher consists of five procedures:\n\n- Install Linux packages\n- Install OpenSSL 3.0.7\n- OpenSSL 3.0.7 environment variables configuration\n- Install Python 3.11\n- Install Python 3.11 pip\n\n| **Important:** Keep the shell session open until you finish all steps.\n\n### Install Linux packages\n\n```bash\nyum install perl-core -y\n```\n\n### Install OpenSSL 3.0.7\n\nEach command needs to be taken and run separately. \n\n```bash\ncd /usr/local/src\nwget https://www.openssl.org/source/openssl-3.0.7.tar.gz\ntar -xf openssl-3.0.7.tar.gz\ncd openssl-3.0.7\n./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib\nmake -j$((`nproc`+1))\nmake install\n```\n\n### Configure OpenSSL environment variables\n\nEach command needs to be taken and run separately. \n\n```bash\ncd /etc/ld.so.conf.d/\necho /usr/local/ssl/lib64 \u003e openssl-3.0.7.conf\nldconfig -v\necho PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/ssl/bin\" \u003e /etc/environment\nsource /etc/environment\nln -sf /usr/local/ssl/bin/openssl /usr/bin/openssl\nexport LDFLAGS=\"$LDFLAGS -L/usr/local/ssl/lib64\"\nexport LD_LIBRARY_PATH=/usr/local/ssl/lib64\n```\n\n### Install Python 3.11\n\nEach command needs to be taken and run separately. \n\n```bash\ncd /usr/src\nwget http://www.python.org/ftp/python/3.11.8/Python-3.11.8.tgz\ntar xzf Python-3.11.8.tgz\ncd Python-3.11.8\nmake clean\n./configure --prefix=/usr/local --enable-unicode=ucs4 --with-openssl=/usr/local/ssl\nmake\nmake altinstall\n```\n\n### Install Python 3.11 pip\n\nEach command needs to be taken and run separately. \n\n```bash\nwget -O get-pip-3.11.py https://bootstrap.pypa.io/get-pip.py\n/usr/local/bin/python3.11 get-pip-3.11.py\n/usr/local/bin/python3.11 -m pip install --upgrade pip\n```\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
