Upgrading
New versions of Puppet Comply are released regularly. Upgrading to the current version helps you take advantage of the latest features, fixes, and improvements.
comply
module. If you are upgrading to the latest
version of the CIS-CAT Pro Assessor, upgrade the comply
module before you upgrade the Comply application. Note that you cannot run scans
until you complete both of these upgrades. Upgrade from Comply 1.0.4 to 2.11.0
Comply 2.11.0 automatically upgrades the CIS-CAT Pro Assessor to the latest version when upgrading Comply. However, by adjusting your configuration you can choose to stay on a previous version of the assessor.
- If you are upgrading Comply in an environment with thousands of nodes, see Guidelines for running scans at scale.
- If you are upgrading Comply to a version that includes a new assessor, you can expedite the process of installing the assessor on all nodes. In the PAM Config tab, in the CIS-CAT Pro Assessor upgrade section, select the checkbox to automatically start two Puppet runs after an assessor upgrade. To help prevent performance issues, enable this option only in small to medium Puppet deployments. If you enable this option, you can verify that a PE job was run: In Comply, select and click the assessor version to see the PE job number.
Upgrade from Comply 2.2.2 to 2.3.0
Comply 2.3.0 automatically upgrades the CIS-CAT assessor to the latest version every time you upgrade Comply.
Upgrade Comply in an online environment
Check for downloads and deploy updates from the Version history tab in the Puppet Application Manager (PAM) UI.
comply
module. Upgrade Comply in an offline environment
If your environment does not have direct access to the internet, follow the documented procedure to upgrade Comply to the latest version.
comply
module.