Skip to main content
Skip table of contents

How to Keep Your IGEL OS 12 System up to Date

Rationale

Software updates fix newly discovered vulnerabilities in the IGEL OS Base System and the apps installed. This means that keeping up with updates is one of the most important measures in securing IGEL OS systems.

Prerequisites

  • Your devices are managed by the Universal Management Suite (UMS) 12

  • Your Universal Management Suite (UMS) has access to the IGEL App Portal. It must be registered for this; see Registering the UMS.

  • Your devices have valid licenses

Receiving regular safety information

→ To get new ISNs and ISN updates delivered to your inbox, subscribe to the Security Announcements Mailing List. Go to http://igel.com  and find the "Subscribe for Updates" form at the bottom of the page. This will initially subscribe you to all mailings from IGEL, but by using the unsubscribe link at the bottom of a mail, you can select which communications you wish to receive and which not.

Before You Begin

As the steps for the Base System differ from those for the other apps, the procedure is as follows:

Setting the UMS to Update Regularly

To ensure you have every version of your apps available in the UMS, we will set the UMS to import new versions automatically.

Follow these steps for each app installed on your devices. We will use the Base System as an example.

  1. In your UMS Web App, go to APPS and then open the Update Settings.

image-20241004-125034.png
image-20241004-125211.png

  1. Enable Check for updates and auto-import into UMS and Update Default Version manually.

image-20241004-132407.png

The UMS is now kept always up-to-date. The latest software versions are imported automatically. As Update Default Version manually is selected, the updates are not automatically rolled out to the devices.

The default interval for update checks is 120 minutes. You can configure the interval via Settings > Automatic Updates:

image-20241004-134050.png
image-20241004-134210.png

House Keeping: Delete Older, Unused Versions Regularly

If you have configured your UMS to import every new version of your imported apps, as described above, you should dispose of older, unused versions. It is recommended to do this regularly.

→ In your UMS Web App, go to the app version in question and clickimage-20241113-140849.pngto remove it.

image-20241113-150148.png

Setting up a Test Directory

For convenience, clarity, and error prevention, it is recommended to put test devices into a separate directory.

  1. In your UMS Web App, go to DEVICES and create a directory for your test devices, e.g., "Update test”.

image-20241015-143358.png
image-20241015-143614.png
image-20241015-152234.png

  1. Find your test devices and put them into the new test directory using drag & drop..

image-20241022-133143.png
image-20241015-150003.png
image-20241015-150513.png

Keeping the Base System up to Date

Testing the Base System Updates on One or a Few Devices

Unlike other apps, the Base System cannot be updated by setting the relevant profile to a specific IGEL OS Base System version. Therefore, we must proceed in two steps:

  1. Create a test profile to make sure that an appropriate profile controls the new Base System version

  2. Assign the new Base System version explicitly to the test devices

Creating the Test Profile

To create a test profile, we will duplicate the productive profile by exporting and re-importing it.

  1. In your UMS Web App, go to the Configuration Objects and then find the relevant profile.

image-20241028-083005.png

  1. Click Export Profile and save the file on your machine.

image-20241028-083103.png
image-20241028-083704.png

  1. Click image-20241023-134946.png and import the file.

image-20241028-083828.png
image-20241009-090142.png
image-20241028-083947.png

The imported profile is displayed underneath the original profile. The imported profile can be distinguished from the original one by its ID, which is higher.

image-20241028-084045.png

  1. Select the imported profile, and click image-20241023-135104.png to change the name appropriately.

image-20241028-084141.png
image-20241028-084257.png

  1. Set the app version of the test profile to the target version.

image-20241028-095141.png
image-20241028-095247.png
image-20241028-095458.png
image-20241028-095603.png

Assigning the Profiles to the Test Devices

  1. Find your test devices and detach the relevant productive profiles from each test device.

image-20241028-101757.png
image-20241028-101912.png

  1. Assign the test profile to your test directory.

image-20241028-104103.png
image-20241028-104210.png
image-20241028-104357.png
image-20241028-104805.png

Assigning the New Base System Version to the Devices

  1. Go to each of your test devices and check under Assigned Objects if a version of the IGEL OS Base System is assigned to the device.

image-20241023-075912.png

  1. Move your mouse to the right side of the IGEL OS Base System entry; if a Detach object button (image-20241023-091327.png) appears, click it and confirm your change.

image-20241023-091812.png
image-20241028-132333.png

  1. Go to the test directory and click Assign Object.

image-20241023-053805.png

  1. In the dialog Assign Object to Directory, choose the desired version of the IGEL OS Base System and assign it to the directory.

image-20241023-055056.png
image-20241023-055246.png

After a dialog timeout, the devices update to the new version of the IGEL OS Base System. You can perform your tests as appropriate.

Rolling out the Base System Update on All Devices

  1. Go to your productive profile and ensure it is set to use the default version of the app.

image-20241028-110752.png
image-20241028-111601.png

  1. In the apps section, select the app to be updated, and click Set Default Version.

image-20241028-113402.png

  1. Set the default version to the version you have tested successfully.

image-20241028-114004.png

  1. Choose whether the update should take place immediately or on the next reboot.

image-20241028-114153.png

On reboot, the devices update their Base System to the default version.

Keeping the Other Apps up to Date

For the following procedure, we assume you have profiles for the apps to be updated. To ensure that all apps are tested with the settings for productive operation, we create copies of the productive profiles.

We will use a profile for the Chromium browser as an example.

Testing the App Updates on One or a Few Devices

Creating the Test Profiles

To create a test profile, we will duplicate the productive profile by exporting and re-importing it.

  1. In your UMS Web App, go to the Configuration Objects and then find the relevant profile.

image-20241023-112606.png

  1. Click Export Profile and save the file on your machine.

image-20241023-112738.png
image-20241023-113003.png

  1. Click image-20241023-134946.png and import the file.

image-20241023-113143.png
image-20241009-090142.png
image-20241023-113256.png

The imported profile is displayed underneath the original profile. The imported profile can be distinguished from the original one by its ID, which is higher.

image-20241023-113400.png

  1. Select the imported profile, and click image-20241023-135104.png to change the name appropriately.

image-20241023-113527.png
image-20241023-113644.png

  1. Set the app version of the test profile to the target version.

image-20241023-113758.png
image-20241023-114020.png
image-20241023-114123.png
image-20241023-114255.png
image-20241023-114412.png
image-20241023-114603.png

Assigning the Profiles to the Test Devices

  1. Find your test devices and detach the relevant productive profiles from each test device.

image-20241024-084326.png
image-20241025-100346.png

  1. Assign the test profile to your test directory.

image-20241024-090313.png
image-20241024-091842.png
image-20241024-092048.png

After a dialog timeout, the device reboots to install the new version of the app. You can perform your tests as appropriate.

Rolling out the App Update on All Devices

  1. Go to your productive profile and ensure it is set to use the default version of the app.

image-20241028-135312.png
image-20241028-135423.png

  1. In the apps section, select the app to be updated, and click Set Default Version.

image-20241028-135544.png

  1. Set the default version to the version you have tested successfully.

image-20241028-140317.png

  1. Choose whether the update should take place immediately or on the next reboot.

image-20241028-114153.png

On reboot, the devices update their Base System to the default version.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.