You can set a schedule for the SentinelOne Management to automatically upgrade Agents based on preset maintenance windows. The setting is per scope: You can set a schedule for all endpoints in an Account, for all endpoints in a Site, and for all endpoints in a specific Group.

To define maintenance windows, in Sentinels > Upgrade Policy, set the time zone for the scope. Then choose the days of the week to run upgrades and, optionally, specific time periods during those days.

When you run the Update Agent action on selected Agents, Update Timing - According to Maintenance Window is selected by default. If you keep this selected, the upgrade is only sent to Agents when they are in a configured maintenance window. Until a maintenance window is available, the Upgrade Status is Scheduled.

update_timing_window_cropped.png

By default, the schedule for a scope is the same as that of its parent scope. For example, by default all Sites in an Account have the same Agent upgrade schedule as their Account.

You might want to change the default, for example, if you want to upgrade Agents from different Sites on different days.

To set a schedule for Agent upgrades:

  1. In the sidebar, click Open_Scope_Nav-142x124.png Scope and select a scope.

  2. In the Sentinels toolbar, click Upgrade Policy.

    upgrades_menu.png

  3. Go down to the Maintenance Windows Settings area.

    maintenance_window_change_policy.png

  4. If you see Inherited from... then all Agents in this scope have the same upgrade schedule as their parent scope. To change the upgrade schedule for this scope, click Change Policy.

  5. In the Maintenance Window Settings area, select the correct time zone by GMT.

    time_zone.png

    Note: The scheduled time is based on this setting, and does not adjust to Daylight Savings Time. If you change your clocks to Summer or Winter time, you must change this setting to adjust to the time change.

  6. Select the days you want to upgrade your endpoint’s Agent software.

    days_selected.png

  7. To select a specific time range, change All Day to Custom and select the time range.

    time_change.png

    Note: You set when the Management sends the upgrade command. The upgrade itself can run soon after that time. For example, if you set the time range from 9:00 to 11:00, the upgrade might start at 11:00 and might finish after 11:00.

  8. To add multiple time ranges in one day, click the + button next to the previous time range.

    You can set up to five timeframes for each day.

    plus_button.png

  9. Click Save.

  10. If you see the message At least one Scope has different Maintenance settings, then the displayed maintenance schedule has exceptions. For example, the maintenance schedule is correct for most Sites in an Account, but one Site in that Account has its own maintenance schedule.

    Click See the list to see the exception list.

    exception_list.png

    Click an item from the list to see its schedule.

To use the Maintenance Window when running the upgrades:

  1. Click Endpoints.

    The list of endpoints in the selected scope opens.

  2. Select endpoints to upgrade.

  3. Click Actions and select Update Agent.

    update_agent_action_red_box.png

  4. In Update Timing, make sure that According to Maintenance Window is selected.

    update_Agents_withe_Update_timing.png

  5. Select a package.

  6. Click Submit.

  7. Click Update Agent to confirm.

  8. Optional: From the sidebar, click Task Management to see the status of the upgrades.

    Upgrades that are waiting for the scheduled maintenance window show with the Status as Scheduled.

    upgrade_statuses-_scheduled_in_red.png

    The Upgrade Status also shows in the Endpoint Details in Tasks.

    task_status_in_endpoint_details.png