Updating Invicti Enterprise On-Premises

Invicti Enterprise On-Premises runs on your servers and network. New versions require manual updates. To see what items are included in each of the updates, refer to our Release Notes.

This guide explains how to download and install the latest version.

Important update instructions for Invicti Enterprise On-Premises

To ensure a smooth update of Invicti Enterprise On-Premises:

• Pause any active scans before updating.
• Allowlist www.invicti.com for update notifications.
• Back up your database before starting (refer to Microsoft documentation for guidance).
• Restart the system if prompted during installation.
• Add Invicti files and folders to your antivirus/anti-malware exception list to prevent performance issues. For more information, refer to Excluding Invicti files from antivirus scans.

How to update Invicti Enterprise On-Premises

The update process involves several steps:

1. Download the .zip file and extract the content
2. Update the Invicti Enterprise web app and Authentication Verifier service
3. Update the Invicti Enterprise agent
4. Update the Authentication Verifier agent
5. Update the IAST Bridge (optional)

Step 1: How to download the zip file

1. When a new version of Invicti Enterprise On-Premises is available, a notification is displayed with the option to download the latest update. Select that linked text in the notification to download the zip file.

2. From the download location, extract the .zip file to a directory. Ensure the following files appear in the extracted folder:

• AgentSetup.exe (Invicti Enterprise Agent installer)
• ApiHubServiceSetup.exe (API Security installer)
• AuthVerifierAgentSetup.exe (Invicti Enterprise Authentication Verifier Agent installer)
• AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer)
• IASTBridgeSetup.exe (Invicti IAST Bridge installer)
• WebAppSetup.exe (Invicti Enterprise Application Server installer)

Step 2: How to update the Invicti Enterprise web app and Authentication Verifier service

1. Run the WebAppSetup.exe file. This will run the Web Application Setup and the Authentication Verifier Service Setup.

1. Review the End-User License Agreement, and if you agree, select the ‘I accept the terms in the License Agreement’ checkbox. Selecting ‘I do not accept the terms in the Licence Agreement’ will cancel the installation. Click Next.

2. On the Ready to Install window, click Install. Wait for the Installing Invicti Enterprise Web Application step to be displayed.

3. If you receive this message, select OK to continue with the installation. The message appears several times. Clicking Cancel will cancel the entire installation.

4. The Setup Wizard is initiated. Click Next to continue.

5. On the Ready to Install page, click Install to initiate the installation.

6. Wait for the installation to complete, then click Finish on the Authentication Verifier Service Setup Wizard.

7. You are now returned to the Invicti Enterprise Web Application Setup window. If desired, deselect the Launch Invicti Enterprise Web Application checkbox, then click Finish.

You need to restart the system now. After the restart, the web application is updated and ready to be used.

Step 3: How to update the Invicti Enterprise agent

There are two options for updating the Invicti Enterprise agent. Choose your preferred method:

1. Run the AgentSetup.exe file from the extracted folder.
2. Use the Update Agent command in the Invicti Enterprise user interface.

Option A: Update the agent using the AgentSetup.exe file

1. Run the AgentSetup.exe file.
2. Click Next to continue.

3. Review the pre-populated information and click Next.

4. Click Install to begin the installation.

5. Click Finish to complete the installation.

Option B: Update the agent using the Update Agent command

1. Select Agents > Manage Agents from the left-side menu.
2. Locate the agent and on the right, select Commands > Update Agent. The installation is completed as a background task. You will not be able to see the process.

3. After a few minutes, manually refresh the Agents > Manage Agents page. The Agent Version number has been updated.

Step 4: How to update the Authentication Verifier agent

There are two options for updating the Authentication Verifier agent. Choose your preferred method:

1. Run the AuthVerifierAgentSetup.exe file from the extracted folder.
2. Use the Update Agent command in the Invicti Enterprise user interface.

Option A: Update the agent using the AuthVerifierAgentSetup.exe file

1. Run the AuthVerifierAgentSetup.exe file.
2. Click Next to continue.

3. Verify that the installation folder is correct. If you need to change it, click Browse and choose a different folder location. After that, click Next.

4. Enter the API Token and click Next.

5. Click Install to begin the installation of the authentication verifier agent.

6. Click Finish to complete the installation.

Option B: Update the agent using the Update Agent command

1. Select Agents > Manage Verifiers from the left-side menu.
2. Locate the verifier and on the right, select Commands > Update Agent. The installation is completed as a background task. You will not be able to see the process.

3. After a few minutes, manually refresh the Agents > Manage Auth Verifiers page. The Agent Version number has been updated.

Step 5: How to update the IAST Bridge

1. Run the IASTBridgeSetup.exe file.
2. Click Next to continue.

3. Verify that the installation folder is correct. If you need to change it, click Browse and choose a different folder location. After that, click Next.

4. Review the Service Port number and click Next.

5. Click Install to begin the installation of the IAST Bridge.

6. Click Finish to complete the installation.