Support
Getting Started

Updating Invicti Enterprise On-Premises

This document is for:
Invicti Enterprise On-Premises

Invicti Enterprise On-Premises runs on your servers and network. When a new version is released, you need to update your Invicti Enterprise installation manually. This article explains how to download and install the latest version to update Invicti Enterprise On-Premises.

IMPORTANT:

  • While updating Invicti Enterprise On-Premises, it is recommended to pause any scans.
  • To receive update notifications, allowlist www.invicti.com
  • It is strongly recommended that you back up your database before the update process. For further information, refer to this Microsoft document.
  • If Windows requires you to restart the system during the installation or update, please restart the system.
  • Some antivirus or anti-malware software may prevent Invicti Enterprise On-Premises from working or cause it to run very slowly. To ensure you can use Invicti On-Premises effectively, we recommend adding Invicti files and folders to your antivirus (or other protection scanning software) exception list (also known as a 'whitelist' or 'allow-list'). For more information about the Invicti files and folders we recommend excluding from your antivirus software, refer to Excluding Invicti files from antivirus scans.

NOTE: The Authentication Verifier Service requires .NET 5.0 or .NET 6.0 If they are not available on the target system, the installer will ask you to install one of them on the target system.

NOTE: The db_owner permission is required during the installation and updating. The db_datareader and db_datawriter roles are enough for the daily operation.

Updating Invicti Enterprise On-Premises 

IMPORTANT: The following instructions are valid for customers who have the following versions:

  • v2.3.1
  • v2.4
  • v2.4.1
  • v2.4.2
  • v23.1.0
  • v23.2.0

How to update Invicti Enterprise On-Premises 

  1. Log in to Invicti Enterprise.
  2. On the Global Dashboard page, select Download the latest update. The download begins automatically.

TIP: To manually check the updates, select Settings > Licensing from the main menu. Then, select Check for Updates.

  1. From the download location, extract the .zip file to a directory. Make sure the following files appear in the extracted folder.
  • WebAppSetup.exe (Invicti Enterprise Application Server installer)
  • AgentSetup.exe (Invicti Enterprise Agent installer)
  • AuthVerifierSetup.exe (Invicti Enterprise Authentication Verifier installer)
  • AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer)
  • IASTBridgeSetup.exe (Invicti IAST Bridge installer)
  1. Run the WebAppSetup.exe file.
  2. From the End-User License Agreement window, accept the agreement and select Next.

  1. On the Ready to Install window, select Install. The Installing Invicti Enterprise Web Application step is displayed. Wait.

  1. The installation asks you to install the prerequisite: The Authentication Verifier Service.

  1. On the Select Installation Folder step, select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.

  1. On the Completing the Invicti Enterprise Authentication Verifier Service Setup Wizard step, select Finish to complete the installation.

  1. The Completing the Invicti Enterprise Web Application Setup Wizard step is displayed.

  1. Select Finish.

TIP: For information about configuring the Authentication Verifier Service, refer to Authentication Verifier Settings. 

  1. Now, update the Invicti Agent. To do this, there are two alternatives:
  • Run the AgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, do the following:
  1. Log in to Invicti Enterprise.
  2. From the main menu, select Agents > Manage Agents.
  3. From the Commands drop-down, select Update Agent.

  1. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.

NOTE: The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, refer to Agents in Invicti Enterprise On-Premises.

  1. Now, update the Invicti Authentication Verifier Agent. To do this, there are two alternatives:
  • Run the AuthVerifierAgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, do the following:
  1. Log in to Invicti Enterprise.
  2. From the main menu, select Agents > Manage Verifiers.
  3. From the Commands drop-down, select Update Agent. 

  1. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.

NOTE: The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, refer to Agents in Invicti Enterprise On-Premises.

  1. Run the IASTBridgeSetup.exe file and follow the onscreen instructions to update the bridge.

Updating Invicti Enterprise On-Premises (from v2.3 to any newer version)

IMPORTANT: These instructions are valid for customers who have v2.3 and want to update to any of the following versions:

  • v2.3.1
  • v2.4
  • v2.4.1
  • v2.4.2
  • v23.1.0
  • v23.2.0
  • v23.3.0

How to update Invicti Enterprise On-Premises from v2.3 to any newer version

IMPORTANT: Before starting the update, uninstall the Authentication Verifier service. To do this, refer to Removing and re-installing the Authentication Verifier Service.

  1. Log in to Invicti Enterprise.
  2. On the Global Dashboard page, select Download the latest update. The download begins automatically.

TIP: To manually check the updates, select Settings > Licensing from the main menu. Then, select Check for Updates.

  1. From the download location, extract the .zip file to a directory. Make sure the following files appear in the extracted folder.
  • WebAppSetup.exe (Invicti Enterprise Application Server installer)
  • AgentSetup.exe (Invicti Enterprise Agent installer)
  • AuthVerifierSetup.exe (Invicti Enterprise Authentication Verifier installer)
  • AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer)
  • IASTBridgeSetup.exe (Invicti IAST Bridge installer)
  1. Run the WebAppSetup.exe file.
  2. From the End-User License Agreement window, accept the agreement and select Next.

  1. On the Ready to Install window, select Install. The Installing Invicti Enterprise Web Application step is displayed. Wait.

  1. The installation asks you to install the prerequisite: The Authentication Verifier Service.

  1. On the Select Installation Folder step, select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.

  1. On the Completing the Invicti Enterprise Authentication Verifier Service Setup Wizard step, select Finish to complete the installation.

  1. The Completing the Invicti Enterprise Web Application Setup Wizard step is displayed.

  1. Select Finish.

NOTE: For information about configuring the Authentication Verifier Service, refer to Authentication Verifier Settings.

  1. Now, update the Invicti Agent. To do this, there are two alternatives:
  • You can run the AgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, you can follow these instructions:
  1. Log in to Invicti Enterprise.
  2. From the main menu, select Agents > Manage Agents.
  3. From the Commands drop-down, select Update Agent.

  1. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.

NOTE: The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, see Agents in Invicti Enterprise On-Premises.

13. Now, update the Invicti Authentication Verifier Agent. To do this, there are two alternatives:

  • You can run the AuthVerifierAgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, you can follow these instructions:
  1. Log in to Invicti Enterprise.
  2. From the main menu, select Agents > Manage Verifiers.
  3. From the Commands drop-down, select Enable Auto Update.

  1. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.

NOTE: The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, see Agents in Invicti Enterprise On-Premises.

14. Run the IASTBridgeSetup.exe file and follow the onscreen instructions to update the bridge.

Removing and re-installing the Authentication Verifier Service

The following instructions are necessary for customers who have v2.3 and want to update their applications to newer versions.

Step 1. Save your current ISS binding settings

  1. Open Internet Information Services (ISS) Manager, and select InvictiAVService from the Sites list.
  2. From the Edit Site section, select Bindings...
  3. From the Site Bindings window, select your website, then Edit.
  4. Take notes of your Host name, Port number, and SSL certificate, and save them.

You will need this information once you re-installed the Authentication Verifier Service.

Step 2. Uninstalling the Authentication Verifier Service

  1. On Windows, go to Start > Settings > Add or remove programs.
  2. Find the Invicti Enterprise Authentication Verifier Service.
  3. Select Uninstall. Follow onscreen instructions to remove the service.

Once Windows completes the uninstallation, you can update the Invicti Enterprise Web Application that also installs the Authentication Verifier Service.

Step 3. Updating the Invicti Enterprise Web Application and installing the Authentication Verifier Service

  1. Run the WebAppSetup.exe file and follow onscreen instructions.
  2. The installation asks you to install the prerequisite: The Authentication Verifier Service.
  3. Select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.
  4. Select Finish to complete the installation.

Step 4. Re-configuring the ISS binding

  1. Open Internet Information Services (ISS) Manager, and select InvictiAVService from the Sites list.
  2. From the Edit Site section, select Bindings...
  3. Enter the necessary information based on the file you created in Step 1.
  4. Select OK.

Step 5. Configuring the Authentication Verifier Service

  1. Navigate to the Invicti Enterprise Authentication Verifier Service folder. (By default, it is under C:\Program Files (x86)\. Installed to a different location? Check that location.)
  2. Find and open the appsettings.json file.
  3. Paste the Service Token value into the RootApiToken value.
  4. Save and close the file.
  5. Open the IIS Manager and restart the InvictiAVService listed under the Sites.

Once you reconfigured the Authentication Verifier Service, you can proceed with updating the Authentication Verifier Agent, the Invicti Agent, and the Invicti IAST Bridge.

Updating Invicti Enterprise On-Premises to v2.3 from previous versions

Invicti Enterprise On-Premises 2.3 comes with new installation files, such as the Authentication Verifier Service and the IAST Bridge, and updated Authentication Verifier Agent.

Since Invicti Enterprise On-Premises 2.3 contains breaking changes for the Authentication Verifier, you need to have a clean installation for the Authentication Verifier Agent. If you have any verifier agents from the previous versions, such as v2.2.5, they do not work with the On-Premises 2.3 and newer versions.

IMPORTANT: These instructions are valid for customers who have v2.2.5 or any previous versions and want to update their applications to the following version:

  • v2.3
  • v2.3.1
  • v2.4
  • v2.4.1
  • v2.4.2
  • v23.1.0
  • v23.2.0
  • v23.3.0

How to update Invicti Enterprise On-Premises

  1. Log in to Invicti Enterprise
  1. On the Global Dashboard page, select Download the latest update. The download begins automatically.

TIP: To manually check for updates, select Settings > Licensing from the main menu. Then, select Check for Updates.

  1. From the download location, extract the .zip file to a directory. Make sure the following files appear in the extracted folder.
  • WebAppSetup.exe (Invicti Enterprise Application Server installer)
  • AgentSetup.exe (Invicti Enterprise Agent installer)
  • AuthVerifierSetup.exe (Invicti Enterprise Authentication Verifier installer)
  • AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer. This installer comes with the Invicti Enterprise On-Premises 2.3.)
  • IASTBridgeSetup.exe (Invicti IAST Bridge installer- This installer comes with the Invicti Enterprise On-Premises 2.3.)
  1. Run the WebAppSetup.exe file. The Invicti Enterprise Web Application Setup wizard is displayed and opens at the Ready to Install step.

  1. Select Install. The Installing Invicti Enterprise Web Application step is displayed. Wait.
  2. The installation asks you to install the prerequisite: The Authentication Verifier Service.

TIP: The Authentication Verifier Service is optional. If you are scanning websites that require form authentication, you need to install it. You can also install the service later. For further information about installing the verifier service, see Authentication Verifier Settings.

  1. Select Next to continue.

  1. On the Select Installation Folder step, select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.

  1. On the Completing the Invicti Enterprise Authentication Verifier Service Setup Wizard step, select Finish to complete the installation.

  1. The Completing the Invicti Enterprise Web Application Setup Wizard step is displayed.

  1. Select Finish.

NOTE: For further information about the Authentication Verifier Service and Verifier Agent, refer to Authentication Verifier Settings.

TIP: Invicti Enterprise On-Premises 2.3 comes with the rebranding. You may need to clear your cache to properly see new images.

  1. Now, update the Invicti Agent. To do this, there are two alternatives:
  • You can run the AgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, you can follow these instructions:
  1. Log in to Invicti Enterprise.
  2. From the main menu, select Agents > Manage Agents.
  3. From the Commands drop-down, select Update Agent.

  1. Select Yes.

Once the agent is updated, Invicti Enterprise notifies you.

NOTE: The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, refer to Agents in Invicti Enterprise On-Premises.

Once you update all these files, you can start using Invicti Enterprise On-Premises. There is no additional step to re-configure the new version.

You can check Invicti Enterprise's version from the About page available under [Your Name] (top right of the window).

« Back to the Invicti Support Page

Invicti Help Center

Our Support team is ready to provide you with technical help.

Go to Help Center This will redirect you to the ticketing system.