Upgrade Deployment
Before starting the Workspace Control upgrade process, ensure that your environment meets the requirements outlined in Prerequisites.
For the upgrade to Workspace Control version 10.18.99.0 (Early Access), please use the Shield API guide. It contains information that is critical for a successful upgrade.
Ivanti cannot be held responsible for any issue that may arise during or after an upgrade. If an upgrade is applied to a production environment and triggers a production stop, Ivanti Support will ask you to rollback the upgrade and then help you investigate and solve the introduced issue.
DTAP-street approach
When upgrading, Ivanti recommends taking the DTAP-street approach to allow a phased introduction of Workspace Control into your production environment.
As with any new version of Workspace Control, Ivanti recommends first testing the upgrade in a test environment, followed by an acceptance test. A test setup can be configured for a pilot group with users from different departments and the user experience can be monitored. This allows you to test the Workspace Control upgrade procedure safely and in a controlled way.
After the tests are successful, back up your production environment before upgrading Workspace Control.
Types of installation files
There are three different files you can use to upgrade your Workspace Control environment:
-
Upgrade pack: attended installation of upgrades for Console and Agent.
-
Auto-upgrade pack: unattended installation upgrades for Console and Agent. They do not require your attention and can be scheduled for a specified time.
-
MSI files: Relay Servers can be upgrade only by running specific MSI files.
Upgrade Procedure
To upgrade Workspace Control in your environment, follow these steps:

Consider the following before you start the upgrade process:
-
The first machine in your production environment must:
-
be running a Full or Console-only installation of Workspace Control/RES ONE Workspace
-
have a direct connection to the Datastore, and not to a Relay Servers. If the attended Workspace Control upgrade is first attempted from a computer connected to a Relay Server, and not directly to the Datastore, it results in the following error:
-
be upgraded as attended, using the Ivanti Workspace Control Upgrade Pack x.x.x.x.exe,. This ensures that the Datastore is correctly updated. After this first upgrade, you can install Ivanti Workspace ControlAuto Upgrade Pack x.x.x.x.exe (unattended approach) on all other machines.
Configured for Relay Server connection, first run the Upgrade Pack on an agent connected directly to the database.
-
-
Ensure you are logged in as an Administrator.
-
Ensure the Administrator session is not a Workspace Control managed session. Otherwise pfwsmgr.exe and other files can become locked and cannot be upgraded.
This can be easily achieved by adding the admin to the bypass composer list. In Setup > Advanced Settings select Bypass composer for accounts and groups. In the Bypass composer dialog box that opens add/select the necessary administrative account.
To upgrade Workspace Control on the first machine in your working environment, follow the next steps:
-
Store the Workspace Control Upgrade Pack executable locally on the computer to upgrade.
-
Run the Workspace Control Upgrade Pack and follow the steps of the Upgrade Wizard.
-
After completing the Upgrade Wizard, reboot the computer, in order to complete the upgrade. The new version of Workspace Control becomes available to users when they start a new session.

A new version of Workspace Control includes several enhancements and fixes that only take effect when the Relay Servers, if present in your Workspace Control environment, are also upgraded.
Ivanti recommends upgrading the Relay Servers after upgrading the first Workspace Control machine that is directly connected to the Datastore and runs a Console-only or full installation of Workspace Control.
Relay Servers have different Relay server prerequisites and they have separate installation files:
-
Ivanti Workspace Control Relay Server(x64) 10.X.X.X.msi for 64-bit machines.
-
Ivanti Workspace Control Relay Server(x86) 10.X.X.X.msi for 32-bit machines.
Consider the following when upgrading Relay Servers:
-
Ivanti recommends upgrading Relay Servers before upgrading all remaining Agents. However, it is possible to connect newer versions of Agents to older Relay Servers. These Relay Servers may not be able to process newly added or updated features present in the newer version of the product, and therefore might behave incorrectly if the Agents are upgrade first.
-
When using Relay Servers in cascading setups, first upgrade the Relay Servers that are directly connected to the Datastore, then continue with the Relay Servers connected to those and so on.

Consider the following when upgrading Agents:
-
Use the Workspace Control Auto Upgrade Pack to upgrade all other Agents.
-
Ensure you install at least one Workspace Control Upgrade Pack manually on a machine connected directly to the Datastore. This ensures that the Datastore is correctly updated. The upgrade is not successful if the machine is connected to a Relay Server, instead of the Datastore.
-
Ensure the Agent cache is synchronized with the Datastore.
-
Ensure you are logged in as an Administrator.
-
Ensure the Administrator session is not a Workspace Control managed session. Otherwise pfwsmgr.exe and other files can become locked and cannot be upgraded.
-
After the upgrade, reboot all other machines running the new versions of Agent.
This can be easily achieved by adding the admin to the bypass composer list. In Setup > Advanced Settings select Bypass composer for accounts and groups. In the Bypass composer dialog box that opens add/select the necessary administrative account.
In production environments, Ivanti recommends to upgrade per group of user sessions. For example, upgrade per Workspace Container based on operating system, IP range or other Zone rules.
Different versions of Workspace Control can run next to each other in a mixed environment.
A video tutorial about the upgrade process is available.