Installing the Maintenance Release
This section outlines the steps to install the Forcepoint Management Infrastructure maintenance and Forcepoint DLP maintenance files on your system.
Before you begin
Note: During maintenance release installation, you will be prompted to acknowledge telemetry data collection. Upon acknowledgment, the Telemetry toggle is
automatically enabled in Forcepoint Security Manager(FSM). After the installation is complete, you can turn off telemetry by navigating to in FSM and disabling the toggle.
Important Notes in 10.4.5
Note: If you uninstall Forcepoint DLP 10.4.5 or later and do not plan to reinstall another 10.4.x version, the System
module in the Deployment section in FSM becomes unavailable and displays an error. To resolve this issue, you must manually clean up the MCP
channel from the SQL Server database.
Run the procedure below on the database instance to perform the cleanup:
-- 1. Delete the event-service history rows (PA_RP_SERVICES) created by
createEventServicesHistoryForEndpoint
DELETE FROM PA_RP_SERVICES
WHERE ELEMENT_TYPE IN ('MCP_GATEWAY_DUMMY_AGENT', 'AI_SECURITY_DUMMY_AGENT');
-- 2. Delete the service directions child row(s)
DELETE FROM WS_SM_SRV_SET_DIRECTIONS WHERE SRV_SETTING_ID IN (SELECT ID FROM WS_SM_SERVICE_SETTINGS WHERE PARENT_ID IN (SELECT ID FROM WS_SM_SITE_ELEMENTS WHERE ELEMENT_TYPE IN ('MCP_GATEWAY_DUMMY_AGENT', 'AI_SECURITY_DUMMY_AGENT')));
-- 3. Delete the ServiceSetting child row(s) added by the data managers
DELETE FROM WS_SM_SERVICE_SETTINGS
WHERE PARENT_ID IN (
SELECT ID FROM WS_SM_SITE_ELEMENTS
WHERE ELEMENT_TYPE IN ('MCP_GATEWAY_DUMMY_AGENT', 'AI_SECURITY_DUMMY_AGENT')
);
-- 4. Defensive: any configuration properties set on these agents afterward
DELETE FROM WS_SM_CONFIGURATION_PROPERTIES
WHERE SITE_ELEMENT_ID IN (
SELECT ID FROM WS_SM_SITE_ELEMENTS
WHERE ELEMENT_TYPE IN ('MCP_GATEWAY_DUMMY_AGENT', 'AI_SECURITY_DUMMY_AGENT')
);
-- 5. Delete the agent rows themselves
DELETE FROM WS_SM_SITE_ELEMENTS
WHERE ELEMENT_TYPE IN ('MCP_GATEWAY_DUMMY_AGENT', 'AI_SECURITY_DUMMY_AGENT');
Important Notes and Limitations in 10.4.1
Note: The 10.4.1 installer is no longer available in the Forcepoint Hub Downloads page. For new installations, use the 10.4.2 or higher installer.
- The 10.4.1 Maintenance Release (MR) supports only Forcepoint DLP version 10.4.0.525 (General Availability (GA) build).
- Early Availability (EA) and non-525 builds (for example, 10.4.0.509, 10.4.0.498) cannot upgrade directly to 10.4.1 MR. Installing the MR on these versions fails due to a
version validation check.
Workaround/Recommended Upgrade Path
For systems running earlier GA or non-supported builds, the 10.4.1 MR installer will produce errors. Installation logs will indicate that the installed DLP version does not meet the required baseline version of 10.4.0.525.
Recommended approach:
- Run the PS script attached here as administrator.
- Verify that the script completes successfully by checking the log file FP_RegWorkaround.txt, saved in the same folder as the script.
- Confirm that the DisplayVersion value has been updated to
10.4.0.525for DLP and EIP by opening the log file FP_RegWorkaround.txt. The result should appear as shown below
- Proceed to the Installation Procedure section below.
Installation Procedure
Steps
-
To install the maintenance release for Forcepoint Management Infrastructure, do the following:
-
Double-click the fsm_v10_4_X_maintenance_release.exe file.
The Forcepoint Management Infrastructure Maintenance Release Setup dialog opens.
-
Double-click the fsm_v10_4_X_maintenance_release.exe file.
-
To install the maintenance release for Forcepoint DLP, do the following:
-
Double-click the dlp_v10_4_X_maintenance_release.exe file.
The Forcepoint DLP Maintenance Release Setup dialog opens.
-
Double-click the dlp_v10_4_X_maintenance_release.exe file.