Skip to content
Dynacop Docs

Automatic updates

Dynacop Setup installs two services: the agent and a small updater. The updater’s only job is to keep the agent current.

How it works

Section titled “How it works”
  • The updater checks for a new published agent version every few minutes.
  • When one is available (and updates are allowed for that resource), it downloads the installer, verifies its SHA-256 checksum against the release manifest, and installs it.
  • Downgrades are refused, and failed attempts back off before retrying.
  • An update does not remove the machine’s registration or any access — upgrades preserve everything.

Controlling updates per resource

Section titled “Controlling updates per resource”

Each resource has an Automatic update toggle in its policy. When it’s off, that machine genuinely never self-updates; instead, admins receive an “update available — install manually” email when a new version is published.

Seeing what happened

Section titled “Seeing what happened”
  • Audit → Agent updates lists every attempt: from-version → to-version and the result (success, failed, downgrade blocked, offered).
  • Admins are emailed on a successful update, after repeated failures, and if the updater itself goes silent for an extended period.

If a machine falls behind

Section titled “If a machine falls behind”

Old agent versions still work, but some newer capabilities (for example, Shield’s automatic blocking) need a recent version — the panel flags these cases honestly (e.g. block pending). If auto-update is off, run the current Dynacop Setup manually; registration is preserved.