Skip to main content
Rising Star
January 9, 2025

Upgrade to 24.3.1 has been a failure

  • January 9, 2025
  • 20 replies
  • 5146 views

Here is my list of problems:

  1. The new agent running as sra-pin.exe has been deployed as of v24.3.1 but the old bomgar-scc.exe and remnants are still installed on upgraded systems, including the service.
  2. The new agent upgrade removed the ability of the old agent to be removed from Add/Remove programs, requiring manual registry scrubbing and file deletion.
  3. The new agent installs on diffierent locations depending if it’s upgraded or newly installed, making it almost impossible to detect via automation tools like InTune.
  4. The old process bomgar-scc.exe is still used when agent connects to a jump client, even though this process does not exist anywhere as executable before the connection is made.
  5. The new agent service stops running and does not resume, even after reboots. However, the sra-pin.exe process can be found running under the user context. The device shows offline regardless.
  6. Reinstalling the agent does not resolve this log term, after a day or so the agent goes back offline.
  7. Most devices are now showing offline, and some are in locations where IT support is not available, creating a very difficult situation.
  8. Complete uninstall and reinstall is not possible because of our company global span and many jump groups.
  9. Opened case has gone nowhere, the rep is offering a downgrade to 24.2.4 or waiting on the new release, without addressing how the offline agents will be handled.

Here is a screenshot I sent recently to support that covers most of the problems listed below.

 

20 replies

Rising Star
January 14, 2025

We are running two on-prem appliances in a failover relationship which allows us to upgrade asynchronously and do acceptance testing on the secondary / non-prod environment before applying the updates in production.

We are a cloud customer, so no such access.

 

Veteran
January 14, 2025

Moving to the cloud comes with trade-offs. It might reduce the workload for managing infrastructure, but it also means relying on the vendor for certain controls and access.

Apprentice
January 15, 2025

What are the security implications of having downgraded back to 24.2? I thought 24.3 was meant to patch a fairly serious security vulnerability. Would be great to get input from the BeyondTrust team.

BeyondTrust Employee
January 15, 2025

Hello ​@ChristofferH - All of the current SRA Software versions have a BT24-10 and BT24-11 patches available to solve the latest security CVE’s you are referring to. Any upgrades (or downgrades) will require these patches to be installed ASAP after the upgrade is completed.

I hope this helps with your queries!

Apprentice
January 15, 2025

Hello ​@ChristofferH - All of the current SRA Software versions have a BT24-10 and BT24-11 patches available to solve the latest security CVE’s you are referring to. Any upgrades (or downgrades) will require these patches to be installed ASAP after the upgrade is completed.

I hope this helps with your queries!

Thanks - will this be done autonomously on your side for cloud appliances? We were downgraded back to 24.2 but I’ve no idea if any patches were applied after that.

BeyondTrust Employee
January 15, 2025

Hello ​@ChristofferH - while I am fairly certain you would have been automatically patched being on a Cloud instance, it may be best to get a Support Case logged with our Support Team so they an 100% confirm for you. Always best to be sure!

Thanks!

Apprentice
January 30, 2025

We are seeing the same issue on this upgraded version.  Has anyone had any update from support on the status of a patch to fix this issue?

Veteran
January 30, 2025

We are seeing the same issue on this upgraded version.  Has anyone had any update from support on the status of a patch to fix this issue?

I have been told that it is planned to be fixed in 24.3.2. There's no concrete ETA for its release at the moment though.

Apprentice
February 4, 2025

I have not seen this post til now but I had already deployed my own remediation for this very issue as it was driving me crazy that Jumps would go offline for no reason.  I mentioned this on a service review recently with my account manager and technical account manager and I was told this was news to them.  I will see if I can push them to get more details and reference this post too.

BeyondTrust Employee
February 5, 2025

Hello All - just to advise that PRA 24.3.2 has now been released, as per the Release Notes: https://docs.beyondtrust.com/pra/changelog/privileged-remote-access-24-3-2. I believe the RS release will be soon.