Atera MSI installer Updates
Hello community members,
On Monday, August 25th, we sent out an email to all clients announcing availability of our new Windows Installer (MSI) with an updated certificate.
This was a precautionary measure, we are hardening the Atera installers so bad actors cannot make unauthorized use of the solution. In coordination with the certification authority we opted to rotate certificates and add additional safeguards to strengthen security and maintain trust.
This issue does not involve any compromise of Atera's customers, systems, or security.
We are automatically updating agents that are online. To make it easier for you to identify the devices that need your attention Atera has populated a list of devices pending updates, for impacted clients. The email will be sent to your admins by end of Tuesday, August 26.
What is the latest agent version?
latest v1: 1.8.8.0
latest v2: 2.3.9.0
Which agent versions are NOT Impacted by this certificate change and will continue to work as expected after August 30th?
1.8.7.6, 1.8.7.8, 2.3.7.0, 2.3.8.0
What can you do if devices are not automatically upgraded?
If Atera is unable to automatically upgrade the devices before August 30th, we recommend the following actions to ensure your Windows devices are up to date:
- Group Policy Update
Create a new Group Policy using the updated MSI installer [see our KB article for step-by-step guidance]. - Manual or Batch Installations
Use a dedicated script for installation. Our support team is available via chat to walk you through this process.
For future deployments, please use the new Windows MSI installer with the updated certificate.
Our support team is here 24/7 to assist you with all of the above. Please reach out via email to support@atera .com or via live chat.
Thanks
Muna Assi
Head of product marketing
Comments
-
We have been experiencing issues installing the new MSI's. Does the new MSI have additional changes to what needs to be allowed through firewalls and AV systems?
0 -
What about the Mac agents. Do they need update as well?
0 -
There is no impact on Linux or Mac agents
0 -
This communication has been thrust on us at the last minute, with hundreds of devices to get up to date over the holiday season when the highest number of machines will not even be turned on. This is a terrible way to handle this!
Not only that, but as usual there is a mish/mash of conflicting information, this is what was written on reddit:
Hey gang,
sorry for the wait, tried. to get a full response.
This is from our super support team:
Versions below 1.8.7.2 don’t update at all. From 1.8.7.2 up to 2.xxx, the updates are being rolled out gradually.
At the same time, if you add the curl command into automation and run it on a device, the agent will update straight to the latest version (no reinstall needed).
For older version below 1.8.7.2, there are batches for the update, but if you need to update right on the spot, the only thing is to simply run the installer again. Or (for running it on multiple devices at once) attach it to a script, add the script to an IT Automation profile, then run it on all the 1.8. X devices.
There are different articles for this:
Run a script: https://support.atera.com/hc/en-us/articles/218040797-Run-a-script
Create, upload script https://support.atera.com/hc/en-us/articles/235215188-Create-upload-and-generate-scripts
Add scripts to an automation profile https://support.atera.com/hc/en-us/articles/215952217-Add-scripts-to-an-automation-profile
If the issue persists:
Cleanup with the script from this article https://support.atera.com/hc/en-us/articles/5849002658844-How-do-I-remove-the-Atera-Agent-after-my-trial-has-expired
simply reinstall the agent
'-------------------
This paragraph makes no sense:
"For older version below 1.8.7.2, there are batches for the update, but if you need to update right on the spot, the only thing is to simply run the installer again. Or (for running it on multiple devices at once) attach it to a script, add the script to an IT Automation profile, then run it on all the 1.8. X devices."what do you mean by "there are batches for the update" Are you actually talking about "batch scripts" are available for manually updating, or that you are also updating the older versions in batches ?
"From 1.8.7.2 up to 2.xxx, the updates are being rolled out gradually."
So Just to clarify then agents that are on 2.2.6.0, 2.3.3.0 & 2.3.4.0 will not self update if they don't get your update in time ?0 -
Hi Nathan,
Maybe i can try to assist here regarding the supported agent versions and the upgrade.**Which agent versions will need to be upgraded?********
V1: anything below 1.8.7.6
V2: anything below 2.3.7.0You can have devices of V1 or V2 as long as they are on a supported version.
As long as your devices are connected to the internet and have the necessary pre-requisites, they update automatically. Again our support can assist.
Happy to assist you if you have further clarifications
0 -
Hi Muna, thanks for the clarification, but there is no way everything is going to be online before that date with the short timescale that you have given us.
I think I have slightly misunderstood and confused all the different recent announcements going on here, so am I right in saying the existing old agents no matter what version they are will keep working after the 30th August provided they meet the new TLS requirements?
it is just that you will not be able to use any older installers for new installations from that date?0 -
You will not be able to use old installers from August 30th and since we rotated certificate you might experience some disruptions with agents that are on "Unsupported versions" after August 30th.
Again, as soon as your devices come online they should automatically upgrade.
By end of today we will populate an in-app message that leads to an Analytical Report we built for all customers. It shows supported and outdated versions in a clear manner.1 -
I'm confused about this. I have about 130 clients running 1.8.7.2. What will happen to these after 30 August, if these machines stay turned off? What about those running other versions? Perhaps Atera could publish a very simple table showing a column for:
- Version
- Will it update automatically?
- What will happen if a machine stays offline after 30 August?
We also need to know what the effect will be if there is a problem after 30 August. Will we have enough control to run a script for example?
Also I noticed some discrepancies: most of my clients updated to 2.3.9.0 when I ran a script to download and execute using the CURL command detailed in the install agent feature. But when I ran the download manually, it seemed to update some to only 1.8.8.0.
We also need to know what the difference is between versions. What does 2.3.9.0 do that 1.8.8.0 doesn't.
Come on Atera, these questions should be answerable!
0 -
Hi there,
First off, ill post soon commentary on a new pre-defined report that we are publishing today that will give you real-time visibility on supported and outdated agent versions in your unique environment.
There is no difference between latest V1 and latest V2 supported versions, these are internal naming conventions. Most important is to be on an Atera supported version.Atera is performing updates in the background and as soon as your devices come online they should receive the update. Again, for each unique environment, support is best equipped to provide answers.
0 -
What about machines that are not on for this movement aka, leave of absense, maternity leave, vacation, that are scattered about states, regions, cities, and nations. Is this a sorry about your luck scenario?
1 -
@muna+prod I think @colton and @hegedusa are asking - if these "outdated" devices come online - after the 30th - will they automatically be triggered to update to a correct version without manual intervention? We see that most of our devices have been updated and with the new report available we can see the devices that might be affected. We want to know what happens to those clients after the 30th - no access till they get updated? - will they update on their own once they are online regardless if we "see" them in our Atera console?
0 -
Hi @daniel1 @colton @hegedusa
I recommend that you keep an eye on the report, as agents are updating all the time.
First, we recommend that you Whitelist the Atera agent, as recommended, to ensure your endpoints don't experience interruptions, or for the Antivirus to flag the outdated certificate.
As soon as your devices are online, we have a mechanism that will upgrade, BUT you we cannot guarantee the sequence of events, EDR first or Upgrade first. Therefore the Whitelisting is key here.1 -
So what exactly is the difference between 1.8.8.0 and 2.3.9.0?
Why isnt Atera updating all to the same and latest version?0 -
Hello @helmir
V2 agent is our latest version and its currently being gradually rolled out to all customers. Eventually all eligible devices will be automatically upgrade to this version. The new version includes improvements to the underlying technology, supportability and more. Customers are welcome to download the latest version and deploy it to all devices.
With that said your V1 is a fully supported version. it is still in use by a large number of clients, there is no downside of continuing to use it.1 -
Today, 9/10/25, My MSI download in all browsers are reporting virus and blocking download. USA/Oklahoma
0 -
Hi Rob, Please try again. There was an issue with Microsoft Defender that is resolved.
1
