Get a demo
AppSec with Zero Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Support
Getting Started

Updating Invicti Enterprise On-Premises

This document is for:
Invicti Enterprise On-Premises

Invicti Enterprise is available as an On-Demand and On-Premises solution.

Invicti Enterprise On-Premises runs on your servers and network, so you need to update it manually. The latest version offers new security checks and improvements to enhance your security.

This topic explains how to update Invicti Enterprise On-Premises. In order to install and configure the On-Premises, see Installing and Configuring Invicti Enterprise On-Premises.

While updating Invicti Enterprise On-Premises, it is recommended to pause any scans.

To receive update notifications, allowlist www.invicti.com

It is strongly recommended that you back up your database before the update process. For further information, see this Microsoft document.

If Windows requires you to restart the system during the installation or update, please restart the system.

The Authentication Verifier Service requires .NET 5.0 or .NET 6.0.
If they are not available on the target system, the installer will ask you to install one of them on the target system.

The db_owner permission is required during the installation and updating. The db_datareader and db_datawriter roles are enough for the daily operation.

Updating Invicti Enterprise On-Premises

The following instruction is valid for those that have the following versions:

  • v2.3.1
  • v2.4
  • v2.4.1
  • v2.4.2
  • v23.1.0
  • v23.2.0
  • v23.3.0
  • v23.4.0
How to update Invicti Enterprise On-Premises
  1. Log in to Invicti Enterprise.
  2. On the Global Dashboard page, select Download the latest update. The download begins automatically.
  3. From the download location, extract the .zip file to a directory. Make sure the following files appear in the extracted folder.
    • WebAppSetup.exe (Invicti Enterprise Application Server installer)
    • AgentSetup.exe (Invicti Enterprise Agent installer)
    • AuthVerifierSetup.exe (Invicti Enterprise Authentication Verifier installer)
    • AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer)
    • IASTBridgeSetup.exe (Invicti IAST Bridge installer)
  4. Run the WebAppSetup.exe file.
  5. From the End-User License Agreement window, accept the agreement and select Next.
  1. On the Ready to Install window, select Install. The Installing Invicti Enterprise Web Application step is displayed. Wait.
  2. The installation asks you to install the prerequisite: The Authentication Verifier Service.
  1. On the Select Installation Folder step, select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.
  1. On the Completing the Invicti Enterprise Authentication Verifier Service Setup Wizard step, select Finish to complete the installation.
  1. The Completing the Invicti Enterprise Web Application Setup Wizard step is displayed.
  1. Select Finish.
  2. Now, update the Invicti Agent. To do this, there are two alternatives:
    • Run the AgentSetup.exe file and follow the onscreen instructions to update the Agent.
    • Or, do the following:
      1. Log in to Invicti Enterprise.
      2. From the main menu, select Agents > Manage Agents.
      3. From the Commands drop-down, select Update Agent.
      4. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.
  3. Now, update the Invicti Authentication Verifier Agent. To do this, there are two alternatives:
    • Run the AuthVerifierAgentSetup.exe file and follow the onscreen instructions to update the Agent.
    • Or, do the following:
      1. Log in to Invicti Enterprise.
      2. From the main menu, select Agents > Manage Verifiers. 
      3. From the Commands drop-down, select Update Agent.
      4. Select Yes.
    • Once the agent is updated, Invicti Enterprise notifies you. (Note that the Auto Update may take some time.)
  4. Run the IASTBridgeSetup.exe file and follow the onscreen instructions to update the bridge.

Updating Invicti Enterprise On-Premises (from v2.3 to any newer versions)

This instruction is valid for those who have v2.3 and want to update their applications to any of the following versions:

  • v2.3.1 
  • v2.4
  • v2.4.1 
  • v2.4.2
  • v23.1.0
  • v23.2.0
  • v23.3.0
  • v23.4.0
  • v23.5.0
How to update Invicti Enterprise On-Premises from v2.3 to newer versions

Before starting the update, uninstall the Authentication Verifier service. To do so, see Removing and re-installing the Authentication Verifier Service.

  1. Log in to Invicti Enterprise.
  2. On the Global Dashboard page, select Download the latest update. The download begins automatically.

To manually check the updates, select Settings > Licensing from the main menu. Then, select Check for Updates.

  1. From the download location, extract the .zip file to a directory. Make sure the following files appear in the extracted folder.
  • WebAppSetup.exe (Invicti Enterprise Application Server installer)
  • AgentSetup.exe (Invicti Enterprise Agent installer)
  • AuthVerifierSetup.exe (Invicti Enterprise Authentication Verifier installer)
  • AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer)
  • IASTBridgeSetup.exe (Invicti IAST Bridge installer)
  1. Run the WebAppSetup.exe file.
  2. From the End-User License Agreement window, accept the agreement and select Next.
  1. On the Ready to Install window, select Install. The Installing Invicti Enterprise Web Application step is displayed. Wait.
  1. The installation asks you to install the prerequisite: The Authentication Verifier Service.
  1. On the Select Installation Folder step, select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.
  1. On the Completing the Invicti Enterprise Authentication Verifier Service Setup Wizard step, select Finish to complete the installation.
  1. The Completing the Invicti Enterprise Web Application Setup Wizard step is displayed.
  1. Select Finish.

Configuring the Authentication Verifier Service? See Authentication Verifier Settings.

  1. Now, update the Invicti Agent. To do this, there are two alternatives:
  • You can run the AgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, you can follow these instructions:
    1. Log in to Invicti Enterprise.
    2. From the main menu, select Agents > Manage Agents.
    3. From the Commands drop-down, select Update Agent.
  1. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.

The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, see Agents in Invicti Enterprise On-Premises

  1. Now, update the Invicti Authentication Verifier Agent. To do this, there are two alternatives:
  • You can run the AuthVerifierAgentSetup.exe file and follow the onscreen instructions to update the Agent.
  • Or, you can follow these instructions:
    1. Log in to Invicti Enterprise.
    2. From the main menu, select Agents > Manage Verifiers.
    3. From the Commands drop-down, select Update Agent.
  1. Select Yes. Once the agent is updated, Invicti Enterprise notifies you.

The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, see Agents in Invicti Enterprise On-Premises

  1. Run the IASTBridgeSetup.exe file and follow the onscreen instructions to update the bridge.

Once you update all these files, you can start using Invicti Enterprise On-Premises.

Removing and re-installing the Authentication Verifier Service

Step 1. Save your current ISS binding settings

  1. Open Internet Information Services (ISS) Manager, and select InvictiAVService from the Sites list.
  2. From the Edit Site section, select Bindings…
  3. From the Site Bindings window, select your website, then Edit.
  4. Take notes of your Host name, Port number, and SSL certificate, and save them.

You will need this information once you re-installed the Authentication Verifier Service.

Step 2. Uninstalling the Authentication Verifier Service

  1. On Windows, go to Start > Settings > Add or remove programs.
  2. Find the Invicti Enterprise Authentication Verifier Service.
  3. Select Uninstall. Follow onscreen instructions to remove the service.

Once Windows completes the uninstallation, you can update the Invicti Enterprise Web Application that also installs the Authentication Verifier Service.

Step 3. Updating the Invicti Enterprise Web Application and installing the Authentication Verifier Service

  1. Run the WebAppSetup.exe file and follow onscreen instructions.
  2. The installation asks you to install the prerequisite: The Authentication Verifier Service.
  3. Select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.
  4. Select Finish to complete the installation.

Step 4. Re-configuring the ISS binding

  1. Open Internet Information Services (ISS) Manager, and select InvictiAVService from the Sites list.
  2. From the Edit Site section, select Bindings…
  3. Enter the necessary information based on the file you created in Step 1.
  4. Select OK.

Step 5. Configuring the Authentication Verifier Service

  1. Navigate to the Invicti Enterprise Authentication Verifier Service folder. (By default, it is under C:\Program Files (x86)\. Installed to a different location? Check that location.)
  2. Find and open the appsettings.json file.
  3. Paste the Service Token value into the RootApiToken value.
  4. Save and close the file.
  5. Open the IIS Manager and restart the InvictiAVService listed under the Sites.

Updating Invicti Enterprise On-Premises to v2.3 or newer versions from previous versions

Invicti Enterprise On-Premises 2.3 comes with new installation files, such as the Authentication Verifier Service and the IAST Bridge, and an updated Authentication Verifier Agent.

There is no update package for the Authentication Verifier Service and the IAST Bridge. In addition to that, you need to have a clean installation for the Authentication Verifier Agent. If you have any verifier agents from the previous versions, they do not work with the On-Premises 2.3.

This instruction is valid for those who have v2.2.5 or any previous versions and want to update their applications to any of the following versions:

  • v2.3
  • v2.3.1 
  • v2.4
  • v2.4.1 
  • v2.4.2
  • v23.1.0
  • v23.2.0
  • v23.3.0
  • v23.4.0
  • v23.5.0
How to update Invicti Enterprise On-Premises
  1. Log in to Invicti Enterprise
  2. On the Global Dashboard page, select Download the latest update. The download begins automatically.

To manually check the updates, select Settings > Licensing from the main menu. Then, select Check for Updates.

    1. From the download location, extract the .zip file to a directory. Make sure the following files appear in the extracted folder.
    • WebAppSetup.exe (Invicti Enterprise Application Server installer)
    • AgentSetup.exe (Invicti Enterprise Agent installer)
    • AuthVerifierAgentSetup.exe (Invicti Enterprise Authentication Verifier installer)
    • AuthVerifierServiceSetup.exe (Invicti Enterprise Authentication Verifier Service installer. This installer comes with the Invicti Enterprise On-Premises 2.3.)
    • IASTBridgeSetup.exe (Invicti IAST Bridge installer. This installer comes with the Invicti Enterprise On-Premises 2.3.)
    1. Run the WebAppSetup.exe file. The Invicti Enterprise Web Application Setup wizard is displayed and opens at the Ready to Install step.
  1. Select Install. The Installing Invicti Enterprise Web Application step is displayed. Wait.
  2. The installation asks you to install the prerequisite: The Authentication Verifier Service.

The Authentication Verifier Service is optional. If you are scanning websites that require form authentication, you need to install it. You can also install the service later. For further information about installing the verifier service, see Authentication Verifier Settings.

  1. Select Next to continue.
  1. On the Select Installation Folder step, select Next to install the Authentication Verifier Service to the default folder. OR, select Browse to select an installation folder. Select Next.
  1. On the Completing the Invicti Enterprise Authentication Verifier Service Setup Wizard step, select Finish to complete the installation.
  1. The Completing the Invicti Enterprise Web Application Setup Wizard step is displayed.
  1. Select Finish.

For further information about the Authentication Verifier Service and Verifier Agent, see Authentication Verifier Settings.

The Invicti Enterprise On-Premises 2.3 comes with the rebranding. You may need to clear your cache to properly see new images.

    1. Now, update the Invicti Agent. To do this, there are two alternatives:
    • You can run the AgentSetup.exe file and follow the onscreen instructions to update the Agent.
    • Or, you can follow these instructions:
    1. Log in to Invicti Enterprise.
    2. From the main menu, select Agents > Manage Agents.
    3. From the Commands drop-down, select Update Agent.
    1. Select Yes.

Once the agent is updated, Invicti Enterprise notifies you.

The agent can auto-update itself if you enable the Enable Auto Update from the Commands drop-down. For further information, see Agents in Invicti Enterprise On-Premises

Once you update all these files, you can start using Invicti Enterprise On-Premises. There is no additional step to re-configure the new version.

You can check Invicti Enterprise’s version from the About available under [Your Name] (top right of the page).

Top Articles

What is Invicti?

Overview of Scan Policies

Scheduling Scans

Managing Integrations

Built-In Reports

Invicti Help Center

Our Support team is ready to provide you with technical help.

Go to Help Center This will redirect you to the ticketing system.