Update Tenable Core Offline

Tenable recommends applying all offline updates to your Tenable Core machine in chronological order. Do not skip offline updates. There are two methods available to perform an offline update. For information about the contents of individual offline update files, see the Tenable Core Release Notes.

Tip: For more information about updating Tenable Core, see the FAQ.

Tip: When offline updates are attached, Tenable Core also continues to attempt to retrieve updates from the online repositories. This is normally harmless. In certain network environments attempting to reach the online repositories can cause timeouts or undesirable flagged traffic in firewalls. In cases such as these, running the following commands prevents Tenable Core from attempting to use the online repositories:

sudo dnf config-manager --disable "tenable-*"

sudo dnf config-manager --enable "tenable-offline"

To upload a Tenable Core offline update .iso file:

  1. Navigate to the Tenable Core Offline Update ISO section of the Tenable Downloads page.

  2. Click and download the offline update .iso file.

    Note: Download the latest version of Tenable-Core-OL8-Tenable.ot-offline-<version-number>.iso.

  3. Upload the file via scp. For example:

    scp local-iso-file.iso user@host:/srv/tenablecore/offlineiso/local-iso-file.iso

  4. Rename the offline update .iso file as tenable-offline-updates.iso.

    Tenable Core updates with the new .iso file.

To update Tenable Core via external media:

  1. Navigate to the Tenable Core Offline Update ISO section of the Tenable Downloads page.

  2. Click and download the offline update .iso file.

  3. Burn the ISO to media (for example, DVD-DL, BD, or thumb drive).

  4. Attach the media to a system and have it mount automatically.

    Tenable Core updates with the new .iso file.

    Note: By default, the hardening on OL8 operating systems prevents USB media from mounting. In order to use USB drives with a Tenable Core OL8 operating system, the /etc/modprobe.d/usb-storage.conf file needs to be removed from that directory.

What to do next: