Skip to main content

Update Autonomous Ransomware Protection with AI (ARP/AI)

Contributors netapp-dbagwell
PDFs

To keep protection up to date against the latest ransomware threats, ARP/AI offers automatic updates that occur outside of regular ONTAP release cadences.

Beginning with ONTAP 9.16.1, security updates for ARP/AI are available in System Manager software downloads in addition to system and firmware updates. If your ONTAP cluster is already enrolled in automatic system and firmware updates, you will be automatically notified when ARP/AI security updates are available. You can also change update preferences so that ONTAP installs security updates automatically.

If you want to manually update ARP/AI, you can download updates from the NetApp Support Site and install them using System Manager.

Important The ARP/AI feature currently supports only NAS. Although the automatic update capability displays the availability of new security files for deployment in System Manager, these updates are only applicable for NAS workload protection.
About this task

For ONTAP 9.16.1 and later, you can only update ARP/AI using System Manager.

Select an update preference for ARP/AI

In System Manager, the settings on the Enable automatic updates page for security files are set to Show notifications if you are already enrolled in automatic firmware and system updates. You can change the update setting to Automatically update if you'd prefer ONTAP to apply the latest updates automatically. If you use a dark site or prefer to perform updates manually, you can choose to show notifications or automatically dismiss security updates.

Before you begin

For automatic security updates, AutoSupport and AutoSupport OnDemand should be enabled and the transport protocol should be set to HTTPS.

Steps

  1. In System Manager, click Cluster > Settings > Software updates.

  2. In the Software updates section, select Arrow icon.

  3. From the Software updates page, select the All other updates tab.

  4. Select the All other updates tab and click More.

  5. Select Edit automatic update settings.

  6. From the Automatic update settings page, select Security Files.

  7. Specify the action to be taken for security files (ARP/AI updates).

    You can choose to automatically update, show notifications, or automatically dismiss updates.

    Note For security updates to automatically update, AutoSupport and AutoSupport OnDemand should be enabled and the transport protocol should be set to HTTPS.

  8. Accept the terms and conditions and select Save.

Manually update ARP/AI with the latest security package

Follow the appropriate procedure depending on whether you are registered with Active IQ Unified Manager.

Note Be sure to install only a more recent ARP update than your current version to avoid any unintended ARP downgrades.
ONTAP 9.16.1 and later with Digital Advisor
Steps

  1. In System Manager, go to Dashboard.

    In the Health section, a message displays if there are any recommended security updates for the cluster.

  2. Click on the alert message.

  3. Next to the security updates in the list of recommended updates, select Actions.

  4. Click Update to install the update immediately or Schedule to schedule it for later.

    If the update is already scheduled, you can Edit or Cancel it.

ONTAP 9.16.1 and later without Digital Advisor
Steps

  1. Navigate to the NetApp Support Site and log in.

  2. Select the security package that you want to use to update your cluster ARP/AI.

  3. Copy the files to an HTTP or FTP server on your network or to a local folder that can be accessed by the cluster with ARP/AI.

  4. In System Manager, click Cluster > Settings > Software updates.

  5. In Software updates, select the All other updates tab.

  6. In the Manual updates pane, click Add security files and add the files using one of these preferences:

    • Download from server: Enter the URL for the security file package.

    • Upload from local client: Navigate to the downloaded TGZ file.

      Important Ensure that the file name begins with ontap_security_file_arpai_ and has .tgz as a file extension.

  7. Click Add to apply the updates.

Verify ARP/AI updates

To view a history of automatic updates that were dismissed or failed to install, do the following:

  1. In System Manager, click Cluster > Settings > Software updates.

  2. In the Software updates section, select Arrow icon.

  3. From the Software updates page, select the All other updates tab and click More.

  4. Select View all automatic updates.

Related information