Required KernelCare Agent & ePortal Upgrade | How to update KernelCare & ePortal?

Issue

The release of KernelCare Agent version 3 (v. 3.XX) is out. It introduces embedded signature validation for all rebootless patches, adding another layer of trust to the already proven KernelCare non-disruptive live patching process.

In enterprise environments, KernelCare Agents often work in tandem with ePortal, which we’ve also updated (v2.20) to support the new signed patch format. 

Starting mid-December 2025 this new signed patch format becomes the default. Older agent versions will no longer receive patches.

How to upgrade to KernelCare Agent (v.3.X) or ePortal (v2.20)?

Environment

• KernelCare

Solution

The upgrade applies to servers running the KernelCare agent. 

To perform the upgrade, you simply need to update the kernelcare package using yum or your system’s package manager. This will upgrade the existing installation to the latest version (3.x). There is no need to uninstall the old package first.

• To upgrade KernelCare:

For rpm-based systems:

# yum install -y kernelcare

For apt-based systems:

# apt install kernelcare

• To upgrade ePortal:

For rpm-based systems:

# yum install -y kcare-eportal

For apt-based systems:

# apt update && apt install -y –no-install-recommends kcare-eportal

Useful links

https://tuxcare.com/blog/kernelcare-agent-v3-has-arrived-upgrade-for-secure-continuous-protection/ 

https://docs.tuxcare.com/live-patching-services/#update-1 

https://docs.tuxcare.com/eportal/#installation