Background and system constraint - The Trellix ePO platform does not provide a native UI option or code function to perform an extension rollback. Attempting a standard software uninstall leaves database information (such as modified stored procedures) intact. Reinstalling a previous extension version over this residual database state corrupts the installation. As a result, extension rollbacks must be executed via hardware or virtual machine (VM) snapshots.
Rollback instructions
Step 1 Pre-upgrade snapshot creation (prerequisite)
Identify the target instance: Locate the specific machine, VM, or pod host where the Trellix ePO instance and extension are installed.
Access snapshot options: Open your infrastructure management console (example, CDA portal or hardware-level host action menu).
Create Snapshot: Initiate a Create Snapshot action for the target machine.
Name and save: Provide a clear snapshot name (example,
Pre_Upgrade_State). This captures and stores the complete current instance state, including all ePO configurations, files, and database states.
Step 2 Execute extension upgrade
Proceed to check in and install the new extension version.
Step 3 Revert/rollback (If upgrade fails or has issues)
Navigate to Management Console: Access the snapshot section under the target machine/VM properties.
Select snapshot: Open the snapshot drop-down menu and choose the pre-upgrade snapshot created in Step 1.
Execute revert: Select Revert Snapshot.
Result: The machine state, installed files, and database configurations will immediately restore to the exact original pre-upgrade state.