This is an old revision of the document!
Table of Contents
PFSense - Upgrade PFSense
Take a backup
Navigate to Diagnostics → Backup & Restore.
- Click the Download configuration as XML button.
and ensure that you select Save before clicking on OK.
The file should be save to your Download directory, for example:
config-pfSense.localdomain-20200409161149.xml
Prepare a fall back plan
Plan for how to recover beforehand.
Write a USB stick to have the latest pfSense image file available on it.
If the upgrade fails for some reason, you could reinstall it from this USB stick, and then just reapply the changes you need.
As a extra step, you could also have a another USB stick written with the current pfSense image file.
This would allow you to revert the system to the existing version if really needed.
Remove packages
It is recommended to remove all packages before upgrading pfSense to a new release.
Make a note the installed packages, remove them, perform the upgrade, and then reinstall necessary packages.
NOTE: Many packages, such as pfBlockerNG have options to remember the configuration you have set, which once you reinstall the package after the upgrade will reset the configuration you had:
Pre-Upgrade Reboot
Reboot before doing any update attempt.
Perform the Update
Navigate to System → Update.
- Set Branch to Latest stable version.
Update manually (optional)
An alternative method is to use the following commands from the console or shell:
pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade
Force a reinstall of everything:
pkg-static upgrade -f
Review the list of changes and enter y to proceed.
Manually reboot the firewall.
Troubleshooting
Check the update log
A log of the last update attempt is located at /conf/upgrade_log.latest.txt.