This guide describes how to manually upgrade the Apache web server used by a customer-hosted VisibleThread 7+ installation on Windows.

The upgrade process involves downloading the latest Apache package, preserving the existing VisibleThread 7+ configuration, replacing the Apache installation directory, and reinstalling the Windows service. This can be done to resolve CVE's related to Apache or OpenSSL on your VisibleThread server,

Important: We recommend taking a server snapshot or backup before proceeding. The existing Apache directory should also be retained as a backup until the upgraded installation has been verified successfully.

Prerequisites

Before starting, ensure you have:

• Administrator access to the Windows server.
• Access to Windows Services (services.msc).
• Permission to modify files under:

C:\Program Files\VisibleThread\vtdocs

• A backup or snapshot of the server.

Step 1: Download Latest Apache VS18 Binary .zip

Download the latest Apache VS18 Binary .zip file from: https://www.apachelounge.com/download/

Save the ZIP file to a convenient location on the VisibleThread server, such as the Downloads folder.
 

Step 2: Stop the existing Apache service

Before replacing the Apache installation, stop the currently running VisibleThread Apache service.

1. Open the Windows Services application by running:

services.msc

2. Locate the following service:

vtdocs-apache

3. Right-click vtdocs-apache.
4. Select Stop.
5. Confirm that the service status changes to Stopped.

Important: Do not replace the Apache directory while the vtdocs-apache service is running.

Step 3: Extract the new Apache package

Locate the downloaded .zip file:

httpd-2.4.66-260223-Win64-VS18.zip

Extract the ZIP file to a temporary location, such as:

• Downloads
• Desktop
• Another temporary working directory

After extraction, the package will contain a new Apache24 directory.

Do not move this directory into the VisibleThread installation yet.
 

Step 4: Copy the existing VT configuration

Before replacing Apache, copy the existing VT Apache configuration files into the new Apache installation.

Navigate to:

C:\Program Files\VisibleThread\vtdocs\Apache24\conf

Copy the following files:

httpd.conf
visiblethread.conf

Paste both files into the conf directory of the newly extracted Apache package:

<Unzipped Directory>\Apache24\conf

When prompted, replace the versions of these files that already exist in the new Apache directory.

Important: These files contain the Apache configuration required by your VT installation. Ensure both files have been copied successfully before proceeding.

Step 5: Replace the existing Apache directory

First, retain the existing Apache installation as a backup.

Navigate to:

C:\Program Files\VisibleThread\vtdocs

Move the existing Apache24 folder to another location, such as the Desktop. You may rename the folder to: "Apache24_backup"
 

Next, move the new Apache24 directory from the extracted Apache package into:

C:\Program Files\VisibleThread\vtdocs

The resulting Apache installation path should be:

C:\Program Files\VisibleThread\vtdocs\Apache24

Step 6: Reinstall the Apache service

From the elevated Command Prompt, remove the existing Apache Windows service:

sc delete vtdocs-apache

Change to the new Apache bin directory:

cd "C:\Program Files\VisibleThread\vtdocs\Apache24\bin"

Install Apache as the VisibleThread service:

httpd.exe -k install -n "vtdocs-apache"

Confirm that the command completes successfully.

Step 7: Start the Apache service

Open Services again:

services.msc

Locate:

vtdocs-apache

Start the service if it is not already running.

Confirm that the service status changes to:

Running

Step 8: Verify the Apache upgrade

Open VisibleThread in a web browser and confirm that the application loads successfully.

For example:

https://<VisibleThreadServerAddress>

If SSO is configured and you need to access the VisibleThread system administrator login directly, use:

https://<VisibleThreadServerAddress>/#/systemAdminLogin

Confirm that:

• The VisibleThread sign-in page loads successfully.
• You can sign in.
• Apache remains in the Running state.
• The application operates normally.

Important: Keep the previous Apache24 directory until the upgraded Apache installation has been fully verified. Once the environment is confirmed to be operating normally, the backup can be removed according to your organization's retention procedures.

For additional help or assistance, please reach out to support@visiblethread.com