---
title: "Install a patch release"
description: "Install an older patch release of Calico Enterprise from the manifest archive when an upgrade to the latest is not yet possible."
product: "Calico Enterprise"
version: "3.23 (latest)"
section: "Install and upgrade"
canonical_url: "https://docs.tigera.io/calico-enterprise/latest/getting-started/manifest-archive"
---

# Install a patch release

Installing the most recent patch version of Calico Enterprise v3.23 ensures that you have the latest bug fixes and improvements. But you can always install, or downgrade to, a previous patch version. Installing an older patch can help if you encounter problems with the latest patch, or if you're required to install only a specific patch version.

## Before you begin

This feature is:

- Available in 3.0 and later
- Not available for Helm with operator

## How to

1. Download the release archive for your patch version from the following table:

   | Patch version | Release archive link                                                                                                                               |
   | ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
   | v3.23.2       | [https://downloads.tigera.io/ee/archives/release-v3.23.2-v1.42.5.tgz](https://downloads.tigera.io/ee/archives/release-v3.23.2-v1.42.5.tgz)         |
   | v3.23.1       | [https://downloads.tigera.io/ee/archives/release-v3.23.1-v1.42.4.tgz](https://downloads.tigera.io/ee/archives/release-v3.23.1-v1.42.4.tgz)         |
   | v3.23.0-2.0   | [https://downloads.tigera.io/ee/archives/release-v3.23.0-2.0-v1.42.1.tgz](https://downloads.tigera.io/ee/archives/release-v3.23.0-2.0-v1.42.1.tgz) |
   | v3.23.0-1.0   | [https://downloads.tigera.io/ee/archives/release-v3.23.0-1.0-v1.41.1.tgz](https://downloads.tigera.io/ee/archives/release-v3.23.0-1.0-v1.41.1.tgz) |

2. Untar the **release-vx.y.z-vx.y.z.tgz** to a local directory.

   ```bash
   tar xzvf release-vx.y.z-vx.y.z.tgz
   ```

<!-- tabs -->

**Tab: Kubernetes**

In the patch release archive, navigate to the `manifests` folder.

1. Follow the [quickstart installation](https://docs.tigera.io/calico-enterprise/latest/getting-started/install-on-clusters/kubernetes/quickstart.md), making the following changes:

   1. Install Tigera Operator and custom resource definitions.

      ```bash
      kubectl create -f <your-local-directory-archive>/manifests/operator-crds.yaml
      kubectl create -f <your-local-directory-archive>/manifests/tigera-operator.yaml
      ```

   2. If you are not using an existing Prometheus operator, install it.

      ```bash
      kubectl create -f <your-local-directory-archive>/manifests/tigera-prometheus-operator.yaml
      ```

   3. Install Tigera custom resources.

      ```bash
      kubectl create -f <your-local-directory-archive>/manifests/custom-resources.yaml
      ```

      > **SECONDARY:** For platforms like AKS or EKS, you must modify the command to be platform specific. EKS example: `kubectl create -f <your-local-directory-archive>/manifests/eks/custom-resources.yaml`

**Tab: OpenShift**

In the patch release archive, navigate to the `ocp-manifests` folder which contains three folders `install-manifests`, `enterprise-resources`, and `upgrade-manifests`.

- `install-manifests` contains all the manifests needed for minimal OCP cluster.
- `enterprise-resources` contains the Calico Enterprise resources.
- `upgrade-manifests` folder contains all the manifests needed for upgrading Calico Enterprise.

1. Create the cluster by following [the standard installation](https://docs.tigera.io/calico-enterprise/latest/getting-started/install-on-clusters/openshift/installation.md), with the following caveat:

   1. After the Kubernetes manifests directory is generated, copy the files from `install-manifests` instead of downloading the manifests.

      > **SECONDARY:** Before creating the cluster, be sure to add an image pull secret in `install-manifests/02-pull-secret.yaml`

2. Install Calico Enterprise resources:

   ```bash
   cd <your-local-directory-archive>/ocp-manifests/enterprise-resources && oc create -f
   ```

**Tab: Features**

In the patch release archive, there are additional manifests relating to specific features.

**Examples**

To apply the patch release for threat defense features.

```bash
cd <your-local-directory-archive>/manifests/threatdef && kubectl create -f ejr-vpn.yaml.yaml
cd <your-local-directory-archive>/manifests/threatdef && kubectl create -f tor-exit-feed.yaml
```

<!-- /tabs -->