OpenFrame

Managing the OpenFrame Client — Updates & Recovery

ENDPOINT MANAGEMENTOPENFRAMERMMTROUBLESHOOTING

Phase 10 — Ongoing Operations · Step 2

Section

June 24, 2026

Published

Vladislav Marchenko

Vladislav Marchenko

Head Of Marketing

Managing the OpenFrame Client — Updates & Recovery

Phase 10 — Ongoing Operations · OpenFrame Onboarding

The OpenFrame client on each endpoint isn't one program — it's a small bundle of agents (Fleet, MeshCentral, Tactical) coordinated by an updater service. Most of the time it looks after itself. This guide shows you how to confirm it's healthy, read its versions, and what "recovery" means when it isn't.

Where to check client health

Open a device from Devices, then the Agents tab on its detail page. You'll see a card for each underlying agent:

  • Fleet — osquery-based inventory and monitoring.
  • MeshCentral — remote control and file transfer.
  • Tactical — RMM agent for scripts and actions.

Each card shows the same vital signs: Status (online/offline), Last seen, ID, Version, and Last fetched. A healthy client has all three online with recent "last seen" times.

Reading versions

The Version on each card tells you what's running on that endpoint. The OpenFrame updater service keeps these current automatically — it checks in, pulls the right versions, and applies them without you touching the machine. If one device is several versions behind its peers, that's a signal its updater isn't completing (often the same root cause as a disconnect — see the next guide).

You don't push client updates per-device by hand. The model is: the updater service on each endpoint pulls what it needs. Your job is to notice when a device falls behind, not to update it manually.

What "recovery" means

The OpenFrame client is designed to recover itself:

  • On Windows, the client runs as a service registered with the Service Control Manager (SCM), which is configured to restart it automatically if it crashes or stops. That's the first line of defense — a hung agent usually comes back on its own.
  • The updater service also repairs a partial or corrupted agent install by re-fetching the correct version on its next cycle.

So "recovery" is mostly automatic. When it isn't — the service is disabled, the host is off, or the network is blocking it — recovery happens on the endpoint, not from the console. The OpenFrame web console can show you status and versions, but the fix (restart the service, check connectivity, reinstall the agent) is done on the machine itself.

When a card shows offline

If one or all agent cards show OFFLINE with an old Last seen, the client isn't reaching the server. That's a disconnected-device situation — head to Troubleshooting a Disconnected Device (next) for the step-by-step.

Quick checklist

  • Opened the device's Agents tab
  • Confirmed Fleet / MeshCentral / Tactical are online with recent Last seen
  • Checked Version on each card against your fleet's norm
  • Understood updates are automatic via the updater service
  • Knew recovery (SCM restart / reinstall) happens on the endpoint

What's next

When the client can't recover on its own and a device goes dark, work through Troubleshooting a Disconnected Device.

Based on OpenFrame v0.9.19. Agent components, versions, and the updater behavior evolve between releases — what's on the endpoint and in your console wins.

Vladislav Marchenko

Vladislav Marchenko

Head Of Marketing

Hi all! My name is Vlad and I’ve been brought on to head the marketing team at Flamingo. Thankfully, this isn’t the first time I will be building a marketing department from scratch, so the experience should come in handy. Now it’s time to dive into the world of MSPs and find myself in this new world.

More in Phase 10 — Ongoing Operations

Related Content

Product Releases

Webinars

Case Studies

Blog Posts

Frequently Asked Questions

MSP AI Agents

Yes. In production MSP shops today, 10% to 25% of tickets close before a human opens them. Thread alone has processed 173 million tickets across 750-plus MSP partners at 96% triage accuracy, handing back 490,000-plus technician hours. Agents own the low-risk, high-volume work (password resets, MFA enrollment, known installs, onboarding and offboarding) and flag anything that touches production data or needs judgment for a human to take.
On a five-person desk, reported deployments show $78,000 to $130,000 in annual direct labor savings, roughly 30% fewer escalations, and 15% to 20% better SLA compliance. Broader MSP adoption data adds ticket handling time cut by 45% and five to 12 points of margin, all from reclaimed capacity rather than headcount cuts.
ConnectWise AI is the umbrella for ConnectWise's AI features on the Asio platform: the Sidekick GenAI assistant and ConnectWise RPA. It handles ticket triage, sentiment analysis, AI-assisted scripting, and natural-language automation across PSA and RMM, delivered through the ConnectWise Pro package.

AI MSP

Most MSPs start with AI features inside their existing PSA, RMM, and ticketing systems rather than standalone products. Common categories include AI ticket triage, alert correlation, scripting assistants, and AI-native all-in-one platforms like OpenFrame that run intelligence across the whole stack.

About OpenFrame

OpenFrame isn't built to plug into your stack. It replaces it. Instead of duct-taping a dozen tools together (RMM, MDM, SIEM, patching, remote access, each its own login and bill), we bundle it into one unified platform: RMM, MDM, monitoring, automation, remote access, patch management, security monitoring, and ticketing, plus built-in AI copilots. So "does it integrate with X?" usually means: you won't need X anymore.

EDR Security

SentinelOne is a strong fit for MSPs that want autonomous detection, one-click ransomware rollback, and real multi-tenancy across Windows, macOS, and Linux. The trade-offs are a dense console, premium pricing, and a tuning period that produces false positives early on.

Endpoint Security

Yes, for security-led MSPs and MSSPs serving mid-market or compliance-driven clients. The detection and threat hunting rank at the top of the market, and Flight Control handles multi-tenant management. It fits poorly for books made up of many small clients on tight budgets.
Bitdefender GravityZone is a cloud-native endpoint protection platform that combines prevention, EDR, and XDR in one agent and console. For MSPs, it adds multi-tenant management, so one team can protect and monitor every client's endpoints from a single dashboard.
Yes, for MSPs that want one vendor across endpoint, firewall, and managed detection. Sophos Central Partner gives true multi-tenant control, and MSP Connect Flex bills monthly by usage. Plan around occasional CPU spikes on busy servers and a console learning curve.

RMM Automation

Yes. Connected to your RMM over a webhook or API, an AI agent reads each alert, enriches it with device and history, and opens a pre-filled ticket in your helpdesk when human attention is needed, routed to the right board and priority.