Okta Access Gateway Fails to Update from 2026.9.2 to 2026.10.0

Okta Access Gateway (OAG) fails to update from version 2026.9.2 to 2026.10.0 when the Amazon Web Services (AWS) Systems Manager (SSM) agent is installed. A package conflict between the existing AWS SSM agent and the new OAG core packages causes the update to fail. Install the release package from the management console to resolve this issue.

An error occurs during the direct update process:

Problem: cannot install both okta-accessgateway-core-2026.9.1-cf269f506.x86_64 from oagprod and okta-accessgateway-core-2026.10.0-b92998cd1.x86_64 from oagprod
cannot install the best update candidate for package okta-accessgateway-core-2026.9.2-74a06a304.x86_64
cannot install the best update candidate for package amazon-ssm-agent-3.3.5226.0-1.x86_64

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Access Gateway (OAG) 2026.9.2

The update fails because of a package conflict between the existing AWS SSM agent and the new OAG core packages during the direct upgrade process.

How is the update failure resolved?

Sign in to the OAG management console, navigate to the system package installation menu, and install the Okta release package to complete the update process.

1. Sign in to the OAG management console.
2. Choose 5 - System.
3. Choose 2 - Install Package.
4. Enter okta-release when the installer prompts for a package name.
5. Press Enter.
6. Follow the installation instructions from step 6 in the OAG release notes.