As the DS-2CD1021-I is an older generation model, it may no longer receive active security patches (End of Support). Organizations must apply compensating controls:
If you absolutely must update:
When to contact support