HP UX Patch Management Using HP-UX Software Assistant for patch management, For more information

Page 85

8 Using HP-UX Software Assistant for patch management

HP-UX Software Assistant (SWA) is a tool that consolidates and simplifies patch management and security bulletin management on HP-UX systems. It is the HP-recommended utility for maintaining currency with HP-published security bulletins and recommended patch levels for HP-UX 11i software.

SWA's major functions are:

•Analysis – SWA runs as a client-side patch and security analysis tool. An HP-supplied catalog file with known problems and fixes is downloaded from the HP IT Resource Center (ITRC) and compared to the software installed on the system.

Systems can be analyzed for patch warnings, critical defects, security bulletins, missing Quality Pack (QPK) patch bundles, and user-specified patches and patch families.

•Report – SWA is able to generate a variety of reports based on its analysis. Action (a to-do list of patches to install plus manual actions), Issue (list of potential problems found), and Detail (cross-reference between issues and actions) reports are available. These reports are consolidated in an HTML report with links to the technical knowledge base.

•Download Software from HP – Based on the analysis, SWA obtains patches from HP and creates a Software Distributor (SD) depot of software for installation.

IMPORTANT:

Version C.02.75 of SWA is required to allow entitled customers access to the ITRC. SWA C.02.75 supersedes all preceding versions.

You can use SWA from the HP-UX command line or from HP SIM.

To run SWA from HP SIM, use HP SIM version 5.2 or later HP-UX Central Management Server (CMS).

SWA is supported on HP-UX 11i v3, v2, and v1 systems.

For more information

For details on using SWA, see the following references. To download the SWA product free of charge, go to the SWA webpage at https://www.hp.com/go/swa.

•The HP-UX Software Assistant website at https://www.hp.com/go/swa provides the product overview, download links, installation instructions, and access to documentation.

•The HP-UX Software Assistant Release Notes provides the features and functionality of the latest release, and known problems.

•The HP-UX Software Assistant System Administration Guide describes how to use SWA.

•The Patch Usage Models in Appendix A (page 94) provide information on where SWA fits into the overall patch process.

•The HP-UX Software Assistant manpages describe the commands and provide examples. For HP-UX releases, the manpages are available from the command line using the man command.

—swa(1M)

—swa-report(1M)

—swa-get(1M)

—swa-step(1M)

—swa-clean(1M)

For more information 85

Page 84 Page 86
Image 85
Page 84 Page 86
Contents Patch Management User Guide for HP-UX 11.x Systems Revision history Table of Contents What are standard HP-UX patch bundles? Using Dynamic Root Disk for patch management 107 104Patch management strategies HP-UX patches and patch managementWhere to start How to get patchesOverview Quick start guide for patching HP-UX systemsBefore you begin Should you use standard HP-UX patch bundles?Standard HP-UX patch bundles Acquiring and installing standard HP-UX patch bundlesAcquiring the bundles As root, run the createdepothp-ux11script Installing the bundlesSwlist Advanced topic using Dynamic Root Disk DRDAcquiring the patches Acquiring and installing individual patchesQuick start guide for patching HP-UX systems Swverify -d \* @ /tmp/somepatchdirectory/depot Installing the patchesAdvanced topic using Dynamic Root Disk DRD Patch-related concepts HP-UX patch overviewPatch identification HP-UX software structureSoftware depots and patch depots Patch bundlesPatch state Patch statusCategory tags StateSwlist -l fileset -a state grep patchid Swlist -l product -a categorytag patchid Which patches are on a system?For example Examples of the swlist command$ swlist -l product *,c=patch $ swlist -l bundle @ somesystem $ swlist -l product *,c=manualdependenciesAncestors Ancestors and supersession$ swlist -l fileset -a ancestor PHSS29183 Swlist -a appliedpatches filesetname Supersession$ swlist -a appliedpatches Xserver.AGRM Showpatches -s Swlist -l patch -x showsupersededpatches=trueSwlist -a patchstate -x showsupersededpatches=true patchid $ swlist -l fileset -a supersedes PHSS28681HP-UX Patch Supersession Chain Patch-related attributesSee Category tags Types of dependencies Patch dependenciesCorequisites and prerequisites Impact of dependencies on acquiring patches Enforced and unenforced manual dependenciesSwlist -vl fileset -a dependencytype fileset Patch rollback Patch rollback and commitmentPatch commitment Cleanup -p -c number Advanced topic patch cleanup utilityHP-UX patch ratings Rating details HP patch ratingFinding information for a specific patch Critical and noncritical patchesPatch documentation $ swlist -l product -a categorytag PHSS30011Subset of fields in patch text file and patch details Patch warnings Obtaining information using the ItrcAdvanced topic the readme attribute Swlist -l product -a readme patchid moreCritical and noncritical warnings Questions to ask How to handle patch warningsAdvanced topic finding patches with warnings Considerations Backup and recoveryPatch management life cycle Patch management overviewPatch management life cycle Patch management overview Restrictive Conservative Innovative Establishing a software change management strategyOperational factor and patch management strategy matrix Recommendations for software change managementPatch management and software depots Consideration of HP patch ratingAcquiring patches for proactive patching Proactive patching strategyAdvanced topic HP-UX Software Assistant Reactive patching strategyAcquiring patches for reactive patching Advanced topic security patching strategyAdvanced topic scanning for security patches Testing the patches to be installedWhat are standard HP-UX patch bundles? Key featuresStandard HP-UX patch bundles Standard HP-UX patch bundle use and release dates Obtaining standard HP-UX patch bundlesQuick start guide for patching HP-UX systems Obtaining an Itrc user account Using the IT Resource CenterUseful pages on the Itrc Find individual patchesAccessing the patch database and finding an individual patch Key featuresClick the add to selected patch list button Using the IT Resource Center Check for patches with dependencies Advanced topic checking for all patch dependenciesUsing the IT Resource Center Click the add to selected patch list button Custom patch bundles run a patch assessment Standard patch bundlesSupport information digests Ask your peers in the forumsSearch knowledge base Common software distributor commands for patching Using software depots for patch managementDirectory depots Depot typesTape depots Using depotsChoosing depot type and depot location Viewing depotsSwlist -l depot Swlist -l depot @ remotesystem $ swlist -l depot$ swlist -l depot @ swdepot.xyz.com Creating and adding to a directory depot Depot/patches/11.11 Copying patches to depotsAdvanced topic HP-UX Software Assistant Registering and unregistering directory depotsCopying products with patch dependencies to depots Examples of registering and unregistering depots Advanced topic access control lists$ swreg -l depot /depot/patches/2003-07periodicdepot $ swreg -u -l depot /depot/patches/2003-07periodicdepotExamples of verifying directory depots Verifying directory depots$ swverify -d \* @ /mydepots/newdirectorydepot Removing software from a directory depot Verification had errorsVerification succeeded $ swverify -d \* @ /mydepots/PHSS30278depotExecution succeeded Advanced topic removing superseded patches from a depot $ /usr/sbin/cleanup -d /mydepots/patchdepot$ swlist -l product -d @ /mydepots/patchdepot Removing a directory depot Installing patches from a depot$ swlist -l product @ /mydepots/patchdepot $ swreg -u -l depot /mydepots/PHCO27780depotReboots the system when required Analysis succeeded Examples of installing patches from a depotCustom patch bundles Installing products with patch dependencies from a depotAnalysis and Execution succeeded Rev Patch description Examples of listing patches and bundlesRev Bundle Description $ swlist -d @ /mydepots/temporarydepot Creating a custom bundleAnalysis succeeded Finally, remove the temporary depot For more information Using HP-UX Software Assistant for patch managementUsing Dynamic Root Disk for patch management Drd1m Patch Assessment Tool Using the Patch Assessment ToolBenefits of the Patch Assessment Tool Example of running the Patch Assessment Tool Select upload new system information Contacting HP Support and other resourcesRelated information HP websites Typographic conventionsNon-HP websites Times Patch usage models Components in test Image Then production Patch usage model 1 hardware/application software changeDRD Begi n Product needs to be certified on HP-UX 11i v2/v3 Patch usage model 3 operating environment cold install Patch usage model 3 operating environment cold install Patch usage model 4 operating environment update Patch usage model 4 operating environment update Create clone Patch usage model 5 proactive patchPassed? System Patch usage model 6 reactive patchAncestor GlossaryIPD SWA Index Index See also HWE Index
Top Page Image Contents