HP UX Patch Management specification

Patch usage model 2: third-party hardware/software qualification

Begi n: Product needs to be certified on HP-UX 11i v2/v3

Install
QPK
No	Port of third
No	party	No
	product?

Review HP-UX Software

Transition Kit for compliance

(software.hp.com–HP-UX

11i v2 only)

Is a

complete

No

OE update

or install

required?

Yes

Acquire latest QPK using SWA or from OE media (if OE media is used, check for latest QPK updates from the ITRC)

		Use DRD to
		minimize					Yes
		downtime?

		Yes					Review HP Patch
		Yes					Equivalency
							Equivalency
							information for
		Create clone					additional
							patches

* Ensure the latest
* Ensure the latest
drd_unsafe_patch_list
file is loaded

Apply QPK to clone
		and test/validate


		Activate and
		reboot clone

Go to the HP-UX 11i v2/v3 OE Update model 4

Go to the HP-UX

11i v2/v3 Reactive

Patching model 6

No

	Perform			Testing
	qualification			Testing
	qualification			successful
	testing			successful
	testing

Yes

End:

Product qualified

NOTE: * More information is available in the Managing Rare DRD-Unsafe Patches white paper, available at http://www.hp.com/go/drd-docs.

Patch usage model 2: third-party hardware/software qualification

97

Image 97

HP UX Patch Management manual Begi n Product needs to be certified on HP-UX 11i v2/v3

Contents

Patch Management User Guide for HP-UX 11.x Systems Revision history Table of Contents What are standard HP-UX patch bundles? Using Dynamic Root Disk for patch management 107 104 Patch management strategies HP-UX patches and patch management Where to start How to get patches Overview Quick start guide for patching HP-UX systemsBefore you begin Should you use standard HP-UX patch bundles? Standard HP-UX patch bundles Acquiring and installing standard HP-UX patch bundlesAcquiring the bundles As root, run the createdepothp-ux11script Installing the bundles Swlist Advanced topic using Dynamic Root Disk DRD Acquiring the patches Acquiring and installing individual patches Quick start guide for patching HP-UX systems Swverify -d \* @ /tmp/somepatchdirectory/depot Installing the patches Advanced topic using Dynamic Root Disk DRD Patch-related concepts HP-UX patch overviewPatch identification HP-UX software structure Software depots and patch depots Patch bundles Patch state Patch status Category tags StateSwlist -l fileset -a state grep patchid Swlist -l product -a categorytag patchid Which patches are on a system? For example Examples of the swlist command $ swlist -l product *,c=patch $ swlist -l bundle @ somesystem $ swlist -l product *,c=manualdependencies Ancestors Ancestors and supersession$ swlist -l fileset -a ancestor PHSS29183 Swlist -a appliedpatches filesetname Supersession$ swlist -a appliedpatches Xserver.AGRM Showpatches -s Swlist -l patch -x showsupersededpatches=true Swlist -a patchstate -x showsupersededpatches=true patchid $ swlist -l fileset -a supersedes PHSS28681 HP-UX Patch Supersession Chain Patch-related attributes See Category tags Types of dependencies Patch dependenciesCorequisites and prerequisites Impact of dependencies on acquiring patches Enforced and unenforced manual dependenciesSwlist -vl fileset -a dependencytype fileset Patch rollback Patch rollback and commitmentPatch commitment Cleanup -p -c number Advanced topic patch cleanup utilityHP-UX patch ratings Rating details HP patch rating Finding information for a specific patch Critical and noncritical patchesPatch documentation $ swlist -l product -a categorytag PHSS30011 Subset of fields in patch text file and patch details Patch warnings Obtaining information using the ItrcAdvanced topic the readme attribute Swlist -l product -a readme patchid more Critical and noncritical warnings Questions to ask How to handle patch warningsAdvanced topic finding patches with warnings Considerations Backup and recovery Patch management life cycle Patch management overview Patch management life cycle Patch management overview Restrictive Conservative Innovative Establishing a software change management strategy Operational factor and patch management strategy matrix Recommendations for software change management Patch management and software depots Consideration of HP patch rating Acquiring patches for proactive patching Proactive patching strategy Advanced topic HP-UX Software Assistant Reactive patching strategy Acquiring patches for reactive patching Advanced topic security patching strategy Advanced topic scanning for security patches Testing the patches to be installed What are standard HP-UX patch bundles? Key featuresStandard HP-UX patch bundles Standard HP-UX patch bundle use and release dates Obtaining standard HP-UX patch bundles Quick start guide for patching HP-UX systems Obtaining an Itrc user account Using the IT Resource CenterUseful pages on the Itrc Find individual patches Accessing the patch database and finding an individual patch Key features Click the add to selected patch list button Using the IT Resource Center Check for patches with dependencies Advanced topic checking for all patch dependencies Using the IT Resource Center Click the add to selected patch list button Custom patch bundles run a patch assessment Standard patch bundlesSupport information digests Ask your peers in the forums Search knowledge base Common software distributor commands for patching Using software depots for patch management Directory depots Depot types Tape depots Using depots Choosing depot type and depot location Viewing depotsSwlist -l depot Swlist -l depot @ remotesystem $ swlist -l depot$ swlist -l depot @ swdepot.xyz.com Creating and adding to a directory depot Depot/patches/11.11 Copying patches to depots Advanced topic HP-UX Software Assistant Registering and unregistering directory depotsCopying products with patch dependencies to depots Examples of registering and unregistering depots Advanced topic access control lists$ swreg -l depot /depot/patches/2003-07periodicdepot $ swreg -u -l depot /depot/patches/2003-07periodicdepot Examples of verifying directory depots Verifying directory depots$ swverify -d \* @ /mydepots/newdirectorydepot Removing software from a directory depot Verification had errorsVerification succeeded $ swverify -d \* @ /mydepots/PHSS30278depot Execution succeeded Advanced topic removing superseded patches from a depot $ /usr/sbin/cleanup -d /mydepots/patchdepot$ swlist -l product -d @ /mydepots/patchdepot Removing a directory depot Installing patches from a depot$ swlist -l product @ /mydepots/patchdepot $ swreg -u -l depot /mydepots/PHCO27780depot Reboots the system when required Analysis succeeded Examples of installing patches from a depot Custom patch bundles Installing products with patch dependencies from a depotAnalysis and Execution succeeded Rev Patch description Examples of listing patches and bundlesRev Bundle Description $ swlist -d @ /mydepots/temporarydepot Creating a custom bundle Analysis succeeded Finally, remove the temporary depot For more information Using HP-UX Software Assistant for patch management Using Dynamic Root Disk for patch management Drd1m Patch Assessment Tool Using the Patch Assessment ToolBenefits of the Patch Assessment Tool Example of running the Patch Assessment Tool Select upload new system information Contacting HP Support and other resourcesRelated information HP websites Typographic conventionsNon-HP websites Times Patch usage models Components in test Image Then production Patch usage model 1 hardware/application software change DRD Begi n Product needs to be certified on HP-UX 11i v2/v3 Patch usage model 3 operating environment cold install Patch usage model 3 operating environment cold install Patch usage model 4 operating environment update Patch usage model 4 operating environment update Create clone Patch usage model 5 proactive patch Passed? System Patch usage model 6 reactive patch Ancestor Glossary IPD SWA Index Index See also HWE Index