IBM Tivoli and Cisco manual Cd %BINDIR% Cd tcmremed\cfg Sputilinitialsetup.bat

5.You must initialize the package creation utility environment. Issue the following commands:

cd %BINDIR%

cd tcmremed\cfg

sputil_initial_setup.bat

This creates the necessary objects on the Tivoli Configuration Manager, such as:

–TcmRemedRegion Policy Region

–TcmRemedProfMan Profile Manager

–SPUtilConfig.properties file in the %BINDIR%\tcmremed\cfg directory

6.In the %BINDIR%\tcmremed\cfg directory there are several additional files. Some of them will be used as is, but some of them must be updated. For each pair of collector type and workflow type there is a separate configuration file containing the default remediation package options. These files are named using the following convention:

<name_of_the_collector>_<workflow_type>.DefaultConfig.properties

For example:

nac.win.any.hotfix.PostureHotfixV2_HOTFIX_WF.DefaultConfig.properties

By default there are nine files:

–nac.win.any.nav.PostureNavV2_DEFS_WF.DefaultConfig.properties

–nac.win.any.nav.PostureNavV2_SCAN_WF.DefaultConfig.properties

–nac.win.any.nav.PostureNavV2_VERSION_WF.DefaultConfig.properties

–nac.win.any.hotfix.PostureHotfixV2_HOTFIX_WF.DefaultConfig.properties

–nac.win.any.oslevel.PostureOSLevelV2_SERVICE_PACK_WF.DefaultConfig

.properties

–nac.win.any.regkey.PostureRegKeyV2_KEY_WF.DefaultConfig.properties

–nac.win.any.regkey.PostureRegKeyV2_VALUE_WF.DefaultConfig.properties

–nac.win.any.services.PostureServices_SERVICE_RUNNING_WF.DefaultCo nfig.properties

Most of them can be used as is, but a few must be edited. There is also a file missing for SERVICE_DISABLED_WF, so we have to create one named nac.win.any.services.PostureServices_SERVICE_DISABLED_WF.DefaultCo nfig.properties.

396Building a Network Access Control Solution with IBM Tivoli and Cisco Systems