There is a small catch with this collector, as it is able to check for any Windows version service pack level including Windows NT, Windows XP, Windows 2000, and Windows 2003, but there is a possibility to specify only one remediation workflow. As we do not want to build one remediation package for all of the Windows versions, we have instructed the collector to only look for the Windows XP Service Pack 2 and named the remediation workflow after it. With this policy we check for an installed Windows XP Service Pack 2, so we must create an appropriate remediation workflow.

Follow the steps described below:

1.First open a command prompt, import the environment variables for the Tivoli Framework, and start bash. Then create a directory for the workflow files. To do this issue the following commands:

cmd /k %SystemRoot%\system32\drivers\etc\Tivoli\setup_env.cmd bash

cd $BINDIR/tcmremed/download

mkdir TCRMSServicePackInstallWinXpSp2 cd TCRMSServicePackInstallWinXpSp2

2.To build the package you must download the appropriate Service Pack 2 installation file from the Microsoft Web site. The Windows XP Service Pack 2 Network Installation Package for IT Professionals and Developers can be found at the following location:

http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en

The file is named WindowsXP-KB835935-SP2-ENU.exe. Be warned that the size of this file is approximately 266 megabytes, so the download can take a few minutes depending on your network speed. Copy it to the newly created directory TCRMSServicePackInstallWinXpSp2.

3.Create the configuration file for the sputil.sh utility containing the instructions on how to build the package. Copy the Sample.properties file from the sample_TCRMSServicePackInstall_WinXpSp2Jp directory to the TCRMSServicePackInstallWinXpSp2 directory and edit it with the text editor to match the content specified in Example 8-13.

Example 8-13 Sample.properties file for TCRMSServicePackInstallWinXpSp2 workflow

WorkflowName=TCRMSServicePackInstallWinXpSp2

AddRegistryValuesBeforeExecFlag=true

AddRegistryValueBeforeExecParentKey.arrayLength=2

AddRegistryValueBeforeExecKey.arrayLength=2

AddRegistryValueBeforeExecName.arrayLength=2

AddRegistryValueBeforeExecType.arrayLength=2

430Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

Page 448
Image 448
IBM Tivoli and Cisco manual