IBM Tivoli and Cisco manual Modification of the remediation packages

TCRZLSoftwareDisabled directory and edit it with the text editor to match the content specified in Example 8-16.

Example 8-16 Sample.properties file for TCRMessengerDisabled workflow

WorkflowName=TCRMessengerDisabled

CorequisiteFilesFlag=true

SourceFilename.arrayLength=1

ExeArg.arrayLength=1

SourceFilename[0]=disableMessengerService.bat

ExeArg[0].arrayLength=0

TmfWebUIEndpoint=tcmweb

4.Run the sputil.sh command to create the software package block and publish it on the Web Gateway. To achieve this run the following commands:

cd $BINDIR/tcmremed/download cd TCRMessengerDisabled

$BINDIR/tcmremed/bin/sputil.sh -p Sample.properties

5.Verify the result of running the tool with the following command: wlookup -ar SoftwarePackage grep TCRMessengerDisabled

If the package was created the result will look like below (the number in the middle of the resulting string will be different in your environment as it is meant to be unique and is associated with Tivoli Management Region number).

TCRMessengerDisabled^1.0 1406765930.1.855#SoftwarePackage::Spo#

This concludes the creation of remediation packages required for automatic remediation of noncompliant clients.

8.4.1 Modification of the remediation packages

Modification of published remediation packages is a part of normal life-cycle operations for a security policy and related remediation processes. With the current version of the solution, versioning of packages in not supported. In order to modify the package you must remove it and then create and publish a new one.

436Building a Network Access Control Solution with IBM Tivoli and Cisco Systems