Showing posts with label Patch Management. Show all posts
Showing posts with label Patch Management. Show all posts

Monday, November 16, 2009

Backup and Restore the Update Server SQL 2005 Database and Storage Directory

Backup the PLUS and PLUS_Staging Databases
- Click Start, Run, and type [iisreset /stop] and press Enter to stop Internet Information Services.
- For 6.3 Update server, type [net stop "PatchLink Distribution Service"] to stop the PatchLink Distribution Service. In 6.4 update server, type [net stop "PatchLink Replication Service"] to stop the PatchLink Replication Service.
- Open SQL Server Management Studio (Express Edition can be downloaded for free on Microsoft's web site).
- Users can authenticate into the database by using "Windows Authentication."
- Drill down to the PLUS database.
- Right-click on PLUS and select Tasks > Backup
- In the General tab > Source section, click the drop down and choose PLUS
- Under Backup set, name the file to be backed up
- In the Destination section, click the remove button to remove the entry
- Click the Add button, click the Ellipse button to browse to where the backup file will be created. Once you choose a directory, type the same name into the File Name field as stated for the file name listed in the General > Backup set section.
- Click OK until you get back to the Back UP Database –PLUS screen.
- Click Options > Overwrite media, choose Overwrite all existing backup sets.

Backup the PLUS Storage Directory
Make a backup copy of the %Program Files%\Patchlink\Update Server\Storage directory on the same frequency as your PLUS Database backups.

Restore the PLUS and PLUS_Staging Databases
Use Microsoft SQL 2005 Management Studio or Express Edition to restore the Plus and Plus Staging databases.
Perform the steps which follow on the PLUS database, then follow the same procedure for the PLUS_Staging database, substituting PLUS_Staging for PLUS where appropriate.

- Open SQL Server Management Studio (Express Edition can be downloaded for free on Microsoft's web site).
- Drill down to the PLUS database.
- Right-click on PLUS and select Delete.
- In the Delete Object screen, uncheck Delete backup and restore history information for Databases and place a check mark for Close existing connections. Click OK.
- Right click on Databases, click New Database.
- In the General section, name the file PLUS. Click OK.
- Right click on the PLUS database. Click Tasks >Restore >Database.
- In the Destination for restore section, Choose the PLUS database. Under Source for restore, choose From device
- Under Source for restore, click the ellipse button. Click Add.
- For Files of type, click the drop down arrow, choose All Files. Locate the PLUS backup file and highlight that file. Click OK. Click OK again to the Specify Backup screen.
- In the Restore Database Plus screen, Place a check mark in the box under Select the Backup sets to restore
- Click Options. Under Restore options, place a check mark for "Overwrite the existing database".
- Under Recovery state, choose default "Leave the database ready to use by rolling back uncommitted transactions. Additional transaction logs cannot be restored. (RESTORE WITH RECOVERY)". Click OK.
- Once the restoring of the plus database is complete, a pop up message will state "The restore of database 'PLUS' completed successfully".
- From a CMD prompt, type [iisreset] to start Internet Information Services. Open service manager, start the World Wide Web Publishing Service
- For 6.3 Update server, Type [net start "PatchLink Distribution Service"] to start the PatchLink Distribution Service. In 6.4 update server, type [net start "PatchLink Replication Service"] to start the PatchLink Replication Service.


Monday, September 28, 2009

Silent Install ZPM Agent from Command Prompt

Windows Agent
- Open Command prompt
- Define host location, serial number, and other optional settings using the following syntax:

With Proxy
msiexec /i "C:\UpdateAgent.msi" /qn HOST="http://myServer" SERIAL="00000000-00000000" USEPROXY=1 PROXYURL="http://myProxy" PROXYUSER="proxyUser" PROXYPASS="proxyPassword" GROUPLIST="GroupName1;GroupName2;GroupNameN"

Without Proxy
msiexec /i "C:\UpdateAgent.msi" /qn HOST="http://myServer" SERIAL="00000000-00000000" USEPROXY=0 GROUPLIST="GroupName1;GroupName2;GroupNameN"

Linux/Unix/Netware/Mac Agent
- Open Command prompt
- Define host location, serial number, and other optional settings using the following syntax:

With Proxy
./install -silent -d "/user/local" -p "http://myServer" -sno "00000000-00000000" -proxy "http://myProxy" -port ## -g "GroupName1;GroupName2;GroupNameN"

Without Proxy
./install -silent -d "/user/local" -p "http://myServer" -sno "00000000-00000000" -g "GroupName1;GroupName2;GroupNameN"

Tuesday, June 09, 2009

ZPM Agent on Linux

- Make sure you are authenticated as a root user. It requires root privilege. Otherwise, the installation will not proceed.

- Check the Java version

[root@paranoid root]# java –version
java version "1.6.0"
Java(TM) SE Runtime Environment (build 1.6.0-b105)
Java HotSpot(TM) Client VM (build 1.6.0-b105, mixed mode, sharing)
[root@paranoid root]#

- Make sure it is running on version 1.4 and above. If it is not running on version 1.4 and above, please install the Sun Java. Any other Java such as IBM JVM is not supported. If any other JVM is installed, uninstall it and then install Sun JVM

- Copy the unixupdateagent.tar of ZPM from CD to /root/zpmagent directory. Create zpmagent directory if not exist
[root@paranoid root]# cd zpmagent/
[root@paranoid zpmagent]# ls unixupdateagent.tar

- Extract unixupdateagent.tar file using the command below
[root@paranoid zpmagent]# tar -xvf unixupdateagent.tar
./install
./patchagent.tar
./README.txt
./patchagent.properties
./env.class
./InstallArchive.jar
./install.ncf
./support.tar

- Run “./install”
[root@paranoid patchlinkagent]# ./install

- Installation wizard will appear. Below are the screenshots
Installing ZENworks Patch Management Agent 6.3450
Copyright (c) 2006 Novell Corporation

Performing tests for Manual install...
Manual installation tests successfully completed.

- Press Enter to use default path (/usr/local) of ZPM Agent installation
Enter the directory where ZENworks Patch Management Agent should
be installed [/usr/local]:
Expanding archive...

- Enter the correct address and serial keyas given by the administrator
Enter your ZENworks Patch Management Server address:
http://
Enter the serial number that appears as xxxxxxxx-xxxxxxxx:
Server Serial Number>
Do you have a proxy?[y|N]: N
Do you wish to add this agent to existing groups on ZENworks Patch
Management Server?[y|N]: N

- Once completed, the summarized installation report will be displayed
This machine's IP Address is: 10.251.25.254
This machine's name is: paranoid
This agent has been converted to a service.
Successfully registered!
Now starting ZENworks Patch Management Agent...
ZENworks Patch Management Agent started with pid 2640.
View the ZENworks Patch Management Agent logs in
/usr/local/patchagent/update/log

To uninstall the ZENworks Patch Management Agent, run:
[root@paranoid root]# cd /usr/local/patchagent
[root@paranoid patchlinkagent]./uninstall

Tuesday, April 28, 2009

Opening Windows Firewall Ports on PDP via Remote Agent

Objective : Creating package that open Windows Firewall ports and deploy it to selected workstation.
Enviroment : ZENworks Patch Management 6.3/6.4 | MS Windows

Package Creation

- Go to Vulnerabilities ->Packages and click Create.
- In Package Editor main page, enter a name for the package and put in some descriptions on this package in the Description field. Click Next
- Select the operating systems (i.e. Win2k or Win2K3) and click Next
- Click Next in Add files and directories to package page
- Select Command as the type of script and BAT as script language. Click Edit
- Enter the following in the script editor and click OK

etsh firewall add portopening TCP 25253 ZPMTCP enable
etsh firewall add portopening UDP 25253 ZPMUDP enable

- The command appears in the scripting page now. Enable Script Execution Directory and type %TEMP% and click Next.

- Summary of the new package is displayed. Click Next and click Finish

Package Deployment

- Go to -> Vulnerabilities -> Packages and select locally Created Packages. Select Open port 25253 on PDP package and click Deploy.
- In the Devices/Groups Selection page, select the PDP Servers/hosts in which this package needs to be deployed and click Next
- Verify the package selection and click Next
- Accept the terms and conditions of this end user license agreement is selected and click Next
- Select Agent local Time and click Change to modify deployment start time.
- Modify the message where necessary and set other options if required
- Click Finish and package is ready for deployment
- Once agent successfully push to the client click Install