HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Selecting patch from recommemded or from most recent ?

 
SOLVED
Go to solution
subodhbagade
Regular Advisor

Selecting patch from recommemded or from most recent ?

Hi,

We are planning to install multiple patches using single depot for hp-ux 11.23 but whenever i am searching for particular patch eg(1) PHNE_36257 it gives me the recommended and Most recent coloumn having different patch ID with different posted date in itrc patch database.

In this case, which one i should select from recommended or from most recent one with their patch dependancy …each column having the different patch id and different posted date ……

Should we check the latest date from recommended one or from most recent one ? or

Do we have to select the all recommended one ? or all most recent one with respected to searched patch id

I am not sure about the recommended and most recent one ? pls confirm.


Thanks in advance !!


Regards,
Subodh.





12 REPLIES
James R. Ferguson
Acclaimed Contributor

Re: Selecting patch from recommemded or from most recent ?

Hi:

Choosing the "recommended" patch is usually your best choice unless you _know_ otherwise.

http://www.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.patchDBCandidateListHelp&BC=main|search|

Regards!

...JRF...
Steven E. Protter
Exalted Contributor

Re: Selecting patch from recommemded or from most recent ?

Shalom,

Recommended patches are generally three star patches that are part of the bi-annual Gold or QPK.

Some applications minimum patch requirements like Oracle will force you to use patches that are not three star.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Bob E Campbell
Honored Contributor

Re: Selecting patch from recommemded or from most recent ?

Pick the recommended patch unless:

1. You know you need a newer fix

2. You plan on running tests for 3 to 9 months before you put your selections into production
Lijeesh N G_1
Respected Contributor

Re: Selecting patch from recommemded or from most recent ?

Hi Subodh,

1)whenever i am searching for particular patch eg(1) PHNE_36257 it gives me the
recommended and Most recent coloumn having different patch ID with different
posted date in itrc patch database??
==>If you search for a patch in ITRC databse, normally it will give three options,

i)Specifed patch ==> which you mentioned

ii)Recommended ==> This is a HP recommended patch in the family of specified patch.
It may be a 2 star or 3 star patch.

iii)Most recent ==> This is most recent or latest patch in the family of specified patch.
Some time it will be same as HP recommended if there is no recent
patch in the family or it may be a single star patch.


==>If you click on the "specified patch" and then on "Patch Family Tree",
you will be able to see all these three categories patches.

2)In this case, which one i should select ??
==>Better to select always HP recommended patch.
==>Take care about single star patches and warning patches.
==>Take care about dependencies.

3)Do we have to select the all recommended one ?
==>No, all patches will be in same family.

4) We are planning to install multiple patches using single depot for hp-ux 11.23 ??
==>I would suggest you to run a "Patch assessment" for this particular system istead of
downloading indvidual patches.In that case you will get a single bundle with all dependencies.
Please let me know if you want the procedure for patch assessment.


Regards,
LIJEESH N G
Bob E Campbell
Honored Contributor

Re: Selecting patch from recommemded or from most recent ?

If you are looking just for the recommended solution with a single patch you can still use Software Assistant (https://www.hp.com/go/swa).

Run the command:

# swa report -a CHAIN PHNE_36257

and it will report if you need that patch as well as any dependencies. You could then build a depot using the command:

# swa get -t /var/tmp/yourDepot
subodhbagade
Regular Advisor

Re: Selecting patch from recommemded or from most recent ?

Hi,

Thanks for your ongoing support always.

From provided patch selection note, it implies i have to select the recommended patch having highest rating and latest posted date from multiple list of patch id under recommended column.

Like if I am searching for PHSS_36342 ...in recommended column it gives 2 patch id , so i have to select one patch id having highest rating and latest posted date. (Please correct me if i am going wrong)

(I have to install 13 patches before upgrade java) normally I am selecting individual patch, adding to selected patch list and then create a single depot for installation.


LIJEESH, I would really thankful if you could share the procedure of " patch assessment " and how it is different from creating depot using create depot script that we are running normally after downloading patch.

Thanks you all.

Regards,
Subodh.

Bob E Campbell
Honored Contributor

Re: Selecting patch from recommemded or from most recent ?

Had a typo above, but same idea would work for a list of patches:

# swa report -a CHAIN=PATCH1 -a CHAIN=PATCH2 ... -a CHAIN=PATCHN

followed by:

# swa get -t /var/tmp/DEPOT

followed by:

# more /var/tmp/DEPOT/readBeforeInstall.txt

followed by deep thought and reflection and:

# swinstall -s /var/tmp/DEPOT -x patch_match_target=true -x autoreboot=true
Lijeesh N G_1
Respected Contributor
Solution

Re: Selecting patch from recommemded or from most recent ?

Hi,

In patch analysis using ITRC tool,
we will upload all inforamations(Presently Installed bundles,pathec,etc)
about the particular system to the ITRC through a .xml file.
ITRC will recommend all applicable patches to the particular system according
to the installed file set on system and what patch assessment profile you selected.

Downloading bundle is same like normal.The procedure is follows,


Patch analysis step by step
===========================
1)Collect system information(inventory.xml file)
==>Download swainv script from ITRC and copy it to /tmp diectory(Attached this script).
==>Change the permission of the file to executable with chmod command.
#cd /tmp
#chmod 700 swainv.txt
==>Exceute the script; ./swainv.txt, It will generate a file with name
inventory.xml conatins all the information about installed bundles,products,fileset and
some common iforamations about your system.
2)Upload inventory.xml to ITRC and perform patch assessment.
==> Open the link http://www13.itrc.hp.com/service/patch/assessSystemsPage.do?BC=main|
==> Click on "upload system information" and upload inventory.xml.
==> Select Proile as HP recommended(If you want to customise youcan).
==> Click on "display candidate patches", which will give you the list of recommended patches.
==> Customise if you want and click on add to selected patch list and
download the patches.

For more info about procedure refer below links,

http://www13.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToPerformAssessment

http://www13.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToConfigureAssessment

http://www13.itrc.hp.com/service/rsb/rsbDisplay.do?fileName=patches_hpux/hpux11iv2_9000_integrity.htm

=>Take care about single star patch and warning patches,I would suggest you to remove single start patches if recommended. For warning patch, read warning text and take decision,I would suggest you to remove warning patch if it has a critical warning.

=>Take always ignite backup before patch bundle installation.


Regards,
LIJEESH N G
subodhbagade
Regular Advisor

Re: Selecting patch from recommemded or from most recent ?

Hi,

Thanks to all for giving valuable suggestion.

(1) I have created a single depot which having multiple patches along with their dependency but there are 3 patches having "special installation instruction"

PHKL_31500 1.0 Sept04 base patch
PHCO_38955 1.0 pthread library cumulative patch
PHCO_38637 1.0 libc cumulative patch

(2) Out of which PHKL_31500 is already installed in server and I do not want to install it again so how I can skip this patch from installing again.

So,,, while installing a single depot using #swinstall ...do we have to select single patches in interactive mode and then install or is it automatically selected as I am installing a
Single depot.

(3) I have gone through â special installationâ note of PHCO_38955 and PHCO_38637 it specify to set ENV path and to enable SYSTEM_LOGMSG_ENHANCEMENT, I am not sure about it , please suggest on it . (Refer attachment)

(4) What I have to do, if I want to skip the patches from depot while
Installation. (or before instln)

Thank you Kindly. Have you all gr8 time!!

Regards,
Subodh.

James R. Ferguson
Acclaimed Contributor

Re: Selecting patch from recommemded or from most recent ?

Hi Subodh:

> (1) I have created a single depot which having multiple patches along with their dependency but there are 3 patches having "special installation instruction"

You need to read and follow the special instruction guidelines. That's good that you paid attention.

> (2) Out of which PHKL_31500 is already installed in server and I do not want to install it again so how I can skip this patch from installing again.

That would be expected. Unless you set '-x reinstall=true' then the default behavior is _not_ to reinstall any patch that already exists on your server. Unless you have a very good reason and good knowledge of the ramifications of reinstalling, don't.

> So,,, while installing a single depot using #swinstall ...do we have to select single patches in interactive mode and then install or is it automatically selected as I am installing a Single depot.

You can perform a commandline (non-interactive) installation. As I said, patches that are already installed will be skipped automatically. You should use:

# swinstall -s /patches/swdepot -x autoreboot=true -x patch_match_target=true

> (3) I have gone through â  special installationâ  note of PHCO_38955 and PHCO_38637 it specify to set ENV path and to enable SYSTEM_LOGMSG_ENHANCEMENT, I am not sure about it , please suggest on it . (Refer attachment)

There is no harm in setting the SYSTEM_LOGMSG_ENHANCEMENT. It's simply your choice. By the way (!) please don't post attachments in non-ASCII formats. This is UNIX after all.

> (4) What I have to do, if I want to skip the patches from depot while
Installation.

As I noted, patches that already exist on your server will be skipped unless you set 'reinstall=true'. If you wanted to actually remove a patch from the depot so that it would not be installed, you would use 'swremove' and operate on the depot.

Regards!

...JRF...
SoorajCleris
Honored Contributor

Re: Selecting patch from recommemded or from most recent ?

Hi,

If you want to do an assessment, easy task is to use SWA as Bob said. But, One small issue is that you may need connectivity to ITRC from your server.

How ever as Lijeesh told you may use ITRC assessment tool also ..

Always try to avoid installing warning patches if it is not that imporatant and go through the special installation istructions and other dependency text if any, of all the patches which you are going to install
:)

Regards,
sooraj
"UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity" - Dennis Ritchie
Bob E Campbell
Honored Contributor

Re: Selecting patch from recommemded or from most recent ?

Try both ways and tell us your thoughts. Once SWA is installed the swainv script is found at /opt/swa/lbin/swainv.

There are a number of ways that SWA can be used with indirect connectivity. Be happy to discuss those in a new thread.