System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

download recommened patch and install and security_patch_check

mw.kim
Occasional Contributor

download recommened patch and install and security_patch_check

Hi
can you give me details about downloading 11.23 recommened patch and installing it
and give me a little bit about how to do security_patch_check ?
6 REPLIES
R.K. #
Honored Contributor

Re: download recommened patch and install and security_patch_check

Hi,

Login to itrc.

Go to:
http://www11.itrc.hp.com/service/patch/assessSystemsPage.do?BC=main|

This is for "Run a Patch Assessment"

Upload new system info
- Download swainv script
- cd to the directory that contains the script and execute it.The results of the script are written into an ascii file called inventory.xml
- Upload the resulting inventory.xml file to the same place in ITRC

Doing so you will get the patches that needs to be updated on your server.

Hope this helps..
R.K.
Don't fix that what ain't broke
Lijeesh N G_1
Respected Contributor

Re: download recommened patch and install and security_patch_check

Hi,

You need to run a patch analysis for finding the recommended patches,

Patch analysis
==============
1)Collect system information(inventory.xml file)
==>Download swainv script from ITRC and copy it to /tmp dir.
==>Change the permission of the file to executable with chmod command.
==>Exceute the script; ./swainv. It will generate a file with name
inventory.xml conatins all the information about installed bundles,products,fileset and
some common ifos about your system.
2)Upload inventory.xml to ITRC and perform patch assessment.
==> Open the link http://www13.itrc.hp.com/service/patch/assessSystemsPage.do?BC=main|
==> Click on "upload system information" and upload inventory.xml.
==> Select Proile as HP recommended(If you want to customise youcan).
==> Click on display candidate patches, which will give you the list of recommended patches.
==> Customise if you want and download the patches.

For more info about procedure refer below links,
http://www13.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToPerformAssessment

http://www13.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToConfigureAssessment

http://www13.itrc.hp.com/service/rsb/rsbDisplay.do?fileName=patches_hpux/hpux11iv2_9000_integrity.htm


For about security_patch_check,refer below links;
=================

http://docs.hp.com/en/B3921-60631/security_patch_check.1M.html

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1249272039006+28353475&threadId=1181660

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1249273415590+28353475&threadId=1239614


Regards,
LIJEESH N G
SoorajCleris
Honored Contributor

Re: download recommened patch and install and security_patch_check

Hi,

If you are asking about security_patch_check, it is better to go for HP SWA ( Software assistant). Install it. SPC is inbuilt in that and ITRC patch assessment ( most of the things) also integrated.
1.SWA will give you a very detailed HTML reprt on analysis.
2. If your server can access ITRC it can download all the recommended patches automatically from ITRC and it will create a depote also. Only thing you need to do is just install it.


If you dont have an internet connection, just download security_catlog file and give the path while running SWA report.

Else you can go with ITRC patch assessment also as Lijeesh told . In that case you may download and create the depote manually.

* If you want the security bulletins which is applicable for the system always go with SWA.

Regards,
Sooraj
"UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity" - Dennis Ritchie
SoorajCleris
Honored Contributor

Re: download recommened patch and install and security_patch_check

Hi again,

One thing I forgot to tell you is that, when ever you do a security patch analysis, it may recommend some single star patches which may be out of customers patch strategy. Always review for single star patches and warning patches.

Regards,
Sooraj
"UNIX is basically a simple operating system, but you have to be a genius to understand the simplicity" - Dennis Ritchie
Lijeesh N G_1
Respected Contributor

Re: download recommened patch and install and security_patch_check

Hi,

Also read all patches special installation instructions as well.

It is recommended to take a ignite backup before proceeding to the patch bundle installation.

Regards,
LIJEESH N G
Bob E Campbell
Honored Contributor

Re: download recommened patch and install and security_patch_check

To take it a little bit farther, the security_patch_check tool has been obsoleted as of 11/01/2008. Download SWA from https://www.hp.com/go/swa. There are also links leading to the Admin Guide.

Excellent advise to review Other Dependencies and Special Installation Instructions. When SWA is used to build the patch depot it creates a report for doing just that at the depot root.