Patching

[Jason_309]

The previous admin did not believe in patching. So i get try and bring it up to speed. It has not been patched since about 2002. What would you suggest as my best approach on this is?

[James R. Ferguson · Accepted solution]

Hi Jason:

Download and apply the appropriate Support Plus or Standard Patch bundles from the ITRC patch database:

http://www2.itrc.hp.com/service/patch/releaseIndexPage.do?BC=main|

Patches and patch bundles are cumulative, so the good news is that you will be "current" by taking the most recent bundles.

Be sure to install *all* the bundles in a set. For instance, for 11.11, install the BUNDLE11i, the HWEnable11i and GOLDQPK11i bundles.

Make sure to fetch and install the latest Support Tools too:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6191AAE

You can collect the patch bundles into a single depot with 'swcopy' and perform one reboot. If you need a good overview on patching, see:

http://docs.hp.com/en/5991-5309/index.html

Regards!

...JRF...

[A. Clay Stephenson]

1) Download and install the latest version of Ignite/UX and then run a make_tape_recovery.

2) If possible, create a lifeboat disk by dd'ing your existing boot disk(s) to lifeboat disk(s). Should anything fail, you then remove the boot disk and insert thge lifeboat in the boot disk's slot and you are back in business much faster than you can say Ignite --- but still do the make_tape_recovery.

3) Install the latest Quality Pack. Because these are cumulative, you should be up to the latest and greatest.

4) It may be necessary to do tasks such as relink the Oracle executables.

5) Your version of JetDirect is probably out of date (and may even be JetAdmiin). Install the latest version and run the transferqueue command to convert your existing interface files to the newer versions.

[Ivan Krastev]

Also check for patches non OS programs - some Oracle's need additional patching after os patches.


regards,
ivan

[Jason_309]

Thank you both for such quick responses.

[Jason_309]

thanks again.

[Robert Fritz]

I'd also suggest using Security Patch Check to get the latest security patches and updates which are often not in the bundles. Also, this will give you the data you need to get the systems up to date on security bulletin compliance.

The tool can be found at:
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6834AA

[Bob E Campbell]

Just an update to Robs pointer to security_patch_check(1M). The Software Assistant (SWA) tool has been released and replaces most SPC usage.

Find more information and download the first release at http://www.hp.com/go/swa