Using patch assesment tool

[rana786]

Hi all,
I like to use Patch Assessment Tool for patch assessment, I have already downloaded the cmp_collect.sh from “itrc.hp.com” site. As you know, since this is production and mission critical environment so before I run this script I want to be sure that it will not make any problem in my current environment.

I also want to use “Security Patch Tool” I am a bit confused about it could you please give me the steps how to use this tools. Is there any place in itrc.hp.com for security patch assessment like patch assessment with “Patch Assessment tool”.

Rgds,
Mostafa

[James R. Ferguson]

Hi Mostafa:

Perhaps these links help:

First:

http://www2.itrc.hp.com/service/patch/assessSystemsPage.do

Then, on the upper right (Configuring an assessment profile):

http://www2.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToConfigureAssessment

You will note that security patches are one of the options for assessment.

Regards!

...JRF...

http://www2.itrc.hp.com/service/patch/wrap.do?pageKey=patch.html.howToConfigureAssessment

[Steven E. Protter · Accepted solution]

Shalom Mostafa,

Both security_patch_check and cpm_collect.sh scripts are completely harmless.

They run swlist commands against your SD/UX database and compare them to HP recommended configurations.

swlist as the name implies lists it does not change. I ran these tools regularly on production systems.

Now, once you run the tools, you get recommendations. These recommendations can include dangerous patches and you need to very carefully decide what to do and test the installation in a test/system environment prior to isntalling production.

I recommend a full make_tape_recovery backup prior to installing patches in any productcion system.

SEP

[Arturo Galbiati]

Hi Mostafa,
don't worry about the cmp_collect.sh.
I'm using it from a lot of time and no problem encountered.
HTH,
Art