test

Signed Patches Administration Guide for PatchPro 2.2

Downloading and Installing the Patch Management Tools (Task Map)

Use this task map to identify the tasks that must be completed before you can apply signed patches to your system. Notice that you can install or upgrade a patch management tool in interactive mode or in non-interactive mode. Perform the tasks in the order shown.

Task 

Description 

For Instructions 

1. Verify Solaris package requirements. 

Verify that the required Solaris packages are installed on your system to support the patch management tools. 

See How to Verify Package Requirements for Patch Management Tools.

2. Download the software for the Solaris patch management tool. 

Select a Solaris patch management tool based on your Solaris release. 

See How to Download the Patch Management Tools From SunSolve Online.

3. Install or upgrade the patch management tool. 

Install the patch management tool in interactive mode or in non-interactive mode. 

Upgrade from PatchPro 2.1 to PatchPro 2.2 in interactive mode or in non-interactive mode. 

See How to Install and Configure the Patch Management Tool in Interactive Mode or How to Install the Patch Management Tool in Non-Interactive Mode.

See How to Upgrade From PatchPro 2.1 to PatchPro 2.2 in Interactive Mode or How to Upgrade From PatchPro 2.1 to PatchPro 2.2 in Non-Interactive Mode.

4. Non-interactive mode only – Set up your patch management environment.

Set up your system for applying signed patches. 

See How to Set Up Your Patch Management Environment After a Non-Interactive Installation or Upgrade.

5. (Optional) Identify the hardware on your system. 

Identify the hardware from Sun Network Storage that is on your system so that your patch management tool can determine appropriate patches for this hardware. 

See How to Identify the Hardware on Your System.

6. (Optional) Specify the policy to use for applying patches. 

Specify the types of patches to apply to your system in manual mode. 

See How to Identify the Types of Patches to Apply to Your System.

7. (Optional) Configure your patch management environment to access contract patches. 

Configure your patch management environment to access contract patches. These patches are available to you if you have a Sun service contract. 

See How to Configure Your System to Access Contract Patches.

8. (Optional) Uninstall the patch management tool. 

Uninstall the patch management tool from your system. 

See How to Uninstall the Patch Management Tool.

How to Verify Package Requirements for Patch Management Tools

  1. Verify that the appropriate Solaris cluster and Solaris packages are installed on your system.

    • For the Solaris 2.6 release, verify that these packages are present:


      # pkginfo | grep SUNWmfrun
system      SUNWmfrun      Motif RunTime Kit
# pkginfo | grep SUNWlibC
system      SUNWlibC       Sun Workshop Compilers Bundled libC
# pkginfo | grep SUNWxcu4
system      SUNWxcu4       XCU4 Utilities

    • For the Solaris 7 or Solaris 8 release, verify that these packages are present:


      # pkginfo | grep SUNWmfrun
system      SUNWmfrun      Motif RunTime Kit
# pkginfo | grep SUNWlibC
system      SUNWlibC       Sun Workshop Compilers Bundled libC

    • For the Solaris 9 release, verify that one of these Solaris clusters is present by checking the /var/sadm/system/admin/CLUSTER file:

      • SUNWCprog

      • SUNWCall

      • SUNWCXall

  2. If the pkginfo commands do not return any output, you must install the required packages.

How to Download the Patch Management Tools From SunSolve Online

The Solaris patch management tools are available for both the SPARC and x86 platforms.

  1. Go to http://www.sun.com/PatchPro.

  2. To begin the download process, go to the section that describes Patch Manager and click the download link.

    The binary code license agreement appears.

  3. Agree to the terms of the binary code license agreement.

    • To accept the license agreement, click Agree.

      The Patch Manager download page appears.

    • To reject the license agreement, click Cancel.

      You are not permitted to download the software.

  4. Identify the Solaris version and platform of your local system to get the appropriate patch management tool.

    1. Determine which version of Solaris you need:

      • Solaris 2.6

      • Solaris 7

      • Solaris 8

      • Solaris 9

    2. Click the README link associated with the Solaris version you chose to get information about installing the patch management tool.

    3. Click the platform link associated with the version of Solaris that this tool supports.

      • Click SPARC to download the SPARC version of the patch management tool.

      • Click x86 to download the x86 version of the patch management tool.

  5. Choose a directory on your local system in which to download and extract the tool.

    For example, you might create a directory called /export/download/patchpro.

    Ensure that this directory can be written by superuser.

  6. Download the software tar file to that directory.

    The software you selected is downloaded.

  7. Become superuser.

  8. Change to the directory in which you downloaded the tar file.


    # cd /export/download/patchpro

  9. Extract the patch management tool from the tar file.

    • If you are downloading the tar file for Solaris 2.6 or Solaris 7, the tar file is compressed.


      # zcat pproSunOSsparc5.6jre2.2.tar.Z | tar xvf -

    • If you are downloading the tar file for Solaris 8 or Solaris 9, the tar file is in zip format.


      # gunzip -dc pproSunOSx865.9jre2.2.tar.gz | tar xvf -

    The name of the tar file indicates the operating system type, platform, and operating system version:


    ppro<OS><platform><OS version>jre2.2.tar

    For example, pproSunOSsparc5.8jre2.2.tar is the tar file that contains the patch management tool for the SPARC version of Solaris 8 (SunOSTM 5.8). pproSunOSx865.9jre2.2.tar is the tar file that contains the patch management tool for the x86 version of Solaris 9 (SunOS 5.9).

Now, you can install and configure the tool on your system. See How to Install and Configure the Patch Management Tool in Interactive Mode or How to Install the Patch Management Tool in Non-Interactive Mode.

How to Install and Configure the Patch Management Tool in Interactive Mode

Use the setup command to install and configure the patch management tool on your system in interactive mode.

If you want to install the patch management tool in a hands-off manner, such as a custom JumpStartTM installation, see How to Install the Patch Management Tool in Non-Interactive Mode.

  1. Become superuser.

  2. Change to the directory in which you downloaded the tar file.


    # cd /export/download/patchpro

  3. Run the setup command to install and configure the tool.

    For example, install and configure the Solaris 9 (SPARC Platform Edition) version of the patch management tool:


    # cd pproSunOSsparc5.9jre2.2
# ./setup

  4. Specify the mechanism your system uses to connect to the Internet to retrieve Sun patches.

    The patch management tool requires that your system be connected to the Internet, either directly or indirectly through a web proxy.

    • If your system is connected directly to the Internet, type 1.

      • If your system runs Solaris 2.6, Solaris 7, or Solaris 8 software, go to Step 6.

      • If your system runs Solaris 9 software, go to Step 5.

    • If your system is connected to the Internet through a web proxy, type 2.

    1. Specify the host name or IP address of the web proxy.

    2. Specify the port number of the web proxy.

    3. Specify whether the web proxy requires authentication.

      • If the web proxy does not require authentication, type n.

        • If your system runs Solaris 2.6, Solaris 7, or Solaris 8 software, go to Step 6.

        • If your system runs Solaris 9 software, go to Step 5.

      • If the web proxy requires authentication, type y.

    4. Specify the name of a user for the web proxy.

    5. Specify the password of the user for the web proxy.

  5. Solaris 9 only – Indicate whether to automatically restart the Solaris WBEM services after you install the patch management tool.

    Restarting the Solaris WBEM services on an active system can cause unexpected problems, so ensure that your system is in a quiet state before restarting these services.

    • If you can restart the services now, type y.

      The services are automatically restarted after the patch management tool is installed.

    • If you cannot restart the services now, type n.

      After you install the patch management tool, bring your system to a quiet state, then manually restart the services.


      # /etc/init.d/init.wbem stop
# /etc/init.d/init.wbem start

  6. Verify that the data you specified is correct.

    The setup program shows the configuration information that you supplied.

    • If the configuration data is correct, type y.

    • If the configuration data is incorrect and you want to change some of the values, type n.

    The patch management tool is installed.

  7. Add patch management tool directories to your path.

    • For Bourne shell or Korn shell:


      # PATH=/usr/sadm/bin:/opt/SUNWppro/bin:${PATH}
# export PATH

    • For C shell:


      machine_name# setenv PATH /usr/sadm/bin:/opt/SUNWppro/bin:${PATH}

  8. Add the patch man page directory to your man page path.

    • For Bourne shell or Korn shell:


      # MANPATH=/opt/SUNWppro/man:${MANPATH}
# export MANPATH

    • For C shell:


      machine_name# setenv MANPATH /opt/SUNWppro/man:${MANPATH}

How to Install the Patch Management Tool in Non-Interactive Mode

Use the setup command with the -f option if you want to perform a hands-off installation. This command can be used to perform a custom JumpStart installation.

If you want to install and configure the patch management tool in interactive mode, see How to Install and Configure the Patch Management Tool in Interactive Mode.

  1. Become superuser.

  2. Change to the directory in which you downloaded the tar file.


    # cd /export/download/patchpro

  3. Run the setup command to install the tool.

    For example, install the Solaris 9 (x86 Platform Edition) version of the patch management tool:


    # cd pproSunOSx865.9jre2.2
# ./setup -f
Caution – Caution –

After the patch management tool is installed, you must configure it by running the pprosetup command. See How to Set Up Your Patch Management Environment After a Non-Interactive Installation or Upgrade.

If not configured, the patch management tool will not be functional.

How to Upgrade From PatchPro 2.1 to PatchPro 2.2 in Interactive Mode

Use the setup command to manually upgrade your system that runs PatchPro 2.1 to PatchPro 2.2. You do not need to uninstall PatchPro 2.1 before you upgrade the tool. The setup command also enables you to configure the patch management tool on your system.

If you want to upgrade the patch management tool in a hands-off manner, such as a custom JumpStart installation, see How to Upgrade From PatchPro 2.1 to PatchPro 2.2 in Non-Interactive Mode.

If your system is not already running PatchPro 2.1, just install PatchPro 2.2 by using one of the following procedures:

  1. Become superuser.

  2. Change to the directory in which you downloaded the PatchPro 2.2 tar file.


    # cd /export/download/patchpro

  3. Run the setup command to upgrade and configure the tool.

    For example, upgrade and configure the Solaris 9 (SPARC Platform Edition) version of the patch management tool:


    # cd pproSunOSsparc5.9jre2.2
# ./setup

  4. Indicate whether you want to continue with the upgrade of the patch management tool.

    • If yes, type y.

    • If you want to exit the setup program, type q.

  5. Specify the mechanism your system uses to connect to the Internet to retrieve Sun patches.

    The patch management tool requires that your system be connected to the Internet, either directly or indirectly through a web proxy.

    • If your system is connected directly to the Internet, type 1.

      • If your system runs Solaris 2.6, Solaris 7, or Solaris 8 software, go to Step 7.

      • If your system runs Solaris 9 software, go to Step 6.

    • If your system is connected to the Internet through a web proxy, type 2.

    1. Specify the host name or IP address of the web proxy.

    2. Specify the port number of the web proxy.

    3. Specify whether the web proxy requires authentication.

      • If the web proxy does not require authentication, type n.

        • If your system runs Solaris 2.6, Solaris 7, or Solaris 8 software, go to Step 7.

        • If your system runs Solaris 9 software, go to Step 6.

      • If the web proxy requires authentication, type y.

    4. Specify the name of a user for the web proxy.

    5. Specify the password of the user for the web proxy.

  6. Solaris 9 only – Indicate whether to automatically restart the Solaris WBEM services after you upgrade the patch management tool.

    Restarting the Solaris WBEM services on an active system can cause unexpected problems, so ensure that your system is in a quiet state before restarting these services.

    • If you can restart the services now, type y.

      The services are automatically restarted after the patch management tool is upgraded.

    • If you cannot restart the services now, type n.

      After you upgrade the patch management tool, bring your system to a quiet state, then manually restart the services.


      # /etc/init.d/init.wbem stop
# /etc/init.d/init.wbem start

  7. Verify that the data you specified is correct.

    The setup program shows the configuration information that you supplied.

    • If the configuration data is correct, type y.

    • If the configuration data is incorrect and you want to change some of the values, type n.

  8. Indicate whether you want to upgrade your current installation.

    You are asked to specify whether to upgrade software on a per-package basis.

    • If you want to upgrade to the new version of the specified package, type y.

    • If you want to exit the setup program, type q.

  9. Indicate whether to continue with the upgrade of the patch management tool.

    • If you want to continue, type y.

      The patch management tool is upgraded on your system. The old version is removed, and the tool is configured based on your answers to the configuration questions.

      The PatchPro configuration settings you specified are displayed.

    • If you want to exit the setup program, type q.

  10. Add patch management tool directories to your path.

    • For Bourne shell or Korn shell:


      # PATH=/usr/sadm/bin:/opt/SUNWppro/bin:${PATH}
# export PATH

    • For C shell:


      machine_name# setenv PATH /usr/sadm/bin:/opt/SUNWppro/bin:${PATH}

  11. Add the patch man page directory to your man page path.

    • For Bourne shell or Korn shell:


      # MANPATH=/opt/SUNWppro/man:${MANPATH}
# export MANPATH

    • For C shell:


      machine_name# setenv MANPATH /opt/SUNWppro/man:${MANPATH}

How to Upgrade From PatchPro 2.1 to PatchPro 2.2 in Non-Interactive Mode

If you are already running PatchPro 2.1 on your system, you can upgrade your system to run PatchPro 2.2.

If you want to upgrade the patch management tool interactively, instead of in a hands-off manner, see How to Upgrade From PatchPro 2.1 to PatchPro 2.2 in Interactive Mode.

If your system is not already running PatchPro 2.1, just install PatchPro 2.2 by using one of the following procedures:

  1. Become superuser.

  2. Change to the directory in which you downloaded the PatchPro 2.2 tar file.


    # cd /export/download/patchpro

  3. Run the setup command to install and configure the tool.

    For example, upgrade the Solaris 7 x86 version of the patch management tool:


    # cd pproSunOSx865.7jre2.2
# ./setup -f UPGRADE=true
Caution – Caution –

After the patch management tool is upgraded, you must configure it by running the pprosetup command. See How to Set Up Your Patch Management Environment After a Non-Interactive Installation or Upgrade.

If not configured, the patch management tool will not be functional.

How to Set Up Your Patch Management Environment After a Non-Interactive Installation or Upgrade

  1. Become superuser.

  2. Add patch management tool directories to your path.

    • For Bourne shell or Korn shell:


      # PATH=/usr/sadm/bin:/opt/SUNWppro/bin:${PATH}
# export PATH

    • For C shell:


      machine_name# setenv PATH /usr/sadm/bin:/opt/SUNWppro/bin:${PATH}

  3. Add the patch man page directory to your man page path.

    • For Bourne shell or Korn shell:


      # MANPATH=/opt/SUNWppro/man:${MANPATH}
# export MANPATH

    • For C shell:


      machine_name# setenv MANPATH /opt/SUNWppro/man:${MANPATH}

  4. Specify whether an Internet connection must be established by a web proxy.

    • If you do not need to use a web proxy to establish an Internet connection, you have completed the web proxy configuration process.

    • If you must use a web proxy to establish an Internet connection, run the following command:


      # pprosetup -x proxy-server:proxy-port

      where proxy-server is the host name of the web proxy, and proxy-port is the port number of the web proxy, which is 8080 by default. Notice that these values must be separated by a colon (:).

      For example, if you select webaccess.corp.net.com as the proxy server, the pprosetup command would look like this:


      # pprosetup -x webaccess.corp.net.com:8080

      Obtain this information from your system administrator or from your network administrator.

  5. (Optional) Specify whether the web proxy requires authentication.

    • If the web proxy does not require authentication, you have completed the web proxy configuration process.

    • If the web proxy does require authentication, do the following:

    1. Specify the name for your web proxy.


      # pprosetup -U proxy-user-name

    2. Specify the user's password for your web proxy by adding the password to the /opt/SUNWppro/lib/.proxypw file.


      # echo proxy-user-passwd > /opt/SUNWppro/lib/.proxypw

      Keep the password safe by setting the owner, group, and permissions of this file to root, sys, and 0600, respectively.

  6. Solaris 9 only – Notify the Solaris Management Console server that the PatchPro packages are added to the system.


    # /etc/init.d/init.wbem stop
# /etc/init.d/init.wbem start

After you have completed all the signed patch preparation tasks, you can begin applying signed patches to your system by using your patch management tool.

You can use the pprosetup command to change the configuration of your patch management environment. See the pprosetup(1M) man page.

Note –

Solaris 9 only – If you change your patch management environment by running pprosetup, you must restart the Solaris WBEM services before you use the smpatch command. Restarting these services causes the configuration changes take effect.

How to Identify the Hardware on Your System

You can use your patch management tool to apply firmware patches to Sun Network Storage hardware products that are attached to your system. The tool needs to know what hardware is attached to your system. Some of the hardware is automatically identified by software, but some needs to be identified manually by following this procedure.

When the hardware is identified, the smpatch analyze command can determine whether you need specific firmware patches based on your hardware configuration.

  1. Become superuser.

  2. Start up the dialog program to identify the hardware that exists on your system.


    # pprosetup -H

Change Hardware Configuration.
Analyzing this computer.
..............

  3. Select the numbers that are associated with the disk drives that are attached to your system.

    You must page through the entire list before you can make your selections. So, note the numbers that are associated with the disk drives that are attached to your system.

    Your selections are listed.

  4. Select the numbers that are associated with the storage servers and disk arrays that are attached to your system.

    You must page through the entire list before you can make your selections. So, note the numbers that are associated with the storage servers and disk arrays that are attached to your system.

    Your selections are listed.

  5. Select the numbers that are associated with the tape storage systems that are attached to your system.

    You must page through the entire list before you can make your selections. So, note the numbers that are associated with the tape storage systems that are attached to your system.

    Your selections are listed.

  6. Save your selections to a file.

    This file is also used by PatchPro Expert, which is available on the SunSolve Online site.

    • If you want to save your selections, type y.

    • If you do not want to save your selections, type n.

How to Identify the Types of Patches to Apply to Your System

This procedure enables you to establish the default patch policy for your system. See also the pprosetup(1M) man page.

  1. Become superuser.

  2. Identify the types of patches to apply to the system.


    # pprosetup -i standard:singleuser:rebootafter:reconfigafter

    In this example command line, the default patch policy applies the following types of patches to your system:

    • Standard patches

    • Patches that must be applied in single-user mode

    • Patches that must have the system undergo a reboot after they have been applied

    • Patches that must have the system undergo a reconfiguration reboot after they have been applied

How to Configure Your System to Access Contract Patches

If you are a customer with a Sun service contract, additional patches are available to you. To access these patches, you must specify your SunSolveTM user name and password.

  1. Specify your SunSolve user name.


    # pprosetup -u sunsolve-user-name

  2. Specify your SunSolve password by adding the password to the /opt/SUNWppro/lib/.sunsolvepw file.


    # echo sunsolve-user-passwd > /opt/SUNWppro/lib/.sunsolvepw

    Keep the password safe by setting the owner, group, and permissions of this file to root, sys, and 0600, respectively.

How to Uninstall the Patch Management Tool

When you uninstall the patch management tool, the tool is completely removed from your system.

  1. Become superuser.

  2. Uninstall the PatchPro software.


    # /opt/SUNWppro/bin/uninstallpatchpro

  3. Solaris 2.6, Solaris 7, and Solaris 8 only – Determine whether you want the Java 2 software removed.

    Java 2 is installed with the patch management tool.

    • If you want to remove the Java 2 software, type y.

    • If you do not want to remove the Java 2 software, type n.