Patch Management for SUSE Linux Enterprise User's Guide

40
IBM Endpoint Manager Version 9.0 Patch Management for SUSE Linux Enterprise User's Guide

Transcript of Patch Management for SUSE Linux Enterprise User's Guide

Page 1: Patch Management for SUSE Linux Enterprise User's Guide

IBM Endpoint ManagerVersion 9.0

Patch Management for SUSE LinuxEnterprise User's Guide

���

Page 2: Patch Management for SUSE Linux Enterprise User's Guide
Page 3: Patch Management for SUSE Linux Enterprise User's Guide

IBM Endpoint ManagerVersion 9.0

Patch Management for SUSE LinuxEnterprise User's Guide

���

Page 4: Patch Management for SUSE Linux Enterprise User's Guide

NoteBefore using this information and the product it supports, read the information in “Notices” on page 29.

This edition applies to version 9, release 0, modification level 0 of IBM Endpoint Manager (product number5725-C45) and to all subsequent releases and modifications until otherwise indicated in new editions.

© Copyright IBM Corporation 2003, 2013.US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contractwith IBM Corp.

Page 5: Patch Management for SUSE Linux Enterprise User's Guide

Contents

Chapter 1. Introduction . . . . . . . . 1Supported platforms. . . . . . . . . . . . 1

Chapter 2. Setup . . . . . . . . . . . 3Download plug-ins . . . . . . . . . . . . 3Manage Download Plug-ins dashboard . . . . . 3

Registering the SUSE download plug-in . . . . 5Unregistering the SUSE download plug-in . . . 7Configuring the SUSE download plug-in . . . . 8Migrating the SUSE download plug-in . . . . 10Upgrading the SUSE download plug-in . . . . 12

Chapter 3. Patch using Fixlets . . . . 13Manage Preference Lists . . . . . . . . . . 18

Using the Preference Lists Dashboard . . . . 18

Appendix A. Support. . . . . . . . . 25

Appendix B. Frequently askedquestions . . . . . . . . . . . . . 27

Notices . . . . . . . . . . . . . . 29

© Copyright IBM Corp. 2003, 2013 iii

Page 6: Patch Management for SUSE Linux Enterprise User's Guide

iv IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 7: Patch Management for SUSE Linux Enterprise User's Guide

Chapter 1. Introduction

IBM Endpoint Manager Patch Management for SUSE Linux Enterprise providesunified, real-time visibility and enforcement to deploy and manage patches to allendpoints from a single console.

The Endpoint Manager Patch Management solution, which includes deploying amulti-purpose, lightweight agent to all endpoint devices, supports a wide varietyof device types ranging from workstations and servers to mobile and point-of-sale(POS) devices.

Supported platformsEndpoint Manager supports different SUSE Linux Enterprise platforms andupdates.

Endpoint Manager Patch Management for SUSE Linux Enterprise supports Novellupdates on the following platforms:v SUSE Linux Enterprise Desktop/Server 10 SP3 (x86/x86_64/s390x)v SUSE Linux Enterprise Desktop/Server 11 (x86/x86_64/s390x)v SUSE Linux Enterprise Desktop/Server 11 SP1 (x86/x86_64/s390x)

Patch Management for SUSE Linux provides the following updates:v Mandatoryv Recommendedv Optional

To install x86/x86_64 SUSE patches, subscribe to the Patches for SLE10, Patches forSLE11, and Linux RPM Patching sites. To install SUSE patches for System Z (s390x)endpoints, subscribe to the Patches for SLE10 System Z, Patches for SLE11 SystemZ and Linux RPM Patching sites.

A download plug-in for SUSE must be registered prior to deploying patches fromthe Endpoint Manager console. This process is detailed in the sections below.

© Copyright IBM Corp. 2003, 2013 1

Page 8: Patch Management for SUSE Linux Enterprise User's Guide

2 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 9: Patch Management for SUSE Linux Enterprise User's Guide

Chapter 2. Setup

Setting up your environment for patch management.

Download plug-insDownload plug-ins are executable programs that download a specified patch fromthe website of the patch vendor. To ease the process of caching, Fixlets have anincorporated protocol that uses download plug-ins.

For the Fixlet to recognize the protocol, the related download plug-in must beregistered. You must use the Manage Download Plug-ins dashboard to register thedownload plug-in. After the plug-in is registered, you can run the Fixlets todownload, cache, and deploy patches from the IBM® Endpoint Manager console.

If you already registered the plug-in, you can use the Manage Download Plug-insdashboard to run the update. You must use the dashboard also to unregister andconfigure the download plug-in. For more information about the dashboard, seethe succeeding topics.

Note: If you install the download plug-in on relays, it is suggested that you alsoinstall it on the server.

Manage Download Plug-ins dashboardUse the Manage Download Plug-ins dashboard to oversee and manage downloadplug-ins in your deployment.

You can use the Manage Download Plug-ins dashboard to register, unregister,configure, and upgrade the download plug-ins for different patch vendors. Formore information about these features, see the succeeding topics.

You must subscribe to the Patching Support site to gain access to this dashboard.To view the Manage Download Plug-ins dashboard, go to Patch Managementdomain > All Patch Management > Dashboards > Manage Download Plug-ins.

© Copyright IBM Corp. 2003, 2013 3

Page 10: Patch Management for SUSE Linux Enterprise User's Guide

The dashboard displays all the servers and windows-only relays in yourdeployment. You can select a server or relay to view all the plug-ins for thatcomputer. The dashboard shows you also the version and status for each plug-inin one consolidated view.

Figure 1. Patch Management navigation tree

4 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 11: Patch Management for SUSE Linux Enterprise User's Guide

A plug-in can be in one of the following states:v Not Installedv New Version Availablev Up-To-Datev Not Supported

Note: CentOS and SUSE Linux download plug-ins are not supported in relays.

The dashboard is equipped with a live keyword search capability. You can searchbased on the naming convention of the servers, relays, and plug-ins.

Registering the SUSE download plug-inUse the Manage Download Plug-ins dashboard to register the download plug-infor SUSE Linux.

Note: SUSE Linux download plug-ins are not supported in relays.

You must complete the following tasks:v Subscribe to the Patching Support site to gain access to the Manage Download

Plug-ins dashboard.v Enable the Encryption for Clients Fixlet on servers and relays for which you

want to register the download plug-in.

Figure 2. Manage Download Plug-ins dashboard

Chapter 2. Setup 5

Page 12: Patch Management for SUSE Linux Enterprise User's Guide

v Activate the Encryption Analysis for Clients analysis and Download Plug-inVersions analysis.

When you register the download plug-in on a computer without the plug-in, theplug-in is automatically installed and the configuration file is created.

If a download plug-in is already installed on the computer, the configuration file isoverwritten.1. From the Patch Management domain, click All Patch Management >

Dashboards > Manage Download Plug-ins dashboard.2. From the Servers and Relays table, select the server or relay on which the

download plug-in is to be registered.3. From the Plug-ins table, select SUSE Plug-in.4. Click Register. The Register SUSE Plug-in wizard displays.

Figure 3. Register SUSE download plug-in wizard

6 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 13: Patch Management for SUSE Linux Enterprise User's Guide

5. Enter the Novell credentials that you use to log on to the Novell Support site.

Novell UsernameYour Novell account user name to the Novell Support site. It musthave a valid support identifier to download patches.

Novell PasswordYour Novell account password to the Novell Support site.

Confirm Novell PasswordYour Novell account password for confirmation.

6. Optional: Enter the mirror parameters if you want the plug-in to downloadfrom a mirror server.

Mirror URLThe URL of your mirror server. It must be a well-formed URL, whichcontains a protocol and a host name. Leave the field blank to use theNovell mirror servers.

Mirror UsernameYour proxy user name if your mirror server requires authentication. Itis usually in the form of domain\username.

Mirror PasswordYour proxy password if your mirror server requires authentication.

Confirm Mirror PasswordYour mirror password for confirmation.

7. Optional: Enter the proxy parameters if the downloads must go through aproxy server.

Proxy URLThe URL of your proxy server. It must be a well-formed URL, whichcontains a protocol and a host name. The URL is usually the IPaddress or DNS name of your proxy server and its port, which isseparated by a colon. For example: http://192.168.100.10:8080.

Proxy UsernameYour proxy user name if your proxy server requires authentication. Itis usually in the form of domain\username.

Proxy PasswordYour proxy password if your proxy server requires authentication.

Confirm Proxy PasswordYour proxy password for confirmation.

8. Click OK. The Take Action dialog displays.9. Select the target computer.

10. Click OK.

You successfully registered the SUSE download plug-in.

Unregistering the SUSE download plug-inUse the Manage Download Plug-ins dashboard to unregister the download plug-infor SUSE Linux.1. From the Patch Management domain, click All Patch Management >

Dashboards > Manage Download Plug-ins dashboard.2. From the Servers and Relays table, select the server or relay on which the

download plug-in is to be unregistered.

Chapter 2. Setup 7

Page 14: Patch Management for SUSE Linux Enterprise User's Guide

3. From the Plug-ins table, select SUSE Plug-in.4. Click Unregister.

The Take Action dialog displays.5. Select the target computer.6. Click OK.

You successfully unregistered the SUSE download plug-in.

Configuring the SUSE download plug-inUse the Manage Download Plug-ins dashboard to configure the download plug-infor SUSE.

You might want to take note of your existing configuration for the downloadplug-in. Existing configurations are overwritten when you configure the downloadplug-in.1. From the Patch Management domain, click All Patch Management >

Dashboards > Manage Download Plug-ins dashboard.2. From the Servers and Relays table, select the server or relay on which the

download plug-in is to be configured.3. From the Plug-ins table, select SUSE Plug-in.4. Click Configure. The Configure SUSE Plug-in wizard displays.

Figure 4. Unregister the SUSE download plug-in

8 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 15: Patch Management for SUSE Linux Enterprise User's Guide

5. Enter the Novell credentials that you use to log on to the Novell Support site.

Novell UsernameYour Novell account user name to the Novell Support site. It musthave a valid support identifier to download patches.

Novell PasswordYour Novell account password to the Novell Support site.

Confirm Novell PasswordYour Novell account password for confirmation.

6. Optional: Enter the mirror parameters if you want the plug-in to downloadfrom a mirror server.

Mirror URLThe URL of your mirror server. It must be a well-formed URL, whichcontains a protocol and a host name. Leave the field blank to use theNovell mirror servers.

Figure 5. Configure SUSE download plug-in wizard

Chapter 2. Setup 9

Page 16: Patch Management for SUSE Linux Enterprise User's Guide

Mirror UsernameYour proxy user name if your mirror server requires authentication. Itis usually in the form of domain\username.

Mirror PasswordYour proxy password if your mirror server requires authentication.

Confirm Mirror PasswordYour mirror password for confirmation.

7. Optional: Enter the proxy parameters if the downloads must go through aproxy server.

Proxy URLThe URL of your proxy server. It must be a well-formed URL, whichcontains a protocol and a host name. The URL is usually the IPaddress or DNS name of your proxy server and its port, which isseparated by a colon. For example: http://192.168.100.10:8080.

Proxy UsernameYour proxy user name if your proxy server requires authentication. Itis usually in the form of domain\username.

Proxy PasswordYour proxy password if your proxy server requires authentication.

Confirm Proxy PasswordYour proxy password for confirmation.

8. Click OK. The Take Action dialog displays.9. Select the target computer.

10. Click OK.

You successfully configured the SUSE download plug-in.

Migrating the SUSE download plug-inYou must migrate the SUSE Linux download plug-in if the plug-in version isearlier than 2.0.0.0. You only need to do this once. The download plug-in isupgraded to the latest version after migration.

You might want to take note of your existing configuration for the downloadplug-in. Existing configurations are overwritten when you migrate the downloadplug-in.1. From the Patch Management domain, click All Patch Management >

Dashboards > Manage Download Plug-ins dashboard.2. From the Servers and Relays table, select the server or relay on which the

download plug-in is to be migrated.3. From the Plug-ins table, select SUSE Plug-in.4. Click Migrate. The Migrate SUSE Plug-in wizard displays.

10 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 17: Patch Management for SUSE Linux Enterprise User's Guide

5. Enter the Novell credentials that you use to log on to the Novell Support site.

Novell UsernameYour Novell account user name to the Novell Support site. It musthave a valid support identifier to download patches.

Novell PasswordYour Novell account password to the Novell Support site.

Confirm Novell PasswordYour Novell account password for confirmation.

6. Optional: Enter the mirror parameters if you want the plug-in to downloadfrom a mirror server.

Figure 6. Migrate SUSE download plug-in wizard

Chapter 2. Setup 11

Page 18: Patch Management for SUSE Linux Enterprise User's Guide

Mirror URLThe URL of your mirror server. It must be a well-formed URL, whichcontains a protocol and a host name. Leave the field blank to use theNovell mirror servers.

Mirror UsernameYour proxy user name if your mirror server requires authentication. Itis usually in the form of domain\username.

Mirror PasswordYour proxy password if your mirror server requires authentication.

Confirm Mirror PasswordYour mirror password for confirmation.

7. Optional: Enter the proxy parameters if the downloads must go through aproxy server.

Proxy URLThe URL of your proxy server. It must be a well-formed URL, whichcontains a protocol and a host name. The URL is usually the IPaddress or DNS name of your proxy server and its port, which isseparated by a colon. For example: http://192.168.100.10:8080.

Proxy UsernameYour proxy user name if your proxy server requires authentication. Itis usually in the form of domain\username.

Proxy PasswordYour proxy password if your proxy server requires authentication.

Confirm Proxy PasswordYour proxy password for confirmation.

8. Click OK. The Take Action dialog displays.9. Select the target computer on which the download plug-in is to be upgraded.

10. Click OK.

You successfully migrated and upgraded the SUSE download plug-in.

Upgrading the SUSE download plug-inUse the Manage Download Plug-ins dashboard to upgrade the download plug-infor SUSE Linux.1. From the Patch Management domain, click All Patch Management >

Dashboards > Manage Download Plug-ins dashboard.2. From the Servers and Relays table, select the server or relay on which the

download plug-in is to be upgraded.3. From the Plug-ins table, select SUSE Plug-in.4. Click Upgrade. The Take Action dialog displays.5. Select the target computer.6. Click OK.

You now have the latest version of the SUSE download plug-in installed.

12 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 19: Patch Management for SUSE Linux Enterprise User's Guide

Chapter 3. Patch using Fixlets

You can apply SUSE Linux patches to your deployment by using the Fixlets on theLinux RPM Patching and Patches for SLE sites.

To deploy patches, navigate to the patch content using the domain nodes.

After you select an appropriate node, you can see Fixlets in the Work Area. Selectthe Fixlet® that you want to apply, click "Take action", and start the deploymentprocess.

Figure 7. Patch Management navigation tree

© Copyright IBM Corp. 2003, 2013 13

Page 20: Patch Management for SUSE Linux Enterprise User's Guide

If the action is successful, the results are written in a log file on the endpoint. Youcan activate an analysis to view the results. You can navigate to the analysis byclicking the Analyses node and selecting "Endpoint Dependency Resolution -Deployment Results".

Figure 8. Take action to start deployment process

14 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 21: Patch Management for SUSE Linux Enterprise User's Guide

From there, click Activate.

Click the Results tab in the Analysis window that is displayed after you activatethe analysis.

Figure 9. Analyses in the navigation tree

Figure 10. List of analyses

Chapter 3. Patch using Fixlets 15

Page 22: Patch Management for SUSE Linux Enterprise User's Guide

When you review the properties of an endpoint, you can view the currentdeployment information on that system. To view this data, navigate on the AllContent domain and select the Computers node. Select the computer that youwant to inspect in the work area. Scroll down to the Deployment Results.

You can limit the length of the output by running the Endpoint DependencyResolution – Set deployment results analysis report length task. To access this task, clickOS Vendors from the navigation tree, and then click the SUSE Linux Enterpriseand Configuration subnodes.

The default analysis report length is 100 entries.

When running a SUSE Linux Enterprise patch Fixlet, you can also deploy a testrun prior to applying the patch. You can view the Deployment Results analysis todetermine if the dependencies have been successfully resolved and if aninstallation is successful.

Note: This action reports back as fixed, even if the test fails.

Figure 11. Results tab

Figure 12. Endpoint Dependency Resolution - Deployment Results

16 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 23: Patch Management for SUSE Linux Enterprise User's Guide

Kernel updates provide the option to upgrade or install all kernel packages. Theupgrade option replaces existing kernel packages with later versions. The installoption installs the later kernel packages next to the previous versions. The defaultbehavior for kernel updates is to install packages side by side. Additionally, eachkernel update Fixlet provides the ability to test each of these options.

To view the Novell bulletin for a particular Fixlet, select the Click here to view thepatch page action to view the patch page.

Figure 13. Take action to deploy a test

Chapter 3. Patch using Fixlets 17

Page 24: Patch Management for SUSE Linux Enterprise User's Guide

Manage Preference ListsPreference lists are lists of packages that affect the dependencies that are installedfor systems patched by content with endpoint dependency resolution.

Preference lists have the following characteristics:v Packages included in forbidden preference lists are forbidden when dependencies

are resolved.v Packages included in preferred preference lists are preferred over packages not in

the list when dependencies are resolved.v Packages included higher in the preference lists are preferred over packages

lower in the lists. You can manage these preference lists by using the PreferenceLists Dashboard.

Using the Preference Lists DashboardUse the Preference List Dashboard to create preference lists.

You can navigate to the dashboard by expanding the Linux RPM Patching nodeand selecting the Endpoint Dependency Resolution - Preference Lists dashboard.

Figure 14. Take action to view patch page

18 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 25: Patch Management for SUSE Linux Enterprise User's Guide

To create new Forbidden package lists, click New Forbidden Package List.

In the next dialog, you select a site for the preference lists. Endpoints subscribed tothis site are relevant to this preference list. Choose a site and click next.

Figure 15. Endpoint Dependency Resolution - Preference Lists dashboard in the navigationtree

Figure 16. New Forbidden Package List

Chapter 3. Patch using Fixlets 19

Page 26: Patch Management for SUSE Linux Enterprise User's Guide

After entering a name for the list, you can begin populating your preference listwith packages. Type the name in the Package to Add field and click Add. As youtype, autocomplete suggestions are shown. These suggestions are populated usingtarget packages from the selected site. After completing your list, click Save, clickOK, and enter your Private Key Password. A task that deploys this preference listis displayed in the navigation tree.

To edit a preference list, click edit for that particular list.

Figure 17. Create new Forbidden Package List

Figure 18. Add package

20 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 27: Patch Management for SUSE Linux Enterprise User's Guide

This opens the same dialog as before and allows you to edit the name andpackages in the list. Click Save. To edit the task, click Edit. To redeploy the latestversion of this list to all systems that already have the list, click Edit and Redeploy.Then click OK and enter your Private Key Password.

To create a copy of a preference list, click copy for that particular list.

A dialog is created with a nearly identical set of data populated throughout thefields. The Name field has the word copy at the end. Click Save to create the newtask. To delete a preference list, click delete for that particular list.

Figure 19. Edit button

Figure 20. Edit dialog

Figure 21. Copy button

Chapter 3. Patch using Fixlets 21

Page 28: Patch Management for SUSE Linux Enterprise User's Guide

To delete the task, click Delete. To delete the task and issue an action to remove thepreference list from all endpoints that have the list, click Delete and Update.

Preferred package lists can be created and managed in the same way as forbiddenpackages lists. The controls are listed under the Preferred Package Lists tab of thePreference Lists Dashboard.

Packages are ordered from top to bottom in preference lists. Drag and droppackages to specify priority.

Figure 22. Delete button

Figure 23. Delete dialog

Figure 24. Preferred Package Lists tab

22 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 29: Patch Management for SUSE Linux Enterprise User's Guide

You can view deployed preference lists and their associated metadata by activatingan analysis. Navigate to the analysis by clicking the Analyses node and selectingEndpoint Dependency Resolution - Preference Lists. Click the analysis and selectActivate from the right-click menu.

Click the Results tab in the Analysis window that is displayed after you activatethe analysis.

Figure 25. Sort priority

Figure 26. List of analyses

Chapter 3. Patch using Fixlets 23

Page 30: Patch Management for SUSE Linux Enterprise User's Guide

When you review an endpoint's properties, you can view the current preferencelist information on that system.

To remove a preference list from an endpoint, run either the Remove EndpointDependency Resolution – Remove preferred list or the Remove Endpoint DependencyResolution – Remove forbidden list tasks.

Figure 27. Results tab

Figure 28. Available Fixlets to remove a preference list

24 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 31: Patch Management for SUSE Linux Enterprise User's Guide

Appendix A. Support

For more information about this product, see the following resources:v IBM Endpoint Manager Support sitev IBM Endpoint Manager wikiv Knowledge Basev Forums and Communities

© Copyright IBM Corp. 2003, 2013 25

Page 32: Patch Management for SUSE Linux Enterprise User's Guide

26 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 33: Patch Management for SUSE Linux Enterprise User's Guide

Appendix B. Frequently asked questions

To better understand Patch Management for SUSE Linux Enterprise, read thefollowing questions and answers.

What are superseded patches?

Superseded Fixlets are Fixlets that contain outdated packages. If a Fixlet issuperseded, then a newer Fixlet exists with newer versions of the packages. Thenewer Fixlet ID can be found in the description of the superseded Fixlet.

How do I deal with missing patches?

IBM only provides patches for bulletins listed on Novell’s website for supportedconfigurations. These bulletins can be found in Novell’s Patch Finder:

Patch Finder

Where are the deployment logs located on endpoints?

The logs are located in a folder called EDRDeployData in the client folder.(/var/opt/BESClient/EDRDeployData).

Why is my action reporting back as a failed download?

Make sure your download plug-in has been updated to the latest version and isregistered with the correct credentials.

If I have registered the latest plug-ins, why do downloads still fail?

For Tivoli Endpoint Management version 8.0.627, upgrade to the latest version ofEndpoint Manager to resolve the issue on dynamic downloads whitelist.

For Tivoli Endpoint Management versions later than 8.0.627, verify your existingdownload plug-in configuration. Verify that the Novell credentials, proxy settings,and mirror server settings are valid.

What do I do when action reports back with an “EDR Plugin failure, Invalid setof initially installed packages ? ”

There is at least one conflict between the packages that exist on the system. Theresolver will not work until the conflicting packages are removed.

Why is there XML in the deployment results?

The XML is from the error output of the resolver when the resolver fails toproduce a solution. You can look at the description in the “errorType” tag to gain abetter understanding of why the failure occurred.

What do I do when the deployment results display a “Dependency ResolverFailure, noSolution ? ”

© Copyright IBM Corp. 2003, 2013 27

Page 34: Patch Management for SUSE Linux Enterprise User's Guide

If the resolver finds that there is no solution, the system cannot install all targetsand dependencies because of a conflict between these files and the endpoint files.

How often are new dependency graphs generated?

Dependency graphs are generated every Monday, Wednesday, and Friday.

What do I do when an action reports back with an installation failure?

Check to see if the conflict is caused by a vendor-acquired package. These must beremoved for the installation to occur.

Why does the resolver function select a lower priority package over a higherpriority one?

The resolver will not select a preferred package if selecting that package creates aconflict with another package. Therefore, it is possible for a lower priority packageto be selected.

How do I verify if the download plug-in was registered correctly?

Run a Fixlet with an action task to verify if the download plug-in is registeredcorrectly. Verify that the patch download is successful. Otherwise, you might needto unregister the download plug-in and register it again.

How do I register a download plug-in? Do I use the register download plug-intask or the Manage Download Plug-in dashboard?

To register a download plug-in, you must use the Manage Download Plug-indashboard in the Patching Support site. Existing register download plug-in tasksare being deprecated. To learn more about plug-in registration, see “Registering theSUSE download plug-in” on page 5.

Note: You must also use the Manage Download Plug-in dashboard to unregister,configure, and upgrade download plug-ins. The existing unregister and editdownload plug-in tasks are being deprecated. For more information about thedashboard, see the topic on Manage Download Plug-ins dashboard in the IBMEndpoint Manager Information Center.

I was expecting the password to be obfuscated, but it's still in clear text. Why isthat?

Check if your download plug-in version is earlier than 2.0. If so, you are still usingan old version of the download plug-in that stores credentials in clear text. Toencrypt credentials, upgrade your download plug-in to version 2.0 or later fromthe Manage Download plug-ins dashboard in the Patching Support site.

28 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 35: Patch Management for SUSE Linux Enterprise User's Guide

Notices

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this document inother countries. Consult your local IBM representative for information on theproducts and services currently available in your area. Any reference to an IBMproduct, program, or service is not intended to state or imply that only that IBMproduct, program, or service may be used. Any functionally equivalent product,program, or service that does not infringe any IBM intellectual property right maybe used instead. However, it is the user's responsibility to evaluate and verify theoperation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matterdescribed in this document. The furnishing of this document does not grant youany license to these patents. You can send license inquiries, in writing, to:

IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.

For license inquiries regarding double-byte character set (DBCS) information,contact the IBM Intellectual Property Department in your country or sendinquiries, in writing, to:

Intellectual Property LicensingLegal and Intellectual Property LawIBM Japan Ltd.19-21, Nihonbashi-Hakozakicho, Chuo-kuTokyo 103-8510, Japan

The following paragraph does not apply to the United Kingdom or any othercountry where such provisions are inconsistent with local law:

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THISPUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHEREXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIEDWARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESSFOR A PARTICULAR PURPOSE.

Some states do not allow disclaimer of express or implied warranties in certaintransactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors.Changes are periodically made to the information herein; these changes will beincorporated in new editions of the publication. IBM may make improvementsand/or changes in the product(s) and/or the program(s) described in thispublication at any time without notice.

Any references in this information to non-IBM Web sites are provided forconvenience only and do not in any manner serve as an endorsement of those Web

© Copyright IBM Corp. 2003, 2013 29

Page 36: Patch Management for SUSE Linux Enterprise User's Guide

sites. The materials at those Web sites are not part of the materials for this IBMproduct and use of those Web sites is at your own risk.

IBM may use or distribute any of the information you supply in any way itbelieves appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purposeof enabling: (i) the exchange of information between independently createdprograms and other programs (including this one) and (ii) the mutual use of theinformation which has been exchanged, should contact:

IBM Corporation2Z4A/10111400 Burnet RoadAustin, TX 78758 U.S.A.

Such information may be available, subject to appropriate terms and conditions,including in some cases, payment of a fee.

The licensed program described in this document and all licensed materialavailable for it are provided by IBM under terms of the IBM Customer Agreement,IBM International Program License Agreement or any equivalent agreementbetween us.

Any performance data contained herein was determined in a controlledenvironment. Therefore, the results obtained in other operating environments mayvary significantly. Some measurements may have been made on development-levelsystems and there is no guarantee that these measurements will be the same ongenerally available systems. Furthermore, some measurements may have beenestimated through extrapolation. Actual results may vary. Users of this documentshould verify the applicable data for their specific environment.

Information concerning non-IBM products was obtained from the suppliers ofthose products, their published announcements or other publicly available sources.IBM has not tested those products and cannot confirm the accuracy ofperformance, compatibility or any other claims related to non-IBM products.Questions on the capabilities of non-IBM products should be addressed to thesuppliers of those products.

All statements regarding IBM's future direction or intent are subject to change orwithdrawal without notice, and represent goals and objectives only.

All IBM prices shown are IBM's suggested retail prices, are current and are subjectto change without notice. Dealer prices may vary.

This information is for planning purposes only. The information herein is subject tochange before the products described become available.

This information contains examples of data and reports used in daily businessoperations. To illustrate them as completely as possible, the examples include thenames of individuals, companies, brands, and products. All of these names arefictitious and any similarity to the names and addresses used by an actual businessenterprise is entirely coincidental.

COPYRIGHT LICENSE:

30 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 37: Patch Management for SUSE Linux Enterprise User's Guide

This information contains sample application programs in source language, whichillustrate programming techniques on various operating platforms. You may copy,modify, and distribute these sample programs in any form without payment toIBM, for the purposes of developing, using, marketing or distributing applicationprograms conforming to the application programming interface for the operatingplatform for which the sample programs are written. These examples have notbeen thoroughly tested under all conditions. IBM, therefore, cannot guarantee orimply reliability, serviceability, or function of these programs. The sampleprograms are provided "AS IS", without warranty of any kind. IBM shall not beliable for any damages arising out of your use of the sample programs.

If you are viewing this information softcopy, the photographs and colorillustrations may not appear.

Trademarks

IBM, the IBM logo, and ibm.com are trademarks or registered trademarks ofInternational Business Machines Corp., registered in many jurisdictions worldwide.Other product and service names might be trademarks of IBM or other companies.A current list of IBM trademarks is available on the “Web at Copyright andtrademark information” at www.ibm.com/legal/copytrade.shtml.

Adobe, Acrobat, PostScript and all Adobe-based trademarks are either registeredtrademarks or trademarks of Adobe Systems Incorporated in the United States,other countries, or both.

IT Infrastructure Library is a registered trademark of the Central Computer andTelecommunications Agency which is now part of the Office of GovernmentCommerce.

Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo,Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks orregistered trademarks of Intel Corporation or its subsidiaries in the United Statesand other countries.

Linux is a trademark of Linus Torvalds in the United States, other countries, orboth.

Microsoft, Windows, Windows NT, and the Windows logo are trademarks ofMicrosoft Corporation in the United States, other countries, or both.

ITIL is a registered trademark, and a registered community trademark of the Officeof Government Commerce, and is registered in the U.S. Patent and TrademarkOffice.

UNIX is a registered trademark of The Open Group in the United States and othercountries.

Java™ and all Java-based trademarks and logos are trademarks or registeredtrademarks of Oracle and/or its affiliates.

Cell Broadband Engine is a trademark of Sony Computer Entertainment, Inc. in theUnited States, other countries, or both and is used under license therefrom.

Linear Tape-Open, LTO, the LTO Logo, Ultrium, and the Ultrium logo aretrademarks of HP, IBM Corp. and Quantum in the U.S. and other countries.

Notices 31

Page 38: Patch Management for SUSE Linux Enterprise User's Guide

32 IBM Endpoint Manager: Patch Management for SUSE Linux Enterprise User's Guide

Page 39: Patch Management for SUSE Linux Enterprise User's Guide
Page 40: Patch Management for SUSE Linux Enterprise User's Guide

����

Product Number: 5725-C45

Printed in USA