Copyright © PatchLink ® 2003 All Rights Reserved Server Installation
Copyright © PatchLink ® 2003 All Rights Reserved Windows 2000 Ready PC w/ 5 GB free disk Install in a physically secure location Microsoft Windows 2000 server or workstation OS Internet Information Server must be configured OPTIONAL: a valid and trusted web server certificate Microsoft Windows 2000 Service Pack 2 or 3 Internet Connectivity via 56K or better link Installation Requirements
Copyright © PatchLink ® 2003 All Rights Reserved Fresh Installation of Windows SP2 Nothing else on there Not in the domain NEVER use a PDC !!! Ensure IIS Web Server running Install if necessary Know the DNS name of the machine Port 443 must be open to Keys To A Smooth Installation
Copyright © PatchLink ® 2003 All Rights Reserved Logging as Local Administrator Web Server Status Required Service Pack No Lock Down IP Stack Configuration Browsing PatchLink Website Pre-Flight Check List
Copyright © PatchLink ® 2003 All Rights Reserved Server Software Agent Software Product serial number Server Software Install
Copyright © PatchLink ® 2003 All Rights Reserved Validate serial number Validate connectivity to Install Server files Install Update Agent on the Server Install MDAC 2.6 Install Microsoft SQL Server (MSDE) Load, configure & update the PLUS db Make local users and groups Stop the current default website Create the PLUS website w/ SSL Set up proxy settings (PROXYCFG) Set NTFS permissions on web directories Create the initial licenses Launch SQL Server, SQL Server Agent Start the SQL replication process jobs What Install Actually Does…
Copyright © PatchLink ® 2003 All Rights Reserved Click Next to begin the Installation
Copyright © PatchLink ® 2003 All Rights Reserved Check installation requirements, and then click next.
Copyright © PatchLink ® 2003 All Rights Reserved Check yes to accept the license agreement.
Copyright © PatchLink ® 2003 All Rights Reserved Enter your license information, then click next
Copyright © PatchLink ® 2003 All Rights Reserved Click Brose to select your installation directory. Once done, click next
Copyright © PatchLink ® 2003 All Rights Reserved Fill in notification information, then click next
Copyright © PatchLink ® 2003 All Rights Reserved Enter your complex PatchLink admin password **********
Copyright © PatchLink ® 2003 All Rights Reserved If your network uses a proxy server for internet access, enter it here Once done, click next
Copyright © PatchLink ® 2003 All Rights Reserved Enter DNS name agents will register against, then click next.
Copyright © PatchLink ® 2003 All Rights Reserved Check this box to require SSL authentication and encryption and click next
Copyright © PatchLink ® 2003 All Rights Reserved Check your settings, then click next.
Copyright © PatchLink ® 2003 All Rights Reserved
You must reboot the PLUS server, click finish.
Copyright © PatchLink ® 2003 All Rights Reserved DO NOT ABORT! The PLUS server is registering with the subscription service.
Copyright © PatchLink ® 2003 All Rights Reserved SQL Upgrade SSL & Web Certificate Isolated Network Post Installation Options
Copyright © PatchLink ® 2003 All Rights Reserved Agent Installation
Copyright © PatchLink ® 2003 All Rights Reserved Testing Recovery Plan Other Pre Win2K windows may require reboot Considerations
Copyright © PatchLink ® 2003 All Rights Reserved Manual Domain Wide Login Script (Silent) Imaging Other 3 rd party software rollout Windows
Copyright © PatchLink ® 2003 All Rights Reserved Single Agent Installation
Copyright © PatchLink ® 2003 All Rights Reserved Select the Single Agent Installer
Copyright © PatchLink ® 2003 All Rights Reserved Click next
Copyright © PatchLink ® 2003 All Rights Reserved Click next
Copyright © PatchLink ® 2003 All Rights Reserved Enter the DNS name or IP address of the PLUS server Click next
Copyright © PatchLink ® 2003 All Rights Reserved Click here to begin installation
Copyright © PatchLink ® 2003 All Rights Reserved Domain Wide Wizard Installation
Copyright © PatchLink ® 2003 All Rights Reserved
Enter PLUS server and serial number Select domain wide install Check to verify access to the PDC
Copyright © PatchLink ® 2003 All Rights Reserved Check to enumerate all computers or specify by name, then click next
Copyright © PatchLink ® 2003 All Rights Reserved Click next Select the computers to deploy
Copyright © PatchLink ® 2003 All Rights Reserved Confirm the domain and click next
Copyright © PatchLink ® 2003 All Rights Reserved
Click finish to complete the installation
Copyright © PatchLink ® 2003 All Rights Reserved
Rollout Log
Copyright © PatchLink ® 2003 All Rights Reserved Check JRE version Manual Imaging Other 3 rd party software rollout UNIX/Linux
Copyright © PatchLink ® 2003 All Rights Reserved UNIX Download tar file from the PLUS Server Run installPatchLink in silent mode: -d -d -p -p -sno -sno [-proxy -port ] [-svc ] Use Secure Shell (ssh,scp) to distribute Example:./installPatchLink -silent -d /usr/local -p -sno A17CDA4D svc y
Copyright © PatchLink ® 2003 All Rights Reserved UNIX Details No reboot required uninstallPatchLink kills the agent at the time of uninstallation. /etc/init.d/patchlink script start, stop, restart and status patchlinkservice is a symbolic link to /etc/init.d/patchlink Platform specific issues: RedHat agent now also starts in runlevel 5 Java: SUN, GNU on Linux Sun: S99PatchLinkAgent file is now symbolic link to /etc/init.d/patchlink
Copyright © PatchLink ® 2003 All Rights Reserved UNIX UI Command line Interface Located in /usr/local/patchlink/ patchlinkservice -[start|stop|restart|status] ================================================================== | Welcome to UpdateAgent | | | | Update Agent Version | | Vendor: Patchlink.com | | Functionality: Automatic software and patch distribution | | | ================================================================== Please input the PLUS Host Site default: If you don't want to modify it, just press RETURN Input: Please enter the product serial number that appears as XXXXXXXX-XXXXXXXX The response is case sensitive. If you don't have it, please contact PatchLink OR (Option 2) Please input the serial number: XXXXXXXX-XXXXXXXX Continue?[Y|n]: If your site uses a proxy, please configure it Do you have proxy?[y|N]:
Copyright © PatchLink ® 2003 All Rights Reserved NetWare Agent Installation
Copyright © PatchLink ® 2003 All Rights Reserved Click to next begin the installation
Copyright © PatchLink ® 2003 All Rights Reserved Enter the PLUS server name and serial number the click next
Copyright © PatchLink ® 2003 All Rights Reserved Enter the eDirectory authentication information then click next
Copyright © PatchLink ® 2003 All Rights Reserved Select the servers then click next
Copyright © PatchLink ® 2003 All Rights Reserved Click begin to start the installation
Copyright © PatchLink ® 2003 All Rights Reserved Validation Subscription Check Test Package Rollout Deploy the latest PatchLink Update hot fixes
Copyright © PatchLink ® 2003 All Rights Reserved Ensure the subscription is updating
Copyright © PatchLink ® 2003 All Rights Reserved Hardening the System Deploy the Critical Patches Optional –Adding a Host IDS –Deleting Guest User –Changing Administrator User –Complex Password Policy –Restrictions of IP Address Configuration
Copyright © PatchLink ® 2003 All Rights Reserved Managing by Groups Using Groups Importance of system group You can delete but – BEWARE Creating Custom groups Using groups to mirror business process
Copyright © PatchLink ® 2003 All Rights Reserved Feature
Copyright © PatchLink ® 2003 All Rights Reserved To create a new Group click the “Add” button
Copyright © PatchLink ® 2003 All Rights Reserved Enter the name, description, policy and notification information and click “OK”
Copyright © PatchLink ® 2003 All Rights Reserved Select members from the OS lists and the click “Assign”
Copyright © PatchLink ® 2003 All Rights Reserved
Communication Interval Default 5 minutes Maximum of 60 minutes –Can go to longer interval –Lose precision in deployment time Hours of Operation During scheduled downtime –As per your configuration management policies OR –Over lunch for workstations –At night for servers –Etc Other Options
Copyright © PatchLink ® 2003 All Rights Reserved Create Users s Scheduling Replications Other Options (continued)
Copyright © PatchLink ® 2003 All Rights Reserved Disable Windows File & Print Sharing Disable Ports in TCP/IP NIC properties Disallow all UDP traffic Port 443 TCP (out) Port 443 TCP (in) – or 80 if not using SSL cert Add HOSTS entry for Make sure external DNS still resolves server… -OR- Use a firewall to block everything but TCP 443/80 Lockdown PLUS Server
Copyright © PatchLink ® 2003 All Rights Reserved Implementation
Copyright © PatchLink ® 2003 All Rights Reserved Achieve Initial Patch Level Determine the Required Patches Testing the Required Patches Deploying the Required Patches –Manual Deployment Process –Service Pack before Hot Fix Patch Management
Copyright © PatchLink ® 2003 All Rights Reserved Maintaining the Patch Level Updating with New Patches Notification Testing Deploying –Limited Production –Full Production Adding to the Baseline
Copyright © PatchLink ® 2003 All Rights Reserved Caching Manual Rollout from Reports Screen Concerns for Rollout from Package Screen Mandatory Baseline Rollout from groups (more on this subject later) Rolling Out Patches
Copyright © PatchLink ® 2003 All Rights Reserved
Tracking the Rollout Click here to track roll out
Copyright © PatchLink ® 2003 All Rights Reserved
Aborting the Rollout Select the deployment in question and push the Abort button
Copyright © PatchLink ® 2003 All Rights Reserved Uninstalling a patch Select the Patched computers Push the Deploy button Follow deploy wizard as usual Check the UNINSTALL checkbox Controlling the reboot Closing all windows before install Setting Appropriate Rollout Flags
Copyright © PatchLink ® 2003 All Rights Reserved Export to CSV Crystal Management Reports
Copyright © PatchLink ® 2003 All Rights Reserved
Inventory View
Copyright © PatchLink ® 2003 All Rights Reserved
Software Distribution: Custom Packages
Copyright © PatchLink ® 2003 All Rights Reserved Click the Add button
Copyright © PatchLink ® 2003 All Rights Reserved Enter the package name and description, the click next
Copyright © PatchLink ® 2003 All Rights Reserved Select the appropriate operating systems and click next
Copyright © PatchLink ® 2003 All Rights Reserved Drag and drop the files to be deployed into the right- hand pane, then click next
Copyright © PatchLink ® 2003 All Rights Reserved Enter a command line or script to execute, then click next
Copyright © PatchLink ® 2003 All Rights Reserved
PatchLink Update hot fixes Deploying the Latest Patches Deploying agent to new Computers Checking Replication History Checking the reports page Off-line Computers Maintenance
Copyright © PatchLink ® 2003 All Rights Reserved Notifications Database Backup Recovery strategy Reallocating Licenses Maintenance (continued)
Copyright © PatchLink ® 2003 All Rights Reserved Asynchronous Behavior Level of Client Error Logging Forum Top Known Issues FAQ Troubleshooting
Copyright © PatchLink ® 2003 All Rights Reserved Preparation Contacting Web Conferencing Premium Support Tech Support