1. Copyright © PatchLink ® 2003 All Rights Reserved Server Installation

2. Copyright © PatchLink ® 2003 All Rights Reserved  Windows 2000 Ready PC w/ 5 GB free disk  Install in a physically secure location  Microsoft Windows 2000 server or workstation OS  Internet Information Server must be configured  OPTIONAL: a valid and trusted web server certificate  Microsoft Windows 2000 Service Pack 2 or 3  Internet Connectivity via 56K or better link Installation Requirements

3. Copyright © PatchLink ® 2003 All Rights Reserved  Fresh Installation of Windows2000 + SP2  Nothing else on there  Not in the domain  NEVER use a PDC !!!  Ensure IIS Web Server running  Install if necessary  Know the DNS name of the machine  Port 443 must be open to www.patchlink.com Keys To A Smooth Installation

4. Copyright © PatchLink ® 2003 All Rights Reserved  Logging as Local Administrator  Web Server Status  Required Service Pack  No Lock Down  IP Stack Configuration  Browsing PatchLink Website Pre-Flight Check List

5. Copyright © PatchLink ® 2003 All Rights Reserved  Server Software  Agent Software  Product serial number Server Software Install

6. Copyright © PatchLink ® 2003 All Rights Reserved  Validate serial number  Validate connectivity to www.patchlink.com  Install Server files  Install Update Agent on the Server  Install MDAC 2.6  Install Microsoft SQL Server (MSDE)  Load, configure & update the PLUS db  Make local users and groups  Stop the current default website  Create the PLUS website w/ SSL  Set up proxy settings (PROXYCFG)  Set NTFS permissions on web directories  Create the initial licenses  Launch SQL Server, SQL Server Agent  Start the SQL replication process jobs What Install Actually Does…

7. Copyright © PatchLink ® 2003 All Rights Reserved Click Next to begin the Installation

8. Copyright © PatchLink ® 2003 All Rights Reserved Check installation requirements, and then click next.

9. Copyright © PatchLink ® 2003 All Rights Reserved Check yes to accept the license agreement.

10. Copyright © PatchLink ® 2003 All Rights Reserved Enter your license information, then click next

11. Copyright © PatchLink ® 2003 All Rights Reserved Click Brose to select your installation directory. Once done, click next

12. Copyright © PatchLink ® 2003 All Rights Reserved Fill in email notification information, then click next

13. Copyright © PatchLink ® 2003 All Rights Reserved Enter your complex PatchLink admin password **********

14. Copyright © PatchLink ® 2003 All Rights Reserved If your network uses a proxy server for internet access, enter it here Once done, click next

15. Copyright © PatchLink ® 2003 All Rights Reserved Enter DNS name agents will register against, then click next.

16. Copyright © PatchLink ® 2003 All Rights Reserved Check this box to require SSL authentication and encryption and click next

17. Copyright © PatchLink ® 2003 All Rights Reserved Check your settings, then click next.

18. Copyright © PatchLink ® 2003 All Rights Reserved

19. You must reboot the PLUS server, click finish.

20. Copyright © PatchLink ® 2003 All Rights Reserved DO NOT ABORT! The PLUS server is registering with the subscription service.

21. Copyright © PatchLink ® 2003 All Rights Reserved  SQL Upgrade  SSL & Web Certificate  Isolated Network Post Installation Options

22. Copyright © PatchLink ® 2003 All Rights Reserved Agent Installation

23. Copyright © PatchLink ® 2003 All Rights Reserved  Testing  Recovery Plan  Other  Pre Win2K windows may require reboot Considerations

24. Copyright © PatchLink ® 2003 All Rights Reserved  Manual  Domain Wide  Login Script (Silent)  Imaging  Other 3 rd party software rollout Windows

25. Copyright © PatchLink ® 2003 All Rights Reserved Single Agent Installation

26. Copyright © PatchLink ® 2003 All Rights Reserved Select the Single Agent Installer

27. Copyright © PatchLink ® 2003 All Rights Reserved Click next

28. Copyright © PatchLink ® 2003 All Rights Reserved Click next

29. Copyright © PatchLink ® 2003 All Rights Reserved Enter the DNS name or IP address of the PLUS server Click next

30. Copyright © PatchLink ® 2003 All Rights Reserved Click here to begin installation

31. Copyright © PatchLink ® 2003 All Rights Reserved Domain Wide Wizard Installation

32. Copyright © PatchLink ® 2003 All Rights Reserved

33. Enter PLUS server and serial number Select domain wide install Check to verify access to the PDC

34. Copyright © PatchLink ® 2003 All Rights Reserved Check to enumerate all computers or specify by name, then click next

35. Copyright © PatchLink ® 2003 All Rights Reserved Click next Select the computers to deploy

36. Copyright © PatchLink ® 2003 All Rights Reserved Confirm the domain and click next

37. Copyright © PatchLink ® 2003 All Rights Reserved

38. Click finish to complete the installation

39. Copyright © PatchLink ® 2003 All Rights Reserved

40. Rollout Log

41. Copyright © PatchLink ® 2003 All Rights Reserved  Check JRE version  Manual  Imaging  Other 3 rd party software rollout UNIX/Linux

42. Copyright © PatchLink ® 2003 All Rights Reserved UNIX  Download tar file from the PLUS Server  Run installPatchLink in silent mode:  -d  -d  -p  -p  -sno  -sno  [-proxy -port ]  [-svc ]  Use Secure Shell (ssh,scp) to distribute Example:./installPatchLink -silent -d /usr/local -p http://206.124.169.55 -sno A17CDA4D-83163167 - svc y

43. Copyright © PatchLink ® 2003 All Rights Reserved UNIX Details  No reboot required  uninstallPatchLink kills the agent at the time of uninstallation.  /etc/init.d/patchlink script start, stop, restart and status  patchlinkservice is a symbolic link to /etc/init.d/patchlink  Platform specific issues:  RedHat agent now also starts in runlevel 5  Java: SUN, GNU on Linux  Sun: S99PatchLinkAgent file is now symbolic link to /etc/init.d/patchlink

44. Copyright © PatchLink ® 2003 All Rights Reserved UNIX UI  Command line Interface  Located in /usr/local/patchlink/  patchlinkservice -[start|stop|restart|status] ================================================================== | Welcome to UpdateAgent | | | | Update Agent Version 0.9019 | | Vendor: Patchlink.com | | Functionality: Automatic software and patch distribution | | | ================================================================== Please input the PLUS Host Site default: http://www.patchlink.com If you don't want to modify it, just press RETURN Input: http://206.124.169.55 Please enter the product serial number that appears as XXXXXXXX-XXXXXXXX The response is case sensitive. If you don't have it, please contact PatchLink support@patchlink.com OR 480-970-1025(Option 2) Please input the serial number: XXXXXXXX-XXXXXXXX Continue?[Y|n]: If your site uses a proxy, please configure it Do you have proxy?[y|N]:

45. Copyright © PatchLink ® 2003 All Rights Reserved NetWare Agent Installation

46. Copyright © PatchLink ® 2003 All Rights Reserved Click to next begin the installation

47. Copyright © PatchLink ® 2003 All Rights Reserved Enter the PLUS server name and serial number the click next

48. Copyright © PatchLink ® 2003 All Rights Reserved Enter the eDirectory authentication information then click next

49. Copyright © PatchLink ® 2003 All Rights Reserved Select the servers then click next

50. Copyright © PatchLink ® 2003 All Rights Reserved Click begin to start the installation

51. Copyright © PatchLink ® 2003 All Rights Reserved Validation  Subscription Check  Test Package Rollout  Deploy the latest PatchLink Update hot fixes

52. Copyright © PatchLink ® 2003 All Rights Reserved Ensure the subscription is updating

53. Copyright © PatchLink ® 2003 All Rights Reserved  Hardening the System  Deploy the Critical Patches  Optional –Adding a Host IDS –Deleting Guest User –Changing Administrator User –Complex Password Policy –Restrictions of IP Address Configuration

54. Copyright © PatchLink ® 2003 All Rights Reserved Managing by Groups  Using Groups  Importance of system group  You can delete but – BEWARE  Creating Custom groups  Using groups to mirror business process

55. Copyright © PatchLink ® 2003 All Rights Reserved Feature

56. Copyright © PatchLink ® 2003 All Rights Reserved To create a new Group click the “Add” button

57. Copyright © PatchLink ® 2003 All Rights Reserved Enter the name, description, policy and e-mail notification information and click “OK”

58. Copyright © PatchLink ® 2003 All Rights Reserved Select members from the OS lists and the click “Assign”

59. Copyright © PatchLink ® 2003 All Rights Reserved

62.  Communication Interval  Default 5 minutes  Maximum of 60 minutes –Can go to longer interval –Lose precision in deployment time  Hours of Operation  During scheduled downtime –As per your configuration management policies OR –Over lunch for workstations –At night for servers –Etc Other Options

63. Copyright © PatchLink ® 2003 All Rights Reserved  Create Users  Emails  Scheduling Replications Other Options (continued)

64. Copyright © PatchLink ® 2003 All Rights Reserved  Disable Windows File & Print Sharing  Disable Ports in TCP/IP NIC properties  Disallow all UDP traffic  Port 443 TCP (out)  Port 443 TCP (in) – or 80 if not using SSL cert  Add HOSTS entry for www.patchlink.com www.patchlink.com  Make sure external DNS still resolves server… -OR-  Use a firewall to block everything but TCP 443/80 Lockdown PLUS Server

65. Copyright © PatchLink ® 2003 All Rights Reserved Implementation

66. Copyright © PatchLink ® 2003 All Rights Reserved  Achieve Initial Patch Level  Determine the Required Patches  Testing the Required Patches  Deploying the Required Patches –Manual Deployment Process –Service Pack before Hot Fix Patch Management

67. Copyright © PatchLink ® 2003 All Rights Reserved Maintaining the Patch Level  Updating with New Patches  Notification  Testing  Deploying –Limited Production –Full Production  Adding to the Baseline

68. Copyright © PatchLink ® 2003 All Rights Reserved  Caching  Manual  Rollout from Reports Screen  Concerns for Rollout from Package Screen  Mandatory Baseline  Rollout from groups (more on this subject later) Rolling Out Patches

69. Copyright © PatchLink ® 2003 All Rights Reserved

71. Tracking the Rollout Click here to track roll out

72. Copyright © PatchLink ® 2003 All Rights Reserved

73. Aborting the Rollout Select the deployment in question and push the Abort button

74. Copyright © PatchLink ® 2003 All Rights Reserved  Uninstalling a patch  Select the Patched computers  Push the Deploy button  Follow deploy wizard as usual  Check the UNINSTALL checkbox  Controlling the reboot  Closing all windows before install Setting Appropriate Rollout Flags

75. Copyright © PatchLink ® 2003 All Rights Reserved  Export to CSV  Crystal Management Reports

76. Copyright © PatchLink ® 2003 All Rights Reserved

77. Inventory View

78. Copyright © PatchLink ® 2003 All Rights Reserved

82. Software Distribution: Custom Packages

83. Copyright © PatchLink ® 2003 All Rights Reserved Click the Add button

84. Copyright © PatchLink ® 2003 All Rights Reserved Enter the package name and description, the click next

85. Copyright © PatchLink ® 2003 All Rights Reserved Select the appropriate operating systems and click next

86. Copyright © PatchLink ® 2003 All Rights Reserved Drag and drop the files to be deployed into the right- hand pane, then click next

87. Copyright © PatchLink ® 2003 All Rights Reserved Enter a command line or script to execute, then click next

88. Copyright © PatchLink ® 2003 All Rights Reserved

89.  PatchLink Update hot fixes  Deploying the Latest Patches  Deploying agent to new Computers  Checking Replication History  Checking the reports page  Off-line Computers Maintenance

90. Copyright © PatchLink ® 2003 All Rights Reserved  Email Notifications  Database Backup  Recovery strategy  Reallocating Licenses Maintenance (continued)

91. Copyright © PatchLink ® 2003 All Rights Reserved  Asynchronous Behavior  Level of Client Error Logging  Forum  Top Known Issues  FAQ Troubleshooting

92. Copyright © PatchLink ® 2003 All Rights Reserved  Preparation  Contacting  Web Conferencing  Premium Support Tech Support