Control-M/EM PANFT.9.0.21.201


BMC Software is releasing Control-M/EM patch PANFT.9.0.21.201 to correct several problems and to support Chinese localization in Control-M Web.

Information
Important

Verify that Control-M/EM 9.0.21.200 is installed before you install this patch.

Corrected Problems

The following table describes the problems that are corrected in Control-M/EM PANFT.9.0.21.201.

Tracking NumberDescription

CTM-9474

An entire folder is ordered, rather than only the jobs (within the folder) that were loaded to the Workspace. This occurs in Control-M Web after you close and reopen the Workspace and then order the Workspace.

Note: The problem is corrected in any new Workspace that you create after installing the patch. For existing Workspaces that were created before installation of this patch, the issue is not yet resolved. We recommend that you create a new Workspace before any manual run (order), and not run old Workspaces.

CTM-9503

Reporting access control is not enforced properly for internal users.

In this bug, CVE-2024-1604 is detected.

CTM-9504

Installation directory access protection is insufficient for files in use by Control-M.

In this bug, CVE-2024-1605 is detected.

CTM-9802

A security vulnerability CVE-2024-1606 is detected in the Report naming functionality.

Enhancements

The following table describes the enhancements that are applied in Control-M/EM PANFT.9.0.21.201.

Tracking NumberDescription
WSI-1982

Control-M Web can now be localized to Simplified and Traditional Chinese. This localization is supported for the following domains:

  • Planning
  • Monitoring
  • Managed File Transfer
  • Tools
  • Alerts

After you install this patch, you can apply Chinese localization support as described in Applying Chinese Localization Support.

Installing Control-M/EM Patch PANFT.9.0.21.201 on UNIX

This procedure describes how to install Control-M/EM patch PANFT.9.0.21.201 on UNIX.

Information
Important

You must install this patch on every host where Control-M/EM server is installed.

Before You Begin

  • Verify that Control-M/EM version 9.0.21.200 is installed. 

Begin

  1. Download the installation package from Control-M/EM 9.0.21 Patches.
  2. Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
  3. Set execution flags for the patch installation file using the following command:
    chmod +x PANFT.9.0.21.201_<platform>_INSTALL.BIN
  4. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  5. Stop all Control-M/EM components by running the stop_all command.
  6. Run the following script from the Control-M/EM Home directory, and follow the on-screen instructions until the installation is complete.
    <temporary directory>/PANFT.9.0.21.201_<platform>_INSTALL.BIN
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  7. Start all Control-M/EM components by running the start_all command.
    In a High Availability configuration, start with the active environment. 

Installing Control-M/EM Patch PANFT.9.0.21.201 on Windows

This procedure describes how to install Control-M/EM patch PANFT.9.0.21.201 on Windows.

Information

 

Important

You must install this patch on every host where Control-M/EM server is installed.

Before You Begin

  • Verify that Control-M/EM version 9.0.21.200 is installed. 

Begin

  1. Download the installation package from Control-M/EM 9.0.21 Patches.
  2. Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
  3. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  4. Run the following command to stop the Control-M/EM Configuration Agent:
    ctl -mcs -C Config_Agent -all -cmd shutdown

  5. Verify that all Control-M/EM components are down.
  6. Double-click the downloaded PANFT.9.0.21.201 patch installation file, and follow the on-screen instructions until the installation is complete.
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  7. Start the Control-M/EM Configuration Agent.
    In a High Availability configuration, start with the active environment.

Installing Control-M/EM Patch PANFT.9.0.21.201 via Client Distribution on UNIX

This procedure describes how to install Control-M/EM Patch PANFT​​​​​​​.9.0.21.201 via Client Distribution on UNIX.

Before You Begin

  • Verify that Control-M/EM version 9.0.21.200 is installed. 

Begin

  1. Download the installation package from Control-M/EM 9.0.21 Patches.
  2. Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
  3. From the Control-M/Enterprise Manager server computer, navigate to the BIN directory:
    cd $EM_HOME%/bin
  4. Run the deploy_client_patch utility using the following command:
    em deploy_client_patch -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>/PANFT.9.0.21.201_windows_x86_64.exe
  5. Log in to the CCM, and set the patch for deployment.
    1. From the Manage tab, click Client Distribution.
    2. Select the Enable Distribution Mode check box.
    3. For Distribute version, select 9.0.21.201.
    4. Log in to the Control-M client.
      A notification appears instructing you to install the patch. 
    5. Follow the on-screen instructions until the installation is complete.

Installing Control-M/EM Patch PANFT​​​​​​​.9.0.21.201 via Client Distribution on Windows

This procedure describes how to install Control-M/EM Patch PANFT​​​​​​​.9.0.21.201 via Client Distribution on Windows.

Before You Begin

  • Verify that Control-M/EM version 9.0.21.200 is installed. 

Begin

  1. Download the installation package from Control-M/EM 9.0.21 Patches.
  2. Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
  3. On the Control-M/Enterprise Manager server computer, open a command line from <EM_HOME>\bin
  4. Run the deploy_client_patch utility using the following command:
    deploy_client_patch.bat -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>PANFT.9.0.21.201_windows_x86_64.exeExample:
    deploy_client_patch.bat -U emuser -P myPassword C:\PANFT.9.0.21.201\PANFT.9.0.21.201_windows_x86_64.exe
  5. Log in to the CCM, and set the patch for deployment.
    1. From the Manage tab, click Client Distribution.
    2. Select the Enable Distribution Mode check box.
    3. For Distribute version, select 9.0.2.201.
    4. Log in to the Control-M client.
      A notification appears instructing you to install the patch. 
    5. Follow the on-screen instructions until the installation is complete.

Applying Chinese Localization Support

This procedure describes how to apply Chinese localization support after applying the PANFT.9.0.21.201 patch.

Before You Begin

From the Control-M/EM download page in EPD, on the Patches tab, download the Control-M Enterprise Manager version 9.0.21.201 INI file (PARAMS_9.0.21.201.INI).

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. Copy the PARAMS_9.0.21.201.INI file that you obtained from EPD into the following location:
    1. UNIX/Linux: <EM Home>/ctm_em/templates
    2. Windows: <EM Home>\DB_Templates
  3. Apply the INI file:
    • On UNIX/Linux, run the following command:
      em loader -f <EM Home>/ctm_em/templates/PARAMS_9.0.21.201.INI
    • On Windows, open a command line from <EM_HOME>\bin and run the following command:
      loader -f <EM Home>\DB_Templates\PARAMS_9.0.21.201.INI
  4. Log in to Control-M Web.
  5. Through Preferences, set the language to Simplified Chinese or Traditional Chinese.

Uninstalling Control-M/EM Patch PANFT​​​​​​​.9.0.21.201 from UNIX/Linux

This procedure describes how to uninstall Control-M/EM patch PANFT.9.0.21.201 from UNIX/Linux.

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  3. Stop all Control-M/EM components by running the stop_all command.
  4. From the <USER_HOME>/install/PANFT.9.0.21.201 directory, run the following script:
    uninstall.sh

    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  5. Start all Control-M/EM components by running the start_all command.
    In a High Availability configuration, start with the active environment.

Uninstalling Control-M/EM Patch PANFT​​​​​​​.9.0.21.201 from Windows

This procedure describes how to uninstall Control-M/EM patch PANFT.9.0.21.201 from Windows.

Begin

  1. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  2. Stop the Control-M/EM Configuration Agent using the ctl command:
    ctl -mcs -C Config_Agent -all -cmd shutdown​​​​​​​​​​​​​​

  3. Verify that all Control-M/EM components are down.
  4. From Windows Settings > Apps > Apps & Features, select Control-M/Enterprise Manager 9.0.21.200 Patch 1 (<instance name>), and then select Uninstall.
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  5. Start the Control-M/EM Configuration Agent.
    ​​​​​​​In a High Availability configuration, start with the active environment.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

Control-M 9.0.21