Control-M/EM PANFT.9.0.21.201
BMC Software is releasing Control-M/EM patch PANFT.9.0.21.201 to correct several problems and to support Chinese localization in Control-M Web.
Corrected Problems
The following table describes the problems that are corrected in Control-M/EM PANFT.9.0.21.201.
| Tracking Number | Description | 
|---|---|
CTM-9474  | An entire folder is ordered, rather than only the jobs (within the folder) that were loaded to the Workspace. This occurs in Control-M Web after you close and reopen the Workspace and then order the Workspace. Note: The problem is corrected in any new Workspace that you create after installing the patch. For existing Workspaces that were created before installation of this patch, the issue is not yet resolved. We recommend that you create a new Workspace before any manual run (order), and not run old Workspaces.  | 
CTM-9503  | Reporting access control is not enforced properly for internal users. In this bug, CVE-2024-1604 is detected.  | 
CTM-9504  | Installation directory access protection is insufficient for files in use by Control-M. In this bug, CVE-2024-1605 is detected.  | 
CTM-9802  | A security vulnerability CVE-2024-1606 is detected in the Report naming functionality.  | 
Enhancements
The following table describes the enhancements that are applied in Control-M/EM PANFT.9.0.21.201.
| Tracking Number | Description | 
|---|---|
| WSI-1982 | Control-M Web can now be localized to Simplified and Traditional Chinese. This localization is supported for the following domains: 
 After you install this patch, you can apply Chinese localization support as described in Applying Chinese Localization Support.  | 
Installing Control-M/EM Patch PANFT.9.0.21.201 on UNIX
This procedure describes how to install Control-M/EM patch PANFT.9.0.21.201 on UNIX.
Before You Begin
- Verify that Control-M/EM version 9.0.21.200 is installed.
 
Begin
- Download the installation package from Control-M/EM 9.0.21 Patches.
 - Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
 - Set execution flags for the patch installation file using the following command:
chmod +x PANFT.9.0.21.201_<platform>_INSTALL.BIN - In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
 - Stop all Control-M/EM components by running the stop_all command.
 - Run the following script from the Control-M/EM Home directory, and follow the on-screen instructions until the installation is complete.
<temporary directory>/PANFT.9.0.21.201_<platform>_INSTALL.BIN
In a High Availability configuration, perform this step on both the active environment and the non-active environment. - Start all Control-M/EM components by running the start_all command.
In a High Availability configuration, start with the active environment. 
Installing Control-M/EM Patch PANFT.9.0.21.201 on Windows
This procedure describes how to install Control-M/EM patch PANFT.9.0.21.201 on Windows.
Before You Begin
- Verify that Control-M/EM version 9.0.21.200 is installed.
 
Begin
- Download the installation package from Control-M/EM 9.0.21 Patches.
 - Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
 - In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
 Run the following command to stop the Control-M/EM Configuration Agent:
ctl -mcs -C Config_Agent -all -cmd shutdown- Verify that all Control-M/EM components are down.
 - Double-click the downloaded PANFT.9.0.21.201 patch installation file, and follow the on-screen instructions until the installation is complete.
In a High Availability configuration, perform this step on both the active environment and the non-active environment. - Start the Control-M/EM Configuration Agent.
In a High Availability configuration, start with the active environment. 
Installing Control-M/EM Patch PANFT.9.0.21.201 via Client Distribution on UNIX
This procedure describes how to install Control-M/EM Patch PANFT.9.0.21.201 via Client Distribution on UNIX.
Before You Begin
- Verify that Control-M/EM version 9.0.21.200 is installed.
 
Begin
- Download the installation package from Control-M/EM 9.0.21 Patches.
 - Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
 - From the Control-M/Enterprise Manager server computer, navigate to the BIN directory:
cd $EM_HOME%/bin - Run the deploy_client_patch utility using the following command:
em deploy_client_patch -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>/PANFT.9.0.21.201_windows_x86_64.exe - Log in to the CCM, and set the patch for deployment.
- From the Manage tab, click Client Distribution.
 - Select the Enable Distribution Mode check box.
 - For Distribute version, select 9.0.21.201.
 - Log in to the Control-M client.
A notification appears instructing you to install the patch. - Follow the on-screen instructions until the installation is complete.
 
 
Installing Control-M/EM Patch PANFT.9.0.21.201 via Client Distribution on Windows
This procedure describes how to install Control-M/EM Patch PANFT.9.0.21.201 via Client Distribution on Windows.
Before You Begin
- Verify that Control-M/EM version 9.0.21.200 is installed.
 
Begin
- Download the installation package from Control-M/EM 9.0.21 Patches.
 - Log in to the account where Control-M/EM is installed, copy the installation package to a temporary directory on your local hard drive (not a network drive), and then extract the package.
 - On the Control-M/Enterprise Manager server computer, open a command line from <EM_HOME>\bin
 - Run the deploy_client_patch utility using the following command:
deploy_client_patch.bat -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>PANFT.9.0.21.201_windows_x86_64.exeExample:
deploy_client_patch.bat -U emuser -P myPassword C:\PANFT.9.0.21.201\PANFT.9.0.21.201_windows_x86_64.exe - Log in to the CCM, and set the patch for deployment.
- From the Manage tab, click Client Distribution.
 - Select the Enable Distribution Mode check box.
 - For Distribute version, select 9.0.2.201.
 - Log in to the Control-M client.
A notification appears instructing you to install the patch. - Follow the on-screen instructions until the installation is complete.
 
 
Applying Chinese Localization Support
This procedure describes how to apply Chinese localization support after applying the PANFT.9.0.21.201 patch.
Before You Begin
From the Control-M/EM download page in EPD, on the Patches tab, download the Control-M Enterprise Manager version 9.0.21.201 INI file (PARAMS_9.0.21.201.INI).
Begin
- Log in to the Control-M/EM Server machine as a Control-M/EM user.
 - Copy the PARAMS_9.0.21.201.INI file that you obtained from EPD into the following location:
- UNIX/Linux: <EM Home>/ctm_em/templates
 - Windows: <EM Home>\DB_Templates
 
 - Apply the INI file:
- On UNIX/Linux, run the following command:
em loader -f <EM Home>/ctm_em/templates/PARAMS_9.0.21.201.INI - On Windows, open a command line from <EM_HOME>\bin and run the following command:
loader -f <EM Home>\DB_Templates\PARAMS_9.0.21.201.INI 
 - On UNIX/Linux, run the following command:
 - Log in to Control-M Web.
 - Through Preferences, set the language to Simplified Chinese or Traditional Chinese.
 
Uninstalling Control-M/EM Patch PANFT.9.0.21.201 from UNIX/Linux
This procedure describes how to uninstall Control-M/EM patch PANFT.9.0.21.201 from UNIX/Linux.
Begin
- Log in to the Control-M/EM Server machine as a Control-M/EM user.
 - In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
 - Stop all Control-M/EM components by running the stop_all command.
 - From the <USER_HOME>/install/PANFT.9.0.21.201 directory, run the following script:
uninstall.sh
In a High Availability configuration, perform this step on both the active environment and the non-active environment. - Start all Control-M/EM components by running the start_all command.
In a High Availability configuration, start with the active environment. 
Uninstalling Control-M/EM Patch PANFT.9.0.21.201 from Windows
This procedure describes how to uninstall Control-M/EM patch PANFT.9.0.21.201 from Windows.
Begin
- In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
 Stop the Control-M/EM Configuration Agent using the ctl command:
ctl -mcs -C Config_Agent -all -cmd shutdown- Verify that all Control-M/EM components are down.
 - From Windows Settings > Apps > Apps & Features, select Control-M/Enterprise Manager 9.0.21.200 Patch 1 (<instance name>), and then select Uninstall.
In a High Availability configuration, perform this step on both the active environment and the non-active environment. - Start the Control-M/EM Configuration Agent.
In a High Availability configuration, start with the active environment.