Control-M/EM PANFT.9.0.21.201

BMC Software is releasing patch PANFT.9.0.21.201 to correct several problems and to support Chinese localization in Control-M Web.

Note

You must have Control-M/EM 9.0.21.200 installed before you install this patch. 

You must install this patch on every environment where a Control-M/Enterprise Manager Server and Client are installed.

Corrected Problems

The following table describes the problems that are fixed in this patch:

Tracking number

Description

CTM-9474

An entire folder is ordered, rather than only the jobs (within the folder) that were loaded to the Workspace. This occurs in Control-M Web after you close and reopen the Workspace and then order the Workspace.

Note: The problem is corrected in any new Workspace that you create after installing the patch. For existing Workspaces that were created before installation of this patch, the issue is not yet resolved. We recommend that you create a new Workspace before any manual run (order), and not run old Workspaces.

CTM-9503

Reporting access control is not enforced properly for internal users.

In this bug, CVE-2024-1604 is detected.

CTM-9504

Installation directory access protection is insufficient for files in use by Control-M.

In this bug, CVE-2024-1605 is detected.

CTM-9802

A security vulnerability CVE-2024-1606 is detected in the Report naming functionality.

Enhancement

WSI-1982: Control-M Web can now be localized to Simplified and Traditional Chinese.

This localization is supported for the following domains: Planning, Monitoring, Managed File Transfer, Tools, and Alerts.

After installing the patch, apply Chinese localization support as described in Applying Chinese Localization Support.

Installing the Patch on Control-M/EM Server on UNIX/Linux

This procedure describes how to install patch PANFT.9.0.21.201 on UNIX/Linux.

Before You Begin

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. Copy the patch installation file that you obtained into a temporary directory.
  3. Set execution flags for the patch installation file using the following command:
    chmod +x PANFT.9.0.21.201_<platform>_INSTALL.BIN
  4. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  5. Stop all Control-M/EM components by running the stop_all command.
  1. Run the following script from the Control-M/EM Home directory, and follow the on-screen instructions until the installation is complete.
    <temporary directory>/PANFT.9.0.21.201_<platform>_INSTALL.BIN
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  2. Start all Control-M/EM components by running the start_all command.
    In a High Availability configuration, start with the active environment. 

Installing the Patch on Windows

This procedure describes how to install patch PANFT.9.0.21.201 on Windows.

Before You Begin

Begin

  1. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.

  2. Stop the Control-M/EM Configuration Agent using the ctl command:

    ctl -mcs -C Config_Agent -all -cmd shutdown     
    Ensure that all Control-M/EM components are down.

  3. Double-click the downloaded PANFT.9.0.21.201 patch installation file, and follow the on-screen instructions until the installation is complete.
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  4. Start the Control-M/EM Configuration Agent.
    In a High Availability configuration, start with the active environment.

Installing the Patch using Client Distribution on UNIX/Linux

This procedure describes how to install PANFT.9.0.21.201 using Client Distribution.

Before You Begin

Begin

  1. From the Control-M/Enterprise Manager server computer, navigate to the BIN directory:
    cd $EM_HOME%/bin
  2. Run the deploy_client_patch utility using the following command:
    em deploy_client_patch -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>/PANFT.9.0.21.201_windows_x86_64.exe
  3. Log in to the CCM, and set the patch for deployment.
    1. From the Manage tab, click Client Distribution.
    2. Select the Enable Distribution Mode check box.
    3. For Distribute version, select 9.0.21.201.
    4. Log in to the Control-M client.
      A notification appears instructing you to install the patch. 
    5. Follow the on-screen instructions until the installation is complete.

Installing the Patch using Client Distribution on Windows

This procedure describes how to install PANFT.9.0.21.201 using Client Distribution.

Before You Begin

Begin

  1. On the Control-M/Enterprise Manager server computer, open a command line from <EM_HOME>\bin
  2. Run the deploy_client_patch utility using the following command:
    deploy_client_patch.bat -U <EM USER> -P <EM PASSWORD> <PATH_TO_TEMPORARY_DIRECTORY_WHERE_PATCH_WAS_DOWNLOADED>PANFT.9.0.21.201_windows_x86_64.exeExample:
    deploy_client_patch.bat -U emuser -P myPassword C:\PANFT.9.0.21.201\PANFT.9.0.21.201_windows_x86_64.exe
  3. Log in to the CCM, and set the patch for deployment.
    1. From the Manage tab, click Client Distribution.
    2. Select the Enable Distribution Mode check box.
    3. For Distribute version, select 9.0.2.201.
    4. Log in to the Control-M client.
      A notification appears instructing you to install the patch. 
    5. Follow the on-screen instructions until the installation is complete.

Applying Chinese Localization Support

This procedure describes how to apply Chinese localization support after applying the PANFT.9.0.21.201 patch.

Before You Begin

From the Control-M/EM download page in EPD, on the Patches tab, download the Control-M Enterprise Manager version 9.0.21.201 INI file (PARAMS_9.0.21.201.INI).

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. Copy the PARAMS_9.0.21.201.INI file that you obtained from EPD into the following location:
    1. UNIX/Linux: <EM Home>/ctm_em/templates
    2. Windows: <EM Home>\DB_Templates
  3. Apply the INI file:
    • On UNIX/Linux, run the following command:
      em loader -f <EM Home>/ctm_em/templates/PARAMS_9.0.21.201.INI
    • On Windows, open a command line from <EM_HOME>\bin and run the following command:
      loader -f <EM Home>\DB_Templates\PARAMS_9.0.21.201.INI
  4. Log in to Control-M Web.
  5. Through Preferences, set the language to Simplified Chinese or Traditional Chinese.

Uninstalling the Patch from UNIX/Linux

This procedure describes how to uninstall patch PANFT.9.0.21.201 from UNIX/Linux.

Begin

  1. Log in to the Control-M/EM Server machine as a Control-M/EM user.
  2. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.
  3. Stop all Control-M/EM components by running the stop_all command.
  4. From the <USER_HOME>/install/PANFT.9.0.21.201 directory, run the following script:
    uninstall.sh
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  5. Start all Control-M/EM components by running the start_all command.
    In a High Availability configuration, start with the active environment.

Uninstalling the Patch from Windows

This procedure describes how to uninstall patch PANFT.9.0.21.201 from Windows.

Begin

  1. In a High Availability configuration, stop the Control-M/EM Configuration Agent on the non-active environment.

  2. Stop the Control-M/EM Configuration Agent using the ctl command:

    ctl -mcs -C Config_Agent -all -cmd shutdown     
    Ensure that all Control-M/EM components are down.

  3. From Windows Settings > Apps > Apps & Features, select Control-M/Enterprise Manager 9.0.21.200 Patch 1 (<instance name>), and then select Uninstall.
    In a High Availability configuration, perform this step on both the active environment and the non-active environment.
  1. Start the Control-M/EM Configuration Agent.
    In a High Availability configuration, start with the active environment.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*