This Fix Pack contains a full installation of the Infrastructure Management Integration Service.
If you have already installed version 10.0.00 of the Integration Service, you can upgrade it to version 10.0.500.001. If not, you can install a fresh 10.0.500.001 version of the Integration Service.
Note
Version 10.0.500.001 of the Infrastructure Management server and the Integration Service support the TLS 1.2 protocol. Earlier versions of the Integration Service support the SSLv3 protocol.
After upgrading the Infrastructure Management server, ensure to also upgrade the Integration Service to version 10.0.500.001 if configured to communicate over SSLv3.
As a best practice, BMC recommends that both the Infrastructure Management server and the Integration Service are of the same version.
(Windows) Right-click the install.cmd file and select the Run as administrator option to launch the Integration Service installer. Do not use the setup.exe file.
(UNIX) Run the ./install.sh
command.
./install.sh
command.Tip
Do not run the installer from within a compressed file. Always extract the contents of the compressed file that contains the installer before running it.
(Windows) Right-click the install.cmd file and select the Run as administrator option to launch the Integration Service installer. Do not use the setup.exe file.
(UNIX) Run the ./install.sh
command.
./install.sh
command.Tip
Do not run the installer from within a compressed file. Always extract the contents of the compressed file that contains the installer before running it.
Click Install.
The installer configures the components and starts the upgrade process. This might take some time. After the installation, the Installation Summary dialog box displays a summary. To view the installation logs, click View Log.
Note
If you manually delete the default remote cell created by the installer before installing the Fix Pack, the installer recreates the default remote cell during the Fix Pack installation. There is no impact to functionality.
The Fix Pack installer upgrades and migrates the cell created by the installer. For custom cells that are created manually, the installer upgrades the cell binaries but does not migrate the KBs.
To migrate the KBs for custom cells, perform the following steps:
Fix Pack 1 (10.0.500.001) for the Integration Service supports the TLS protocol with SHA-256 certificate support on the PATROL Agent to Integration Service communication channel. This requires the BMC PATROL Agent 10.0 or later.
After upgrading the Integration Service, perform the following steps to enable the Integration Service and PATROL Agent communication to be TLS-compliant.
Stop the Integration Service by running the following command:
pw is stop
Run the following command:
#Syntax ./set_unset_tls_IS.sh <$BMC_ROOT> <SET_TLS;UNSET_TLS> <security_level> #Example $set_unset_tls_IS.sh "/opt/TSIMAgent/pw/" SET_TLS 3
Modify the bppmpis.plc file from the /etc/patrol.d/_opt_bmc_TSIMAgent_pw/security_policy_v3.0 directory and add the following entries at the end of the server
section:
service = SSL provider = bmcsslNull module_name = libbmcnss.so
Modify the access file from the $BMC_ROOT/pw/patrol/common/security/keys directory and add the highlighted lines:
For security levels 0-2 | [SSL_SERVER] NSS_DB_HOME = sql:”server certificate path” |
For security levels 3-4 | [SSL_SERVER] NSS_DB_HOME = sql:”server certificate path”
NSS_DB_HOME = sql:”client certificate path” |
Stop the Integration Service:
Navigate to Start > Settings > Control Panel.
Click Yes to close the warning message that is displayed.
The status for the Integration Service changes from Started to (blank).
Navigate to the <Integration Service installation directory>\TSIMAgent\patrol\common\security\config_v3.0 directory.
Run the following command:
#Syntax set_unset_tls_IS.cmd <$BMC_ROOT> <SET_TLS;UNSET_TLS> <security_level> -serverDbPath <serverDbPath> -identity <identity> #Example $set_unset_tls_IS.cmd "C:\Program Files\BMC Software\TSIMAgent" SET_TLS 3 -serverDbPath "C:\Certificates\server_db" -identity bmcpatrol
regedit
to manually update the following registry entry:HKEY_LOCAL_MACHINE\SOFTWARE\BMC Software\IntegrationService\SecurityPolicy_v3.0\C__Program_Files_BMC_Software_BPPMAgent_Agent_bppmpis\common
securitydir
value fromsecuritydir"="C:\\Program Files\\BMC Software\\BPPMAgent\\Agent\\patrol\\common\\security
securitydir"="C:\\Program Files\\BMC Software\\BPPMAgent\\Agent\\patrol\\common\\security\\keys
Install the Fix Pack on the Infrastructure Management server. For more information, see Installing the Fix Pack on the Infrastructure Management server.