Information
Unsupported content This version of the product has reached end of support. The documentation is available for your convenience. However, you must be logged in to access it. You will not be able to leave comments.

Patch Analysis results - Missing Patches tab


The Missing Patches tab lists all patches that are missing on one or more target servers. Select one of those patches, and the Targets list at right shows the targets where that patch is missing.

Using the Missing Patches tab, you can run a remediation operation to deploy missing patches to target servers. A remediation operation automatically downloads and packages the missing patches and creates a Deploy operation to deploy the patches to the targets you specify.

When remediating target servers, you can deploy all missing patches to all target servers. On Microsoft Windows targets, you can run a remediation operation that deploys a missing patch to all servers where the patch is missing or to a single server.

PatchResultsMissingPatches.gif

To search for patches or targets

In the Search Patches box, enter a text string of any length. The Patches list shows all missing patches with names that include that text string. If you leave the box blank, the page shows all missing patches. Search for unpatched targets in a similar way, using the Search Targets box.

To obtain information about a patch

In the patches list, find the patch for which you want information and, hover your cursor over the information icon InfoIcon.gif. A pop-up message describes the patch.

To remediate missing patches

To begin remediation, choose one of the following actions:

  • To remediate all missing patches for all targets, select the Actions icon ActionsIcon.gif at the top of the patches list at left and then select Remediate All Patches For All Targets.
    The New Remediation dialog box opens.
  • (Windows only) To remediate all targets for one missing patch, select a patch in the patches list at left. Then, select the Actions icon ActionsIcon.gif at the top of the targets list at right and select Remediate All Targets For This Patch.
    The New Remediation dialog box opens. Note that some rules do not support remediation.
  • (Windows only) To remediate one target for one missing patch, select a patch in the patches list at left. Then, in the targets list at right, find the target to remediate, click ActionsIcon.gif, and select Remediate Selected Target For Patch
    The New Remediation dialog box opens.

Use the New Remediation dialog box, as described in the following sections. The contents of the dialog box vary depending on whether a deploy template is available.

Basic remediation

When setting up basic remediation, you specify locations to store BLPackages and Jobs that are created automatically. The locations you choose are folders in BMC Server Automation.

PatchRemediationSimple.gif

  1. For Depot Group, use the folder icon to navigate to a depot group that can store the BLPackage created for this remediation operation.
  2. For Job Group, use the folder icon to navigate to a job group that can store the job created for this remediation operation.
  3. Click Create to save the remediation operation so it can be run later (using the Remediation Options tab), or click Execute to save the remediation operation and run it immediately.
    You can also click the Patch Summary and Target Summary tabs to see what rules are included in the remediation operation and the targets where the operation runs.

Remediation based on a deploy template

When setting up remediation based on a deploy template, you specify locations to store BLPackages and jobs that are created automatically. The locations you choose are folders in BMC Server Automation. You can also a select a deploy template, which controls the behavior of the remediation job. If the deploy template is defined as an advanced Deploy Job, you can make scheduling decisions for the remediation job. 

Deploy templates can be defined for a portal security group or the entire site.

ComplianceRemediation.gif

  1. For Depot Group, use the folder icon to navigate to a depot group that can store the BLPackage created for this remediation operation.
  2. For Job Group, use the folder icon to navigate to a job group that can store the job created for this remediation operation.
  3. To specify Deploy job settings for the remediation operation, perform the following steps:
    1. Click the Selected Deploy Template tab, which shows a list of Deploy jobs that can be used as templates for the remediation operation.

      SelectDeployTemplate.gif
    2. Select a Deploy job in the list of templates.
      The Deploy job appears in the Selected Deploy Template field. To remove a Deploy template, select the Deploy job again from the list of possible Deploy jobs. 
    3. Optionally, inspect the settings of the template by clicking Details. The portal lists settings for the selected job, such as its logging level and reboot settings. To return to the list of template jobs, click Templates.

      SelectDeployTemplateDeploySettingsTb.gif

      Warning

      Note

      Many options are available for controlling the behavior of a Deploy Job (that is, a deploy template) used for remediation purposes. See here   for a complete list. For instructions on using BMC Server Automation to implement those options, see  Setting deploy options for remediation jobs   .

    4. If you have selected a Deploy template that is defined as an Advanced Deploy job in BMC Server Automation, you can schedule the individual phases of the remediation operation (that is, simulate, stage, and commit). Take the following steps:

      1. Click the Phase Schedules and Execution tab.

        SelectDeployTemplatePhasesTb.gif
      2. Take any of the following actions:

        • If you do not want to schedule the phases of the remediation action, select Do not execute.  
        • If you want to schedule all phases to run sequentially, select Execute sequentially and then specify a time zone and a start time for when execution begins.
        • If you want to schedule each phase individually, select Execute selected phases. Select a time zone. Then specify a start time for each phase that you want to schedule. Instead of setting a start time, you can click After Previous Phase to indicate that the phase should begin after the previous phase completes. You can also click Not Scheduled to specify that a particular phase is not scheduled.
  4. Click Create to save the remediation operation so it can be run later (using the Remediation Options tab), or click Execute to save the remediation operation and run it immediately.
    You can also click the Patch Summary and Target Summary tabs to see what rules are included in the remediation operation and the targets where the operation runs.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC BladeLogic Portal 2.2