Technical update: TrueSight Server Automation (v25.4.00.55)

TrueSight Server Automation 25.4.00.55 covers the following updates:

• OpenSSL Version Migration: Upgraded from 3.0.18 to 3.0.20.

Deployment guidelines

Manually update OpenSSL to version 3.0.20 by following these steps:

Download the hotfix required for your environment from the Patches tab of the following EPD website page. You must provide your BMC Helix Support credentials to access the EPD website. You might also be prompted to complete the Export Compliance form.

Applying the hotfix

Apply the hotfix to various components in the following sequence:

1. Application server or PXE server  
2. Console (RCP client) or NSH installed server
3. RSCD agent
    

Applying the hotfix to the Application server or PXE server

To apply the hotfix, do the following on each Application Server host: 

1. Stop the application server, PXE server service 
2. Take back up of the following files and keep them outside "<TSSA_Install_Location>" 

If Appserver is Windows, use the following files and locations 

If Appserver is Linux, use the following files and location:

      3. Download and extract TSSA254_OpenSSL_hotfix.zip to the temp location 

      4. Replace the files from temp to the given location below, and make sure the copied files have the                
         correct permissions and owner as previously installed files 

If Appserver is Windows, use the following files and location, 

If Appserver is Linux, use the following files and location, 

      5. Start the application server service 

Applying the hotfix to the console (RCP client) or NSH installed server

1. Close all running RCP and/or NSH processes. If the agent is installed, Stop RSCD agent service. 
2. Take back up of the following files and keep them outside "<TSSA_Install_Location>" 

If RCP/NSH is installed on a Windows server, then use the following files and location, 

If NSH is installed on a Linux server, then use the following files and location, 

      3. Download and extract TSSA254_OpenSSL_hotfix.zip to the temp location 

      4. Replace the files from temp to the given location below, and make sure the copied files have the
         correct permissions and owner as previously installed files.

If RCP/NSH is installed on a Windows server, then use the following files and location:

If NSH is installed on a Linux server, then use the following files and location:

       5. If RSCD is installed on the server, start the RSCD agent service. Start RCP and NSH and run sanity        
          use cases (like Server Live browse, NSH here, agentinfo command, and so on). 

       6. Repeat all earlier steps on server hosts where RCP or NSH is installed 

Applying the hotfix to the RSCD Agent on the target server

1. Download TSSA254_OpenSSL_hotfix.zip from EPD and put it under the temp location on the application server 
2. If Appserver is Linux, set the permissions to 755 for all files in the unzip directory. 
3. Unzip TSSA254-RSCDAgents.zip and Copy rscd and redist directories to path where CreateDepotSoftwareForAgents.nsh available under the unzip directory. 
4. Run the following command to import the Agent bundle in TSSA: 

           a. Start NSH
           b. Acquire credentials with the following command:

• blcred cred-acquire-profile <ProfileName>-username BLAdmin-password <password>
• nsh CreateDepotSoftwareForAgents.nsh false '<ProfileName>' 'BLAdmins' '<rscd_directory_path>'   
  '25.4.00.55' 

      5. Connect to RCP and navigate to "/BMC Maintenance/Agent Installer Jobs/" under
         Jobs and run "Agent Installer Upgrade Job 25.4.00.55" job against the target 

      6. Once the job execution is completed, you can run the Update Server Properties   
        (USP) job to update the agent version for targets