Control-M/Server PACTV.9.0.20.211

BMC Software is releasing patch PACTV.9.0.20.211 to correct several problems and enhance Control-M/Server 9.0.20.200 for UNIX and Windows.

This patch includes all content from previously released patches PACTV.9.0.20.204 and PACTV.9.0.20.207.

Note

You must install Control-M/Server 9.0.20.200 before you install this patch.

If you are using a dedicated PostgreSQL database, uninstall patch PACTV.9.0.20.204 before you install patch PACTV.9.0.20.211.

If patch PACTV.9.0.20.208 (withdrawn) is installed, uninstall it before you install patch PACTV.9.0.20.211.

Enhancements

The following enhancement is enabled in PACTV.9.0.20.211:

Tracking number

Description

Included in Patch

CTM-4669

SSL encryption is supported between Control-M/Server running on Linux and the following database servers:

  • AWS PostgreSQL Relational Database Service (RDS)
  • AWS PostgreSQL Aurora

PACTV.9.0.20.204

To enable the SSL encryption, see Enabling SSL Encryption.

Corrected Problems

The following table describes the corrected problems that are fixed in PACTV.9.0.20.211:

Tracking number

Description

Included in Patch

CTM-4129

You can now use the ctmvar utility to update the value of a local variable at the folder level which is identified by the Order ID.

PACTV.9.0.20.207

CTM-6561

Jobs do not Run when you use the ctmudly utility, and the following error message is sent by the Control-M/Server CE process:

duplicate key value violates unique constraint

PACTV.9.0.20.207

CTM-6131

The ctmudchk utility output for jobs that did not Run (previously Order), contains jobs that did Run.

PACTV.9.0.20.207

CTM-6546

Jobs run without Capture from Job Output when the job runs as part of the New Day procedure.

PACTV.9.0.20.207

CTM-6344

SMART folders and Jobs might not Run (previously Order) according to specific dates defined in the Rule Based Calendar. For more information, see Scheduling a job for specific dates.

Note

  • The patch prevents Rule Based Calendars that are uploaded to Control-M/Server from becoming corrupted, but does not fix existing calendars in Control-M/Server.
  • To fix the corrupted Rule Based Calendars, you must Force Upload them from Control-M/EM to Control-M/Servers after you install the patch.
  • If you applied the workaround to this problem, rollback the workaround described in 000393461 after you install the patch.

PACTV.9.0.20.207

CTM-6378

The SSL connection between Control-M/Server and Control-M/Agent that uses ECDHE ciphers fails.

After you install the patch, update the ciphers as described in Configuring Protocols and Ciphers for Zones 2 and 3.

PACTV.9.0.20.207

CTM-6935

Jobs do not Run (previously Order) when you use the ctmudly utility and if a download to Control-M/EM occurs during the Order.

PACTV.9.0.20.207

CTM-6837

The database owner password might appear for a very short time when you check the status of active processes with the ps command and Control-M/Server uses an Oracle database. This occurs when you execute the DBUStatus utility manually or when Control-M/Server executes the start_ca utility. 

PACTV.9.0.20.207

CTM-6625

The Control-M/Server CE process restarts when a message is received at its ports from an unidentified source.

PACTV.9.0.20.207

Installing the Patch on UNIX

This procedure describes how to install PACTV.9.0.20.211 on UNIX.

Before You Begin

Begin

  1. Extract the patch installation file that you obtained into a temporary directory. Use one of the following commands:
    • Linux: zcat PACTV.9.0.20.211.tar.gz | tar -xvf -
    • AIX: gzip PACTV.9.0.20.211.tar.gz -dc | tar -xvf -
  2. Log in as the Control-M/Server user and navigate to the $HOME directory.
  3. Shut down both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • shut_ca
    • shut_ctm

  4. Run the following command:

    <temporary directory>/PACTV.9.0.20.211/install_patch.sh

  5. Restart both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • start_ctm
    • start_ca
  6. If you have Rule Based Calendars with specific dates, you must Force Upload them to the Control-M/Server at least 1 hour before New Day.

Installing the Patch on Windows

This procedure describes how to install PACTV.9.0.20.211 on Windows.

Before You Begin

Begin

  1. Log in as a Control-M/Server administrator.

  2. Create a temporary directory on your local hard drive (not a network drive). 
    EXAMPLE: C:\PACTV.9.0.20.211

    Note

    The temporary directory path must not contain spaces.

  3. Extract the patch installation file that you obtained into the temporary directory. 
  4. Open a windows command prompt and navigate to the Control-M/Server home directory.
  5. Shut down both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • shut_ca
    • shut_ctm

  6. Run the following command:

    <temporary directory>\PACTV.9.0.20.211\Windows\install_patch.bat

  7. Restart both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • start_ctm
    • start_ca
  8. If you have Rule Based Calendars with specific dates, you must Force Upload them to the Control-M/Server at least 1 hour before New Day.

Uninstalling the Patch from UNIX

This procedure describes how to uninstall PACTV.9.0.20.211 from UNIX.

If SSL Encryption is defined, see Disabling SSL Encryption.

Begin

  1. Log in as the Control-M/Server user and navigate to the Control-M/Server home directory.
  2. Shut down both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • shut_ca
    • shut_ctm

  3. Run the following command:

    ${HOME}/patches/PACTV.9.0.20.211/uninstall_patch.sh

  4. Restart both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • start_ctm
    • start_ca

Uninstalling the Patch from Windows

This procedure describes how to uninstall PACTV.9.0.20.211 from Windows.

Begin

  1. From a command line, navigate to the Control-M/Server home directory.
  2. Shut down both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • shut_ca
    • shut_ctm

  3. Run the following command:

    "%ALLUSERSPROFILE%\Application Data\BMC Software\PACTV.9.0.20.211\uninstall_patch.bat"

  4. Restart both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • start_ctm
    • start_ca

Enabling SSL Encryption

This procedure describes how to enable SSL encryption after patch PACTV.9.0.20.211 is installed.

Before You Begin

  • Install patch 9.0.20.211
  • Download a valid AWS certificate from the AWS website and save it to a location that is accessible to the Linux machine where your Control-M/Server account is installed

Begin

  1. From the home directory, shut down both the Control-M/Server and the Configuration Agent with the following commands:
    • shut_ctm
    • shut_ca
  2. Execute the following command:

    ~/ctm_server/exe_Linux-x86_64/DBUData/scripts/ssl_api.sh --ENABLE_SSL --DB_USER_PASSWD <password> --CERTIFICATE_FILE <certificate location>
  3. Log out and log in to Control-M/Server.
  4. Test the connection with the following command:

    ~/ctm_server/exe_Linux-x86_64/DBUData/scripts/ssl_api.sh --TEST_CONNECTION --DB_USER_PASSWD <password>

    If the test completed successfully, the following message appears:

    SSL is enabled
    SSL version: TLSv1.2
    Cipher: ECDHE-RSA-AES256-GCM-SHA384
    Bits: 256
  5. Restart both the Control-M/Server and the Control-M/Server Configuration Agent with the following commands:
    • start_ctm
    • start_ca

Disabling SSL Encryption

This procedure describes how to disable SSL encryption.

Begin

  1. Log in to Control-M/Server.
  2. From the home directory, shut down both the Control-M/Server and the Configuration Agent with the following commands:
    • shut_ca
    • shut_ctm
  3. Execute the following command:
    ~/ctm_server/exe_Linux-x86_64/DBUData/scripts/ssl_api.sh --DISABLE_SSL --DB_USER_PASSWD <password>
  4. Test the connection with the following command:
    ~/ctm_server/exe_Linux-x86_64/DBUData/scripts/ssl_api.sh --TEST_CONNECTION --DB_USER_PASSWD <password>

    If the test completed successfully, the following message appears:
    SSL is currently disabled.
  5. Log out and log in to Control-M/Server.
  6. Restart both the Control-M/Server and the Configuration Agent with the following commands:

    • start_ca
    • start_ctm

If you wish to uninstall Control-M version 9.0.20.200 after installing patch PACTV.9.0.20.211, do the following:

  • Disable SSL encryption
  • Configure your database to allow non-SSL connections

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*