Automatically deploy a patch fix on an endpoint using the Patcher utility.

Document ID : KB000029398
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

As a system or a network administrator, you can automatically deploy a patch fix on an endpoint using the Patcher utility. A patch fix includes the following components:

·         Patcher utility

o    Windows: tfinstall.exe

o    UNIX: uxpatcher

·         Configuration file

o    Windows: patch.ini

o    UNIX: patcher.ini

·         Files to replace on the endpoint

 

The utility deploys a patch fix based on the instructions that are outlined in the configuration file. The configuration file is read-only.

 

Solution: 

1.       Download a patch fix on the endpoint.

2.       Run the Patcher utility with Administrator privileges.

·         [UNIX]

 

On a UNIX end­­point, execute the following command to start the Patcher utility:

#<Patch_Fix_Directory>/uxpatcher [-h | patcher.ini | -r]

 

uxpatcher
Specifies the name of the Patcher utility that deploys a patch fix on the UNIX endpoint.

                               

-h

Specifies the use of the command.

                               

Patcher.ini

Specifies the path of the configuration file which the Patcher utility looks for instructions.

 

-r
Specifies that an endpoint requires a reboot after applying the patch fix.

 

·         [Windows]   


On a Windows endpoint, you can use the interactive or the non-interactive mode of patch installation.

 

Non-Interactive Mode

 

On a Windows endpoint, execute the following command at the command prompt to start the Patcher utility:

 

<Drive:/Patch_Fix_Directory>/tfinstall.exe [-s]

 

tfinstall.exe
Specifies the name of the Patcher utility that deploys a patch fix on the Windows endpoint.

 

-s
Specifies to deploy a patch fix in silent mode.

 

Interactive Mode:

 

a.        Navigate to the patch fix directory on the endpoint and double-click the tfinstall.exe file.

b.       Click Next.

Image1.png

 

c.        A window appears that displays the patch number, description, and the files that the installer replaces on the endpoint. Click Next.

 

Image2.png

 

d.      Click Next to shut down CA ControlMinder. The utility installs the patch fix only when CA ControlMinder is down.
 

Image3.png

 

e.       The utility prompts to unload drivers, in case they are running. Click Next.

 

f.         The Utility is now ready to copy the new files on the endpoint. Click Next.

Image4.png

 

g.        The utility prompts you to restart CA ContorlMinder after copying the files.
 
Image5.png

 

h.       Restart the endpoint for the changes to take effect.

 

Image6.png

 

3.       [Windows]

The utility registers the patch fix details under the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\Patch\<PatchfFix#>

 

The details that the utility registers are as follows:

·         Description

·         Install date

·         Username

·         List of replaced files

 

[UNIX]

The uxpatcher utility registers the patch fix details in the patches.ini file at the following location:

/opt/CA/AccessControlShared/data/patches.ini

 

The details that the uxpatcher utility registers in the patches.ini file are as follows:

·         Product Name (AC/UNAB)

·         Description

·         Install date

·         Username

·         List of replaced files

 

4.       The utility backups of the old files before applying the patch fix and stores at the following location:

[Windows]
C:\Program Files\CA\AccessControl\Patch\<PatchFix#>

UNIX

/opt/CA/AccessControl/patch/<PatchFix#>

 

5.       You can find the utility log file (patch.log) in the patch fix directory. Later, the installer saves the log file in a backup directory.

 

You have deployed a patch fix on an endpoint using the Patcher utility.