Symantec Access Management

 View Only
  • 1.  CA AA patch installation

    Broadcom Employee
    Posted Sep 04, 2019 11:35 PM

    Hi Team, 

    Need some clarification on security patch installation. The Patch comes with installation instructions that are not clear to me. Unclear about the steps (shown in BOLD below). Can someone please advise. Basically I have THREE short questions on the steps below: 

    1: What should we back up before applying the patch
    2: Do we need to undeploy uds as part of step 2? 
    3: Do we need to "unzip" bundle_adminconsole.zip (step 5) before running the bundleManager command? 

    STEPS PROVIDED IN THE PATCH PACKAGE ARE AS FOLLOWS: 

    1. Copy CA-AdvancedAuth-8.2_admin_vulnerabilities_01219229_01268031_01268030.zip  to a temporary location, say [/temp or C:\temp].

     

    1. Undeploy arcotadmin from Appserver ( eg : Tomcat_Home/webapps/) and ensure that backup of these files available.

    [No need to undeploy arcotuds, since step 7 requires it to deployed again?]

     

    1. Take a backup of existing $ARCOT_HOME/java/lib folder.

     

    1. Copy adminframework.jar and adminframework.war to $ARCOT_HOME/java/lib

     

    1. Copy bundle_adminconsole.zip to $ARCOT_HOME/resourcepacks/

     

    1. Run the bundlemanager tool from $ARCOT_HOME/tools/common/bundle-manager using the below command:

           

       "java -jar bundle-manager.jar"

     

    1. arcotadmin.war and arcotuds.war  are generated at $ARCOT_HOME/java/webapps, deploy them in AppServer.


  • 2.  RE: CA AA patch installation
    Best Answer

    Broadcom Employee
    Posted Sep 05, 2019 01:07 PM
    Hi Shahnawaz,

    Please find the answers inline-

    1: What should we back up before applying the patch
    --> Take a backup of existing $ARCOT_HOME/java/lib folder. 
    2: Do we need to undeploy uds as part of step 2? 
    --> Undeploy UDS and then generate the new war file and redeploy it from $ARCOT_HOME/java/webapps
    3: Do we need to "unzip" bundle_adminconsole.zip (step 5) before running the bundleManager command? 
    --> No need to unzip anything and just running the  "java -jar bundle-manager.jar" command should take care of creating the new files, please ensure that JAVA_HOME is set before running the command.

    If any questions let us know.