[HPADM] Summary: Patch management server (equivalent of Wintel WSUS and Redhat Satellite)

Bill Hassell's reply is most spot-on :


Software Distributor has patch depot capability built in. Pick a server, use
swcopy to put multiple patches together under one directory and register the
depot on the network with swreg.

To see the depots from any client, use swlist –l depot @ serverName
Then on each client, you run swinstall just like installing any patch set
except you add the –s serverName:/var/mydepot.

Ignite is a deployment system. It totally replaces everything on your boot
disks. It cannot offer patches or bundles of patches.

All HP-UX patches are packaged in SD format and you must use swinstall. So
everything you need for a central patch server is built into the SD
utilities. You can push or pull patches to one or several hundred machines.

==============================================================================



Appended below the other replies, as they may have educational value :

========================================================================
Go to the patch database in the ITRC. They have a utility that you can
download and run a program called swainv, which creates a file called
inventory.xml, which you can upload to the patch database and it will make
recommendations and create the bundle that you can download and install.

http://www11.itrc.hp.com/service/patch/mainPage.do

Look for the link that says, "Run a patch assessment".
Paul
=============================================================================

Check out swa - software assistant. I think that is what you're looking
for.

http://docs.hp.com/en/5992-3930/ch01.html


Cindy

================================================================

Did some testing on this in our lab, you can't push out updates to servers
with Ignite. It will however act as a repository for all the patches and
used as the install point on the other servers. Hopefully this helps.

More about Ignite at :
http://docs.hp.com/en/IUX/

Craig


On Mon, Feb 9, 2009 at 12:13 AM, sunhux G <sunhux@xxxxxxxxx> wrote:


Hi

I'm going to have twenty over HP-UX servers to manage.

For pushing down patchees, is there an equivalent of Windows
WSUS or Redhat Linux satellite?

Any other good tool for essential management of multiple
HP-UX servers?

Most of it will be Itanium running B11.3x OS


Thanks
U





Relevant Pages

  • Re: [Full-Disclosure] DCOM RPC exploit (dcom.c)
    ... But you'd still patch either way, ... of home users who don't even know what a security patch *IS*, ... But how many organisations firewall off internal servers from ... administrators have the time to watch the IDS given the number of patches they ...
    (Full-Disclosure)
  • Re: A 6% fix from Microsoft Security Bulletin MS03-040 - 828750
    ... I want control over our servers and computers. ... Especially with patches that cause problems. ... "Forced" updates. ...
    (microsoft.public.security.virus)
  • Re: What could delete tcpip.sys and srv.sys from my Win2003 ?!
    ... I have working systems now because PSS gave me the latest patch that was ... was missing from my servers for whatever reason, I had to copy such file ... that doesn't rule out it could be the patches. ...
    (microsoft.public.security)
  • Re: Microsoft Please re-evaluate your rating system.
    ... You should be going through internal classifications yourself as there is no one better to judge your company's risks ... each of the patches depending on the types of machines i.e. clients versus servers, ... The last "critical" patch for servers that I have seen that I thought was critical and required immediate action was the ... > patches from Microsoft it is impossible to properly asses ...
    (microsoft.public.security)
  • 9_Recommended error codes (specifically return code 5)
    ... * "return code 2" indicates patches are already installed. ... * "return code 25" means a patches requires another patch that is not yet installed. ... With or without using the save option, the patch installation process ... Installing 114008-01... ...
    (SunManagers)