Symantec Security Information Manager (SSIM) and various SSIM system components need to be upgraded for Daylight Savings Time (DST) Changes.

book

Article ID: 157791

calendar_today

Updated On:

Products

Security Information Manager

Issue/Introduction

Symantec Security Information Manager (SSIM) and various SSIM system components need to be upgraded for Daylight Savings Time (DST) Changes.

in particular appliances located in following country:

"On Monday, November 5, 2012, the Israeli Knesset approved a bill to extend Daylight Saving Time (DST) to a period of 193 days. DST in Israel will now begin on the Friday before the last Sunday in March, and it will end on the first Sunday after October 1. If the end of DST falls on Rosh Hashanah, the Jewish New Year, DST will end on the first Monday after October 1. The new DST policy for Israel has been applied from 2013 to 2023."

 

Cause

Daylight Savings Time (DST) Changes occur from time to time.

 

Resolution

To fully address DST changes that occur from time to time, multiple system components must be updated, including the operating system on which SSIM server is installed, IBM components that SSIM uses, and the version of Oracle Java used by the SSIM components, both on-box and off-box.

NOTE: All of the following steps should be performed while logged in as root on SSIM, or as root/administrator on other systems.

 

1.     Updating the SSIM operating system by installing the updated tzdata package on the SSIM server:

 

a.     Download the tzdata-*.rpm RPM and its corresponding md5 file from the following location:

 For SSIM 4.7

tzdata-2012j-1.el4.noarch.rpm

tzdata-2012j-1.el4.noarch.rpm.md5

 

For SSIM 4.8

tzdata-2012j-1.el6.noarch.rpm

tzdata-2012j-1.el6.noarch.rpm.md5

 

 

b.     Copy the RPM and MD5 files to the SSIM Server

 

c.     Verify the MD5 of the downloaded RPM with the following command:

 

# md5sum -c tzdata-2012j-1.el4.noarch.rpm.md5

 

d.     Install the RPM as root user, using the following command:


rpm -Uvh tzdata-2012j-1.el4.noarch.rpm --nodeps –-force

 

 

2.     Using the IBM Java Time Zone Update (JTZU) utility to update IBM Components on the SSIM server:

 

a.     Download the latest version of the utility for Windows and Linux from the following location: http://www.ibm.com/developerworks/java/jdk/dst/jtzu.html

(At the time this article was written, the latest version is jtzu-1.6.12j.zip , which will be referenced below.)

 

b.     Copy the ZIP file to the /tmp directory on the SSIM server

 

c.     Extract the file with the following command:

 

# unzip jtzu-1.6.12j.zip -d jtzu

 

d.     Change directory to the newly created /tmp/jtzu directory

 

e.     Edit the runjtzuenv.sh file:

Set the JAVA_HOME to be the bin folder of an IBM JRE as follows: JAVA_HOME=/opt/IBMJava2-142/ (SSIM 4.7 Only)

Set the JAVA_HOME to be the bin folder of an IBM JRE as follows: JAVA_HOME=/opt/ibm/java-x86_64-60/ (SSIM 4.8 Only)

Set the NOGUI option to true as follows: NOGUI=true

Set the DISCOVERYONLY option to true as follows: DISCOVERONLY=true

Set the SILENTPATCH option to false as follows: SILENTPATCH=false

Save the file and close editor.

This is how that file looks:

  

  

f.      Edit the DirectorySearch.txt file:

 

Add the following line to the end of the file:

 

-/eventarchive

 

 Save the file and close editor.

 

 This is how that file looks:

 

 

 

g.     Run the following command:

 

# sh runjtzu.sh 

 

A list of SDK/JRE's will be listed in the command window, as well put into a file called SDKList.txt. 

h.     Again Edit the runjtzuenv.sh file:

 

Set the DISCOVERYONLY option to false as follows: DISCOVERONLY=false

 

Save the file and close editor.

 

This is how that file looks:

  

       

 

i.      Run the following command:


# sh runjtzu.sh

 

The command line patch mode will start. When a warning message is presented, press ENTER to continue.

 

The tool will search then patch all found IBM Java versions that need to be updated.  Detailed output will be displayed.

 

3.     Using the Oracle Java tzupdater tool to update Oracle Java versions on the SSIM server:

 

a.     Download the latest version of the utility from the following location:

 

http://www.oracle.com/technetwork/java/javase/downloads/tzupdater-download-513681.html

 (At the time this article was written, the latest version is tzupdater-1_3_53-2012j.zip )

 

b.     Copy the ZIP file to the /tmp directory on the SSIM server

 

c.     Extract the file with the following command:

 

# unzip tzupdater-1_3_53-2012j.zip

 

d.     Change directory to the newly created /tmp/tzupdater-1.3.42-2011k directory

 

e.     Run the following command:

 

# /opt/Symantec/sesa/Agent/jre/bin/java –jar tzupdater.jar –u –v –f –bc 

 

f.      When complete, you should see “Time zone data update is complete” and the version of tzdata should be 2012j

 

4.     Using the Oracle Java tzupdater tool to update Oracle Java versions on Windows Systems with installed Symantec Event Agents and/or SSIM Console.

 

a.     Download the latest version of the utility from the following location:

http://www.oracle.com/technetwork/java/javase/downloads/tzupdater-download-513681.html

(At the time this article was written, the latest version is tzupdater-1_3_53-2012j.zip)

 

b.     Extract the tzupdater.jar file from the tzupdater-1_3_53-2012j.zip file to these directories, as applicable:

 

SSIM 4.8 For the SSIM Console (default location): C:\Program files\Symantec\Symantec Security Information Manager\jre\bin

Windows System Type : x64-based PC
SSIM 4.8 x64Bit Agent For the Symantec Event Agent (default location): C:\Program Files\Symantec\Event Agent\jre\bin
SSIM 4.8 x32Bit Agent For the Symantec Event Agent (default location): C:\Program Files(x86)\Symantec\Event Agent\jre\bin

Windows System Type : x86-based PC
SSIM 4.8 x32Bit Agent For the Symantec Event Agent (default location): C:\Program Files\Symantec\Event Agent\jre\bin

Note: If the event agent or SSIM console components were installed to non-default locations, you should substitute the non-default installation paths for the default paths listed above.

 

c.     Open a command prompt with administrative privileges, browse to the the folder or folders where the files were extracted and run the following command:

 

java -jar tzupdater.jar -u -v -f -bc

 

When complete, you should see “Time zone data update is complete” and the version of tzdata should be 2011k

 

NOTE: The SSIM “Java Web Start” (JWS) client introduced in SSIM 4.7 MP4 uses the default system Java Runtime Environment (JRE) for execution.   If you are using the SSIM JWS client, the default system JRE needs to be updated in a manner similar to the process covered above. Please see Oracle’s Web Site at http://www.oracle.com/technetwork/java/javase/tzupdater-readme-136440.html for more information and instructions.

 

5.     Using the Oracle Java tzupdater tool to update Oracle Java versions on Linux or Solaris systems with installed Symantec Event Agents.

 

a.     Download the latest version of the utility from the following location:

http://www.oracle.com/technetwork/java/javase/downloads/tzupdater-download-513681.html

(At the time this article was written, the latest version is tzupdater-1_3_53-2012j.zip)

 

b.     Copy the ZIP file to the /tmp directory on the Linux or Solaris system

 

c.     Extract the file with the following command:

 

# unzip tzupdater-1_3_53-2012j.zip

 

d.     Change directory to the newly created /tmp/tzupdater-1_3_53-2012j directory

 

e.     Copy the tzupdater.jar file to the agent directory (default location) with the following command:

 

# cp tzupdater.jar /opt/Symantec/sesa/Agent/jre/bin

 

Note: if the event agent was installed to a non-default location, you should substitute the non-default installation paths for the default paths listed above.

 

f.      Change directory to the /opt/Symantec/sesa/Agent/jre/bin directory (or the appropriate non-default path)

 

g.     Run the following command: (make sure you have the ./ in front to execute the local java bin)

 

# ./java -jar tzupdater.jar -u -v -f –bc

 

When complete, you should see “Time zone data update is complete” and the version of tzdata should be 2012j

 

h. restart the Agent

 

 

 

 


Applies To

SSIM 4.7 and SSIM 4.8

 

Attachments

tzdata-2012j-1.el6.noarch.rpm.md5 get_app
tzdata-2012j-1.el6.noarch.rpm get_app
tzdata-2012j-1.el4.noarch.rpm.md5 get_app
tzdata-2012j-1.el4.noarch.rpm get_app