Turning on liveupdate functionality on Control Compliance Suite and earlier ESM agents

book

Article ID: 161004

calendar_today

Updated On:

Products

Control Compliance Suite Windows

Issue/Introduction

Agents were installed accidentally without turning on liveupdate functionality.  Need to turn on functionality without running GUI to do so.

 

Resolution

The presence and content of the <install path>\.....esm\config\liveupdate.dat file determines whether the agent can accept liveupdates.  Liveupdate functionality is required to be activated on the agent in order to update Security Updates, content updates, product updates, and agent version updates. 

If the liveupdate.dat file does not exist in the ....esm\config folder then creating this file (blank...i.e. with no contents) will enable the agent to take liveupdates from any ESM manager that it is specifically registered to.  In CCS version 11, all CCS Managers in the deployment can then be used to liveupdate the agent unless restricted by routing rules.   Inputting a specific ESM manager or CCS manager's name into the liveupdate.dat file will restrict it to taking liveupdates ONLY from that one manager.  The default is to leave this file blank to ensure that some manager can update the agent if required.

Scripts can be created to create the liveupdate.dat file on an agent where it is missing.  Such scripts can be deployed either via Windows Active Directory (for windows machines) or via some 3rd party product for UNIX machines.  All scripts should be run with superuser authority as the agent should have been installed with the Local Administrator (Windows) or with the root ID (UNIX).  Failure to install the liveupdate.dat file with the appropriate rights could result in failure to push liveupdates to the agent.

 

 


Applies To

Control Compliance Suite version 11 and up.  Enterprise Security Manager version 6.x and up.