Client Automation - Information about Security IntelliRollup deployment
search cancel

Client Automation - Information about Security IntelliRollup deployment

book

Article ID: 206967

calendar_today

Updated On:

Products

CA Client Automation - IT Client Manager CA Client Automation - Patch Manager CA Client Automation - Software Delivery

Issue/Introduction

How works the deployment of Security IntelliRollup like "CA - Office 32Bit - Security IntelliRollup v2101.00" ?

 

Environment

Client Automation 14.*

 

Resolution

1- When a IntelliRollup Patch is accepted in Patch Manager, all single patches in the Rollup are accepted, downloaded and registered as a SD package in ITCM.
 
Example:
"CA - Office 32Bit - Security IntelliRollup v2101.00" was accepted and a lot of SD packages were created for all patches included in this Rollup :
 
 
 
Also a special Software Group of type “Patch Rollup” is created under All Patch Rollups
 
 
 
It contains all SD Packages for the patches included in the Rollup and the SD package “Security IntelliRollup”
 
 
 
 
 
2- Stage the Patch Rollup to the Scalablity Servers. (this step is required).
 
 
This will stage all SD packages included in the Patch Rollup

 

 

 

3- Then Deploy the Patch rollup to the computers

 

Install Procedure of IntelliRollup package is sent to the machine

 

 


4- Target machine executes the DMS script of Security IntelliRollup : 

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 1: UPM - CA - Office 32Bit - Security IntelliRollup v2101.00 - {c8daa7ed-0cac-4330-974a-ce02b544e15c} Silent Install 1.0
SDAgent | |sdjesdprocedureexecu|000533|NOTIFY | SDJESDProcedureExecutorIf::Execute executing DMSCRIPT.EXE c8daa7ed-0cac-4330-974a-ce02b544e15c-0.dms C:\PROGRA~2\CA\DSM\Agent\units\00000001\usd\sdjexec\91DF7052-F626-4091-AF0B-E1FBD574840A.res 
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 1 returns: 0 ExitCode: 0

 

This scripts check which patches are "already installed", "not applicable" and "required to be installed.

In SD Job output there is the details about this and a summary :

[ROLLUP_SUMMARY]

Total no. of patches in the Rollup : 126
No. of patches required to be installed : 9
No. of patches already installed : 33
No. of patches not applicable : 84

 

If there are some patches to install, A Rollup job file is created by the script.

SD Agent detects it and send it to the Scalability Server :

SDAgent | |sdjecontainerif.cpp |002952|NOTIFY | Rollup detector job found. Send patch info to the server
SDAgent | |sdjerollupmanager.cp|000107|NOTIFY | Detection file found. Renaming C:\Program Files (x86)\CA\DSM\SD\tmp\PMDetResultFile.pmd --> C:\Program Files (x86)\CA\DSM\SD\tmp\E446DCEA-4270-438B-B61B-3E1877E813CD.pmw
SDAgent | |sdjerollupmanager.cp|000211|NOTIFY | Deleting file C:\Program Files (x86)\CA\DSM\SD\tmp\E446DCEA-4270-438B-B61B-3E1877E813CD.pmw.

 

 

 

5- SDServer receives the Rollup detector job info and create a .cof file with SD Package to install inside computer directory under SWJORDER

Ex :
C:\Program Files (x86)\CA\DSM\ServerDB\SWJORDER\3D651E59-0AC4-4945-B632-36C4ECF2B6E7

 

 

 

6- SD Agent receives the COF file and install all SD packages.

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 1: UPM - 2020-08 Office - access2010-kb4484385-fullfile-x86-glb - {d89c673e-6d16-4d46-ab7b-e7f3969d5ee9} Silent Install 1.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 1 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 2: UPM - 2020-11 Office - vbe72010-kb4484455-fullfile-x86-glb - {72956f22-24b5-4870-9a45-f95e651afeb5} Silent Install 2.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 2 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 3: UPM - 2020-12 Office - mso2010-kb4486698-fullfile-x86-glb - {cb04b365-1386-4338-abd9-a9e56cbb133e} Silent Install 2.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 3 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 4: UPM - 2020-12 Office - outlook2010-kb4486742-fullfile-x86-glb - {550d9f7c-a84d-443f-89aa-26d2bb4bf6f3} Silent Install 2.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 4 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 5: UPM - 2020-12 Office - powerpoint2010-kb4484372-fullfile-x86-glb - {599d3e23-951f-40c7-a863-3c6bec9e427f} Silent Install 2.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 5 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 6: UPM - 2021-01 Office - ace2010-kb4493143-fullfile-x86-glb - {0cc75a3c-ab0d-4313-8721-60c9e213c01f} Silent Install 2.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 6 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 7: UPM - 2021-01 Office - excel2010-kb4493186-fullfile-x86-glb - {066b2a87-c3e5-48ad-8063-cc9f25b46bbf} Silent Install 2.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 7 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 8: UPM - 2021-01 Office - graph2010-kb4493181-fullfile-x86-glb - {e837cc61-7811-4cea-9b62-60eab61158f7} Silent Install 1.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 8 returns: 0 ExitCode: 0

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 9: UPM - 2021-01 Office - word2010-kb4493145-fullfile-x86-glb - {ae8cea88-9efe-482b-a6c5-4eb414e87011} Silent Install 1.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 9 returns: 0 ExitCode: 0


A reboot is done after last job

210121-11:26:51.3334732L|006484|00001344|SDAgent | |sdjecontainerif.cpp |003500|NOTIFY | Reboot after last job

 

 

 

7- Once reboot is done, SD Agent executes the Configure procedure of IntelliRollup package :

SDAgent | |sdjecontainerif.cpp |001226|NOTIFY | Running SD job 1: UPM - CA - Office 32Bit - Security IntelliRollup v2101.00 - {c8daa7ed-0cac-4330-974a-ce02b544e15c} Silent Configure 1.0
SDAgent | |sdjecontainerif.cpp |001402|NOTIFY | SDjob 1 returns: 0 ExitCode: 0

 

This adds some information in registry key :

SOFTWARE\ComputerAssociates\IntelliRollupPatch

 

8- After all these steps the status of SD Job should be set to OK in DSM GUI

 

 

 

9- In "Installed Packages" folder of the machine we could see all SD packages installed by the Rollup 

And also SD Packages for patches which have been detected as "already installed" but are not yet present in "Installed Packages" folder are added.