Oracle Ksplice

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

CA Privileged Access Manager Server Control (CA PAM SC) and CA Privileged Identity Manager (CA PIM) supports the use of Oracle Ksplice patching without needing to unload the CA PAM SC or CA PIM kernel module.  However, if Ksplice fails to apply the patch while CA PAM SC or CA PIM is installed and running, the workaround described below should be followed to ensure stable operation.   

Environment

Version of Oracle Linux that supports both Ksplice and either CA Privileged Access Manager Server Control or CA Privileged Identity Manager.

Resolution

1. Shutdown CA PAM SC/CA PIM (secons -sk, SEOS_load-u)

2. Install the updated kernel via the rpm package (not using Ksplice tools)

3. Reboot the Oracle Server using the updated kernel/patch

4. Start CA PAM SC/CA PIM (seload)