Sys Maintenance: Populate Local Update Repository

Document created by RSA Information Design and Development on Jul 28, 2016
Version 1Show Document
  • View in full screen mode
 

The Local Update Repository is the staging area in your Security Analytics deployment from which you apply version updates to your hosts. The Live Update Repository is the location to which RSA posts the latest Security Analytics version updates. This topic describes the following two options of populating the Local Update Repository in your Security Analytics deployment from the Live Update Repository:

  • Option 1 - Connect  to the Live Update Repository.
  • Option 2 -  Populate your Local Update Repository by downloading version updates from Secure Care Online (SCOL) and uploading them to your Local Update Repository.

Option 1 - Connect to the Live Update Repository 

Access to the Live Update Repository requires and uses the Live Account credentials configured under Administration > System> Live.

Note: When you make the initial connection with the Live Update Repository repository, you will be accessing all the CentOS 6 system packages and the RSA Production packages. This download of over 2.5GB of data will take an indeterminate amount of time depending on your Security Analytics Server’s Internet connection and the traffic of the RSA Repository. It is NOT mandatory to use the Live Update Repository repository.

To connect to the Live Update Repository:

If you need to use proxy to reach out to the Live Update Repository, you can configure the Proxy Host, Proxy Username, and Proxy Password under Administration > System > Advance. Refer to the RSA Security Analytics System Configuration Guide for detailed information on configuring a Proxy Host.

  1. Navigate to the Administration System view.
  2. Make sure that you are connected to Live.

    1. Select Live Services in the options panel.
    2. In the Live Account panel, make sure that the RSA Status connected indicator displays green:

      ConnectedToLive.png

    3. If you are not connected to Live, click Modify to display the Live Services Account dialog to verify your credentials and Test the connection.
  3. In the System view options panel, select the Updates Settings tab.
  4. Check the Connect to Live Update Repository box and click Apply.

    ConnectToLiveCheckbox.PNG

You can use these version updates to update services running on hosts in the Administration > Hosts view.

Option 2 - Download Updates from Secure Care Online (SCOL) to Local Update Repository

You would need to populate Security Analytics update repository from Secure Care Online (SCOL) for the following reasons:

  • If the version updates that you want are not in your {SA}} server update repository (that is, they are not listed in the Updates Available list for a host under in the Updates column in the Hosts view.
  • If your Security Analytics deployment does not have internet access.

Warning: After you update a host to a version from the Local Update Repository, earlier versions may not be available to update other hosts due to the file structure Security Analytics creates when you the populate the Local Update Repository manually from SCOL. For example, if you updated the Application host to 10.5.1 then to 10.6, 10.5.1 will not be available to update other hosts. You would need to download 10.5.1 from SCOL and manually update the Local Update Repository again .

To populate your Local Update Repository from SCOL:

  1. Make sure that "Connect to Live Update Repository" is not selected.
  2. Download the zip files for the version that you want from SCOL (https://knowledge.rsasecurity.com ) to a local directory.

    1. Log in to SCOL and click SCOLDwnldBtn.PNG in the right panel.
    2. Search for the Service Pack or Patch that you want (for example, RSA Security Analytics 10.5.1.2).

      SCOLDwnldSelect1.PNG

    3. Select the downloads you want (for example, Jan 26| RSA Security Analytics 10.5.1.2 Downloads, highlighted in red).

      The update package downloads page is displayed in SCOL (for example, RSA Security Analytics 10.5.1.2 Downloads).

      SP_Ptch_Upd_Files_SCOL_1.png

    4. In the Caution box, select click here.

      The update package downloads page with the files in the correct format if you run Mixed Mode with your SA Server on 10.6.x.x is displayed in SCOL (for example, RSA 10.5.1.2 Upgrade Zip part 1 of 10).

      SP_Ptch_Upd_Files_SCOL_2.png

    5. Download all the zip files for 10.5.1.2 to your local directory.
  3. In Security Analytics menu, select Administration > System > Updates > Manual Updates.
  4. In the Manual Updates tab, click Upload Files.

    The Upload File dialog is displayed.

    ManualUpdate1a.PNG

  5. Click Icon-Add.png  and browse to the local directory where you put the version update zip files and select these files.

    In the following example, two of the three zip files that constitute the the Service Pack or Patch update package.

    ManUpd1.png

  6. Click Open.

    The Upload Files dialog is displayed with the version update zip files you selected.

    ManUpd2.png

  7. Click Upload.

    The Manual Updates tab is displayed.

    • If you do not have enough disk space in your Local Update Repository to download a version update, the Repository Space Management dialog is displayed with the contents and disk space status of the repository. You can delete a version or version that you do not need to free enough disk space to download the version you want.  (See Troubleshooting 10.6.0 Pre-Update and Update Warnings and Errors in the Host and Services Getting Started Guide).
    • If you did not select all the files for a version update package, the files are displayed in red text and the mouse-over help tells you to upload all the files.

      ManUpd3.png

  8. Click Icon-Add.png  and browse to the local directory where you put the version update zip files and select the rest o the files for this version.

    ManUpd4.png

  9. Click Open.

    The Upload Files dialog is displayed with the version update zip file you selected.

    ManUpd5.png

  10. Click Upload.

    Note: The zip file may be very large and you may have problems uploading it into Security Analytics.  If this occurs, please unzip the file and upload the files in smaller groups.

    The version update files display in the Manual Updates tab.

    ManUpd6.png

  11. Select all files in the Manual Updates list and click Apply.

    This moves the zip files from your temporary directory into the Local Update Repository and makes them available to hosts.

    • If you do not have all the zips files for a version, you can not apply the files to your Local Update Repository (Apply is disabled). 
    • You can only apply one version at a time to the Local Update Repository. This means that if select more than one version, Apply is disabled.

      ManUpd7.png

      Deselect one version to enable Apply.

      ManUpd8.png

    • If you selected too many zip files for the package, or selected an invalid zip file, the files are displayed in red text and Apply is disabled. In the following example sa-10.5.0.2-UpdatePackage-1-of-3-EL6.zip is invalid.

      ManUpd9.png

      Delete this file (sa-10.5.0.2-UpdatePackage-1-of-3-EL6.zip) to enable Apply and apply the package to your Local Update Repository.

    • If there is a file in the temporary directory that is not part of the update package, the file is displayed in red and the following mouse-over help is displayed:

      ManUpd10.png

      Log out of Security Analytics, Log in again, and repeat the upload process. Restarting Security Analytics initializes the temporary directory. 

    • If you select a non-zip file for upload, the following warning is displayed:

      ManUpd11.png

      Click OK and deselect non-zip files.

You are here: Manage Security Analytics Updates > Populate Local Update Repository

Attachments

    Outcomes