beautypg.com

1 modification of the remediation packages – IBM Tivoli and Cisco User Manual

Page 454

background image

436

Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

TCRZLSoftwareDisabled directory and edit it with the text editor to match the
content specified in Example 8-16.

Example 8-16 Sample.properties file for TCRMessengerDisabled workflow

WorkflowName=TCRMessengerDisabled

CorequisiteFilesFlag=true

SourceFilename.arrayLength=1
ExeArg.arrayLength=1

SourceFilename[0]=disableMessengerService.bat
ExeArg[0].arrayLength=0

TmfWebUIEndpoint=tcmweb

4. Run the

sputil.sh

command to create the software package block and

publish it on the Web Gateway. To achieve this run the following commands:

cd $BINDIR/tcmremed/download
cd TCRMessengerDisabled
$BINDIR/tcmremed/bin/sputil.sh -p Sample.properties

5. Verify the result of running the tool with the following command:

wlookup -ar SoftwarePackage | grep TCRMessengerDisabled

If the package was created the result will look like below (the number in the
middle of the resulting string will be different in your environment as it is
meant to be unique and is associated with Tivoli Management Region
number).

TCRMessengerDisabled^1.0 1406765930.1.855#SoftwarePackage::Spo#

This concludes the creation of remediation packages required for automatic
remediation of noncompliant clients.

8.4.1 Modification of the remediation packages

Modification of published remediation packages is a part of normal life-cycle
operations for a security policy and related remediation processes. With the
current version of the solution, versioning of packages in not supported. In order
to modify the package you must remove it and then create and publish a new
one.