IBM Tivoli Intelligent Orchestrator Fix Pack 2, readme file for Windows; Revised 2007/06/12
Copyright statement
About this fix pack
Preinstallation checklist
Installing the fix pack
Recovering from installation errors
Updates to the documentation
Uninstallation information
Known problems and workarounds
Appendix A: Manually backing up the installation
Appendix B: Common tasks
Contacting customer support
Notices and trademarks
- Note:
- Before using this information and the product it supports, read the
information in the section Notices and trademarks.
(C) Copyright IBM(R) Corporation 2007. All rights
reserved. May only be used pursuant to a Tivoli(R) Systems Software
License Agreement, an IBM Software License Agreement, or Addendum for Tivoli
Products to IBM Customer or License Agreement. No part of this
publication may be reproduced, transmitted, transcribed, stored in a retrieval
system, or translated into any computer language, in any form or by any means,
electronic, mechanical, magnetic, optical, chemical, manual, or otherwise,
without prior written permission of IBM Corporation. IBM Corporation
grants you limited permission to make hardcopy or other reproductions of any
machine-readable documentation for your own use, provided that each such
reproduction shall carry the IBM Corporation copyright notice.
No other rights under copyright are granted without prior written
permission of IBM Corporation. U.S. Government Users
Restricted Rights - Use, duplication or disclosure restricted by GSA ADP
Schedule Contract with IBM Corp.
This readme file contains the latest information about installing Tivoli
Intelligent Orchestrator Fix Pack, Version
5.1.0.2.
- Important:
- The fix pack only applies to a regular installation of Tivoli Intelligent
Orchestrator (an installation with WebSphere(R) Application Server as the
application server). A fix pack is not available for a Fast Start
installation.
The following updates are included in Version
5.1.0.2.
Fix Pack 2 includes fixes addressed in Version 5.1.0.1
and customer Authorized Program Analysis Reports (APARs).
- Database schema documentation
- Tivoli Intelligent Orchestrator includes a large number of database
tables. For a subset of these tables, information on the table schema
and relationships is now available, to help you understand how the tables are
used in Tivoli Intelligent Orchestrator. For more information, see
"Database reference" in the
information
center.
- Agent enhancements
- This fix pack includes the following agent enhancements:
- Automated agent upgrade: Tivoli Intelligent Orchestrator
provides a new common agent upgrade method as part of the stand-alone
installation procedure. Depending on how you set a parameter in the
caInstall.rsp response file, and on whether or not the
common agent is already installed, the installation script automatically
performs a stand-alone installation or an upgrade of the common
agent. In addition, the stand-alone installer lets you enable an
OEM installation of the common agent. For more information, see
"Upgrading the common agent" in the
information
center.
- Agent footprint: The disk and memory footprints for the
common agent have been reduced to approximately 173 MB and 50 MB,
respectively.
- Unified patch management infrastructure
- You can now manage patches using Tivoli Intelligent Orchestrator on Tivoli
Configuration Manager endpoints running the Windows(R) operating
system. This is done with the same interface that Tivoli Intelligent
Orchestrator currently uses for endpoints that are part of its scalable
distribution infrastructure. Switching to Tivoli Intelligent
Orchestrator eliminates the need for the Automation Server, which is currently
required for the purpose of patch management in Tivoli Configuration
Manager. For more information, see Tivoli Provisioning Manager for
Software Migration and Coexistence Guide in the Tivoli Provisioning
Manager for Software
information center.
- Tivoli Application Dependency Discovery Manager (TADDM) integration
enhancements
- Tivoli Application Dependency Discovery Manager (TADDM) discovers
resources from the Tivoli Change and Configuration Management Database,
including discovered computers, computer hardware and network resources,
operating systems, software components, and applications such as
DB2(R). You can run the discovery against a set of selected
components, or against multiple computers based on fully-qualified
computer names. The TADDM discovery configuration replaces the Tivoli
Intelligent Orchestrator discovery library reader discovery
configuration. For more information, see "Tivoli Application
Dependency Discovery Manager" in the
information
center.
- Patch automation on HP-UX and AIX(R) operating systems
- A new patch management scenario is available on the HP-UX 11i operating
system. For more information, see "Patch management in the
HP-UX environment" in the
information
center.
Tivoli Intelligent Orchestrator provides support for managing patches on
AIX Version 5.3. On this operating system, the discovery part of
the patch management scenario has been enhanced, which simplifies the endpoint
configuration. You no longer need to add software resources manually,
or set up an AIX software compliance stack. For more information, see
"Patch management in the AIX environment" in the information center.
- VMware automation
- A new VMware automation package is available. This package allows
you to manipulate VMware ESX Server 3.0 and VMware VirtualCenter
2.0 host platforms to perform the following operations:
create/destroy virtual machine, start/stop virtual machine, reboot virtual
machine, and discovery of Virtual Center, Host Platform and virtual
machines.
- Stand-alone Software Package Editor (SPE)
- The Software Package Editor (SPE) is now available as a stand-alone
Java(TM) Web Start application. You must set some properties in the
stand-alone SPE to ensure that it communicates properly with the Tivoli
Intelligent Orchestrator server.
- SOAP commands enhancements
- You can now use SOAP commands to perform the following operations:
- Creating a software package.
- Importing and distributing a software package.
- Installing and uninstalling a software package.
- Other enhancements
-
- Ability to create, edit, and run endpoint tasks without requiring an
activity plan.
- When adding a hub or spoke server to the Tivoli Management Framework (TMF)
environment, you no longer need to specify whether hub or spoke. Both
of them are now identified as Tivoli Management region servers.
- New automation package (SWDDiscCLI.tcdriver) that
provides disconnected command line interface (CLI) commands on the Tivoli
Intelligent Orchestrator server and also a workflow to build software package
blocks (SPB) starting from software package definition (SPD) files.
- Enhanced automation package (TCAFromTMA.tcdriver) that
automates the migration of TMF endpoints to Tivoli Common Agents. This
automation package, which is now available on all supported operating systems,
has been enhanced to build common agent packages and refresh common agent
images.
Fix Pack 2 includes fixes addressed in Version 5.1 and customer
Authorized Program Analysis Reports (APARs).
For a detailed list of fixes and customer APARs included in this fix pack,
download the defects list:
- Go to the IBM Support Web site at http://www.ibm.com/support.
- Under Support topics, click Downloads and
drivers.
- In the Browse product support section, under
Software, click Tivoli.
- In the search box, enter 5.1.0-TIV-TIO-FP0002 and
click Search.
- On the Download page, click on the Tivoli Intelligent Orchestrator
Fix Pack 5.1.0-TIV-TIO-FP0002 link.
- Click on the 5.1.0-TIV-TIO-FP0002-DEFECTS (HTTP)
link.
Fix Pack 2 supports all the hardware and software that is supported by
Tivoli Intelligent Orchestrator V 5.1.0. You can apply
the fix pack to a version 5.1.0.0 or
5.1.0.1 installation.
- Fix pack applies to regular installations only
- You can only apply the fix pack to a regular installation of Tivoli
Intelligent Orchestrator (an installation with WebSphere Application Server as
the application server). A fix pack is not available for a Fast Start
installation.
- Software Package Editor compatibility
- Software Package Editor and the Tivoli Intelligent Orchestrator
installation must be both updated to Fix Pack 2 to work together
properly.
- Topology
- If you have Tivoli Intelligent Orchestrator components distributed in a
multi-node installation, the fix pack must be applied to the application
server node where Tivoli Intelligent Orchestrator is installed and not on the
directory server node.
- Agent manager and common agent version
- The agent manager is updated when you install the fix pack. You
must also upgrade the common agent on all depot servers after you have applied
the fix pack.
- Command changes
- In previous versions of Tivoli Intelligent Orchestrator, the reinit and
reinit-exec commands were available to initialize the data model. These
commands have been deprecated in Tivoli Intelligent Orchestrator Version
5.1. In Version 5.1, the reinit-exec command is used by
the installer but it cannot be used to initialize the database. Running
the command will render your database unusable. To recover, it is
necessary to restore your database.
This readme file uses the following variables to represent directory
paths.
Table 1. Path variables
| Path variables
| Definition
| Default directory
|
| AM_installdir
| Installation directory for the agent manager
| C:\Program Files\IBM\AgentManager
|
| DB2_installdir
| Installation directory for DB2 Universal Database(TM)
|
C:\Program Files\IBM\SQLLIB
|
| IDS_installdir
| Installation directory for Tivoli Directory Server
|
C:\Program Files\IBM\ldap
|
| %WAS_HOME%
| Installation directory for WebSphere Application Server
|
C:\Program Files\IBM\WebSphere\AppServer
|
| %TIO_HOME%
| Installation directory for Tivoli Intelligent Orchestrator
|
C:\Program Files\ibm\tivoli\tio
|
| %TIO_LOGS%
| Log file directory for Tivoli Intelligent Orchestrator
|
C:\Program Files\ibm\tivoli\common\COP\logs
|
You must install and configure all components of Tivoli Intelligent
Orchestrator Version 5.1 before attempting the installation of Fix pack
V 5.1.0.2. Thoroughly review the following list of
prerequisites for installation before proceeding with the installation:
- Identify your current installation situation:
- New Tivoli Intelligent Orchestrator installation
- You must install Tivoli Intelligent Orchestrator 5.1 before you
install the fix pack. For a regular installation, refer to the
Tivoli Intelligent Orchestrator Installation Guide.
- Tivoli Intelligent Orchestrator is currently installed
- The fix pack can be applied to an existing regular installation of Tivoli
Intelligent Orchestrator. After verifying all the prerequisites
described in this section, you can install the fix pack. A fix pack is
not available for a Fast Start installation.
- Verify disk space requirements:
Disk space requirements for the Tivoli Intelligent Orchestrator node are as
follows:
- 2 GB for installation images
- 2.5 GB for extraction of files from installation images
- 3.5 GB for fix pack installation
- 800 MB for the WebSphere Application Server, Java SDK 1.4.2
Cumulative Fix
- Log in to the Tivoli Intelligent Orchestrator server as
tioadmin.
- Verify the currently installed version of Tivoli Intelligent
Orchestrator. The fix pack is compatible with version
5.1.0.0 and 5.1.0.1.
To determine the version of Tivoli Intelligent Orchestrator:
- Go to the %TIO_HOME%\config
directory.
- Open the file named
build-version.properties.
- Verify the information in the field
current.version.
- Verify that Tivoli Intelligent Orchestrator is operational.
- Ensure that you can log in to Tivoli Intelligent Orchestrator.
- Ensure that you can run the workflow named no_operation, before
installing the fix pack. For instructions for running a workflow, see Running a workflow.
- If the workflow was successful, the deployment engine is working properly
and you can continue to the next step in this checklist.
- If the workflow does not run successfully, check the workflow log and
refer to the Tivoli Intelligent Orchestrator Problem Determination
Guide to resolve the error before you proceed with the fix pack
installation.
- Note:
- If you installed Tivoli Intelligent Orchestrator Fix Pack 1, you must start
Tivoli Intelligent Orchestrator at least once before you apply Fix Pack
2. The first time that you start the product after applying a fix pack,
the automation package migration process runs.
- Verify data model requirements
- Verify that no data model objects are associated with the default device
model. If there are data model objects associated with the default
device model, the default-device-model automation package cannot be
reinstalled and the fix pack installation will fail.
To check for associated objects:
- Connect to the database:
- DB2
-
db2 connect to database_name user database_user using password
- database_name
- The name of the Tivoli Intelligent Orchestrator database instance.
- database_user
- The user name of the database owner. The default is
db2inst1.
- password
- The database password for the database owner.
For example:
db2 connect to tc user db2inst1 using pa55w0rd
- Run the following command to check for associated
objects:
db2 "select id from dcm_object where device_model_id = 1"
- If the command returns 0 records, there are no associated objects and no
further action is necessary for this requirement.
- If the command returns one or more records, you must disconnect objects
from the device model. Proceed to the next step.
- Save the output from the command in step 6a.ii so that you can connect the listed IDs in the output with the
data model after fix pack installation.
- Run the following command to disconnect the objects from the data
model.
db2 "update dcm_object set device_model_id = null where device_model_id = 1"
- Verify that the sample:all-objects access domain
exists. If you removed this access domain after installing Tivoli
Intelligent Orchestrator, you must recreate it before installing the fix
pack.
- Connect to the database as described in step 6a.i.
- Run the following SQL query:
select * from access_domain where name = 'sample:all-objects'
- If the command returns one record, then the access domain exists and no
further action is necessary for this requirement.
- If the command does not return any records, you must recreate the access
domain. Proceed to the next step.
- Create a new file called sampleAccessDomain.xml with the
following lines:
<datacenter>
<access-domain name="sample:all-objects">
</access-domain>
</datacenter>
- Import the file you created with the following command:
%TIO_HOME%\tools\xmlimport.cmd file:path\sampleAccessDomain.xml
- If you imported the sample data in venice.xml, you must
remove the sample boot server called Rembo. If this boot
server is in the data model during fix pack installation, the automation
package migration will fail. In the Web interface, click
Inventory > Infrastructure Management > Boot
Servers. Find the sample Rembo boot server and delete
it.
- To ensure successful installation of the language pack, ensure that the
user tioadmin has read, write, and execute permissions for all
directories under %TIO_HOME%\tioprofile\installedApps\hostnameNode01Cell\TCEAR.ear\tcWebUI.war\CSH,
where hostname is the host name of the computer.
- Cancel all running workflows and clear failed, deleted, and canceled
workflows:
- Start Tivoli Intelligent Orchestrator. For more information, refer
to the section, Administering Tivoli Intelligent Orchestrator in
the Installation Guide.
- Open a command window.
- Go to the %TIO_HOME%\tools
directory.
- Run the following commands:
cancel-all-in-progress.cmd
clean-up-deployment-requests.cmd
The log files cancel-all-in-progress.log and
clean-up-deployment-requests.log are created with the
results of the commands.
- Back up your installation:
- Perform a full backup of your current installation. See Backing up your installation.
- Save workflows that you created in the Web interface that you want to
keep. If you create a new workflow in the Web interface, the workflow
is saved in the data model and is associated with the automation package
called default_automation_package by default. A copy of the
workflow is not saved in the automation package file
default_automation_package.tcdriver.
The default_automation_package automation package can cause
problems during the fix pack installation and is therefore deleted during the
installation. If you want to save a workflow that you created in the
Web interface, perform the following steps:
- Click Automation > Workflows.
- Search for the workflow name.
- In the search results, click the workflow that you want to save.
- Click Edit > Export. The file is saved as a
.wkf file.
After the fix pack installation, you can add the workflow back into Tivoli
Intelligent Orchestrator by opening it in the workflow composer and compiling
the workflow. If you have multiple workflows to import, you can add
them to an automation package and install the automation package.
- Back up any customized automation package files in %TIO_HOME%\drivers.
Store the files in a separate location and then delete the copies in
%TIO_HOME%\drivers.
The fix pack installation automatically migrates automation packages provided
with the product. The installation will fail if your customized
automation packages remain in the %TIO_HOME%\drivers
directory.
- Ensure that you have downloaded all the installation
files required for the fix pack:
Table 2. Tivoli Intelligent Orchestrator downloads
| Downloads available from the fix pack Web page.
|
| Operating System
| Tivoli Intelligent Orchestrator
| Agent Manager
| Dynamic Content Delivery Service
|
| Windows
|
5.1.0-TIV-TIO-WIN-FP0002-Enterprise.zip
|
AM_V13_WIN.zip
|
cds_images.zip
|
Table 3. WebSphere Application Server download
- Verify your Tivoli Intelligent Orchestrator downloads by validating their
checksum values.
- Ensure that you have downloaded the file md5.txt from
the fix pack download page. This file contains the correct checksum
files for the downloads.
- Open a Cygwin window.
- For each download, run the following command. Record the returned
value for each file.
md5sum filename
where filename is the name of the file that you are
validating. Compare the returned value with the value
For example, to validate the file
5.1.0-TIV-TIO-WIN-FP0002-Enterprise.zip, run
the command:
md5sum 5.1.0-TIV-TIO-WIN-FP0002-Enterprise.zip
- Compare the returned checksum values with the values in
md5.txt. If the values for a download do not match,
download the file again and then verify the checksum value.
- Create a temporary directory for the fix pack. In these
instructions, the directory is called fp_temp. The
temporary directory must meet these requirements:
- It exists outside the Tivoli Intelligent Orchestrator installation
directory.
- It includes at least 2 GB of free space to contain the fix pack after it
is unzipped.
- The Administrator and tioadmin user must have read
and write permission to this directory.
- Extract the contents of the fix pack download to the temporary
directory. After you unpack the file, you can delete the zipped fix
pack download to free space in the directory if necessary.
- Note:
- If you unzip a download using Cygwin, ensure that all files under the
fp_temp directory have read and write permissions.
- Place the agent manager image file in fp_temp\CAS
without extracting the contents.
- Extract the dynamic content delivery service setup file,
win32\setup.exe, from
cds_images.zip.
- Place the setup.exe file in fp_temp\CDS.
You can then delete cds_images.zip.
- Place the WebSphere Application Server Java SDK 1.4.2
Cumulative Fix SR6 file in fp_temp\JDK.
- Check the currently installed version of the Java runtime environment
installed with WebSphere Application Server.
- Change to the %WAS_HOME%\java\bin directory.
- Run the following command:
java -version
The following example shows the output of the command for the Java runtime
environment provided with a new installation of WebSphere Application Server
6.0.2. The fix pack installer will automatically update
your Java runtime environment, if required. You can compare the current
version information with the version information after the fix pack
installation to verify that the Java runtime environment was updated.
java version "1.4.2"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2)
Classic VM (build 1.4.2, J2RE 1.4.2
IBM Windows 32 build cn142-20050609 (JIT enabled: jitc))
- Verify Tivoli Intelligent Orchestrator is stopped. For
instructions, see Common tasks for Tivoli Intelligent Orchestrator.
- Ensure that WebSphere Application Server is stopped too. For
instructions, see Common tasks for Tivoli Intelligent Orchestrator.
- Ensure that the Tivoli Intelligent Orchestrator database server and
directory server are still running. The database and directory server
must be running during the fix pack installation process to complete the
installation successfully.
- Tivoli Directory Server
- To verify the status of Tivoli Directory Server, run the following
command:
ibmdirctl -D cn=root -w password status
- Microsoft(R) Active Directory
- Click Start > Programs > Administrative
Tools > Manage Your Server. In the list of server
roles, verify that server is currently configured with the Domain
Controller (Active Directory) role.
- DB2
-
To verify the status of DB2:
- Log in as Administrator.
- Open the Services control panel.
- Find the entry for the DB2 instance. If there are multiple DB2
entries, look for the entry with Tivoli Intelligent Orchestrator database
owner. For example, for the default Tivoli Intelligent Orchestrator
database owner db2inst1, the service name starts with DB2
- DB2INST1.
- If the database instance is not started, right-click the database
instance name and click Start.
- Important:
- The fix pack installation makes changes to the database, directory server,
and files in the Tivoli Intelligent Orchestrator installation
directory. Since the fix pack affects multiple product components,
ensure that you create a backup image of the entire Tivoli Intelligent
Orchestrator computer using your standard backup tools and processes.
If you want to recover your current Tivoli Intelligent Orchestrator
installation, or if you encounter an error during installation, you can use
this backup to restore your current installation without Fix Pack 2.
Before you begin back up of the database, ensure that all running workflows
are stopped, and then stop Tivoli Intelligent Orchestrator.
- Ensure that Tivoli Intelligent Orchestrator is running. For
instructions, see Common tasks for Tivoli Intelligent Orchestrator.
- Stop all running workflows.
- Change to the %TIO_HOME%\tools
directory.
- From the command prompt, run the following commands:
cancel-all-in-progress.cmd
clean-up-deployment-requests.cmd
The log files cancel-all-in-progress.log and
clean-up-deployment-requests.log are created with the
results of the commands.
- Stop Tivoli Intelligent Orchestrator.
- Stop all running applications on the Tivoli Intelligent Orchestrator
computer.
Tivoli Intelligent Orchestrator uses data on the directory server for
authentication and authorization services. In Tivoli Intelligent
Orchestrator Version 5.1, all roles and user information are stored on
the directory server. If your directory server is on a separate
computer, ensure that you back up your Tivoli Intelligent Orchestrator data on
the directory server. If you need to restore your current Tivoli
Intelligent Orchestrator installation without Fix Pack 2, the corresponding
directory server data can also be restored on the directory server.
You can use tools provided with Tivoli Directory Server to back up your
directory server data for Tivoli Intelligent Orchestrator.
- On the computer where Tivoli Directory Server is installed, stop Tivoli
Directory Server. Run the following command:
ibmdirctl -D cn=root -w password stop
where password is the password for the root
DN and hostname is the host name of the directory server
computer.
To verify that Tivoli Directory Server is stopped, run the following
command:
ibmdirctl -D cn=root -w password status
- Create the directory where you want to store the backup. For
example d:\backup.
- Change to the IDS_installdir\sbin directory.
- Run the following command to backup the directory server:
idsdbback -k path
where path is the full path where you want to store
the backup. For example:
idsdbback -k d:\backup
A message similar to the following example is displayed.
You have chosen to perform the following actions:
GLPDBB029I The database and configuration files for directory server instance
'ldapinst' will be backed up to 'd:\backup'.
Do you want to....
(1) Continue with the above actions, or
(2) Exit without making any changes:
- Type 1 to confirm the backup.
- Start Tivoli Directory Server. The directory server must be running
to run the fix pack installer. To start the administration daemon run
the command:
ibmdiradm
There are several ways to back up and restore data in Microsoft Active
Directory. If you have an existing process and tools, you should follow
your business processes for backing up and restoring the data.
This documentation describes two approaches:
- Use the Windows backup utility. This method is simpler, but it
backs up and restores the system state of the entire directory server.
- Use the ldifde utility. You can back up and restore
directory server data specific to Tivoli Intelligent Orchestrator, but it
requires more manual configuration steps.
To back up directory server data with the Windows backup utility:
- Click Start > Programs > Accessories >
System Tools > Backup.
- On the Welcome panel, click Next.
- On the Backup or Restore panel, click Backup files and settings
and click Next.
- On the What to Back Up panel, click Let me choose what to back
up and click Next.
- On the Items to Back Up panel, expand My Computer in the left
pane, and then select the System State check box. Click
Next.
- On the Backup Type, Destination, and Name panel, specify the name of the
backup file and the directory where you want to store it. Click
Next. A summary of your selections is displayed.
- Click Finish.
The backup file with the specified name is saved.
To back up directory server data with the ldifde utility:
- Identify the OU in the directory server that you want to back up.
The default OU that is created for Tivoli Intelligent Orchestrator is called
TIO.
- Run the following command to export the data to a backup file.
ldifde -m -f path -d root_DN
- path
- The full path and file name for the backup data.
- root_DN
- The OU and distinguished name (DN) for the directory server.
For example:
ldifde -m -f d:\backup\exportedTIO.ldif -d "ou=TIO,dc=tpmad,dc=example,dc=com"
A file with the specified name is created.
- Open the backup data file in a text editor.
- Passwords are not exported, so you must update user accounts so that empty
password fields can be imported when you restore the data.
In the backup data file, search for each user object using the search term
objectClass: user. The following example shows a
user:
changetype: add
accountExpires: 9223372036854775807
cn: tioappadmin
codePage: 0
countryCode: 0
displayName: tioappadmin
distinguishedName: CN=tioappadmin,OU=TIO,DC=tpmAD,DC=example,DC=com
givenName: tioappadmin
homePhone: (000)111-2223
instanceType: 4
mail: user@company
mobile: (000)111-2223
name: tioappadmin
objectCategory:
CN=Person,CN=Schema,CN=Configuration,DC=tpmAD,DC=example,DC=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
sAMAccountName: tioappadmin
sn: tioappadmin
streetAddress: 123 Example Drive
telephoneNumber: (000)111-2223
userAccountControl: 66048
userPrincipalName: tioappadmin@company
uSNChanged: 54356
uSNCreated: 54354
whenChanged: 20061206184647.0Z
whenCreated: 20061206184647.0Z
For each user object, change the value of userAccountControl
from 66048 to 66080. The following example shows
the change in bold.
changetype: add
accountExpires: 9223372036854775807
cn: tioappadmin
codePage: 0
countryCode: 0
displayName: tioappadmin
distinguishedName: CN=tioappadmin,OU=TIO,DC=tpmAD,DC=torolab,DC=ibm,DC=com
givenName: tioappadmin
homePhone: (000)111-2223
instanceType: 4
mail: user@company
mobile: (000)111-2223
name: tioappadmin
objectCategory:
CN=Person,CN=Schema,CN=Configuration,DC=tpmAD,DC=torolab,DC=ibm,DC=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
sAMAccountName: tioappadmin
sn: tioappadmin
streetAddress: 123 Example Drive
telephoneNumber: (000)111-2223
userAccountControl: 66080
userPrincipalName: tioappadmin@company
uSNChanged: 54356
uSNCreated: 54354
whenChanged: 20061206184647.0Z
whenCreated: 20061206184647.0Z
- Save your changes to the file.
If you need to restore your backed up directory server data, you can use
tools provided with Tivoli Directory Server to perform the task.
- Stop Tivoli Directory Server. Run the following command:
ibmdirctl -D cn=root -w password stop
where password is the password for the root
DN and hostname is the host name of the directory server
computer.
To verify that Tivoli Directory Server is stopped, run the following
command:
ibmdirctl -D cn=root -w password status
- Change to the IDS_installdir\sbin directory.
- Run the following command to restore the directory server data:
idsdbrestore -k path
where path is the full path where the backup data is
stored.
idsdbrestore -k d:\backup
A message similar to the following example is displayed.
You have chosen to perform the following actions:
GLPDBR026I The database and configuration files for directory server instance
'ldapinst' will be restored from files in directory 'd:\backup'.
Note: The data in the currently configured database will be overwritten and will be
lost. The schema files and directory key stash file currently configured will be
overwritten. Unless the -r option was specified the configuration file and
configuration key stash file will also be overwritten.
Do you want to....
(1) Continue with the above actions, or
(2) Exit without making any changes:
- Type 1 to confirm that you want to restore the data.
The following procedures describes how to restore Microsoft Active
Directory data that was backed up using one of the methods described in Backing up Microsoft Active Directory data.
To restore data with the Windows backup utility:
- To restore the directory server data, you must reboot the computer in safe
mode with the domain controller in Directory Services Restore Mode.
- Reboot the computer, and press F8 during the reboot.
- Select Directory Services Restore Mode (Windows domain controllers
only) and continue the reboot in safe mode.
- Click Start > Programs > Accessories >
System Tools > Backup. The Backup or Restore
Wizard is displayed.
- On the Welcome panel, Next.
- On the Backup or Restore panel, click Restore files and
settings and click Next.
- On the What to Restore panel, expand File in the left pane, and
then expand the appropriate backup. Select the System State
check box, and then click Next.
- A summary of your selections is displayed. Click
Finish.
- Restart the computer for the changes to take effect.
To restore directory server data with the ldifde utility:
- Remove existing data in the organizational unit (OU) for Tivoli
Intelligent Orchestrator. The default OU is TIO.
- Click Start > Programs > Control Panel >
Administrative Tools > Active Directory Users and
Computers.
- Select the domain. For example,
dc=tpmad,dc=example,dc=com.
- Select the OU, and then delete it.
- To restore the data, run the command:
ldifde -i -f filename
where filename is the full path and file name of the
file with the backed up directory server data.
- Reset the password of each user.
- Click Start > Programs > Control Panel >
Administrative Tools > Active Directory Users and
Computers.
- Select the domain. For example,
dc=tpmad,dc=example,dc=com.
- Select the TIO OU.
- Select the name of a user and click Reset Password.
- Specify a new password.
- Repeat the above substeps for each user.
If the following error is displayed when you try to restore data with the
Windows backup utility, the computer is not running in Directory Services
Restore Mode. See step 1 of Restoring with the Windows backup utility for more information.
The system state cannot be restored while the Active Directory service is running.
You must first re-boot and select the advanced startup option "Directory Services Restore Mode"
before restoring the system state on this computer.
If the following error is displayed when you try to restore data with the
ldifde utility, the data that you exported for the backup file contains system
specific information. The -m option must be included in the
backup command to perform the restore operation successfully.
Add error on line 2: Unwilling To Perform
The server side error is "The modification was not permitted for security reasons."
0 entries modified successfully
If the following error is displayed when you try to restore data with the
ldifde utility, verify that you have changed the user account settings for all
user objects in the backup file as described in step 4 of Backing up with the ldifde utility.
Loading entries..
Add error on line 3: Unwilling To Perform
The server side error is "Unable to update the password. The value provided for the
new password does not meet the length, complexity, or history requirement of the domain."
- Ensure that you meet all the requirements as described in Preinstallation checklist.
- Ensure that the directory and database are running. For
instructions on checking the status of applications, see Appendix B: Common tasks.
- Ensure that Tivoli Intelligent Orchestrator and WebSphere Application
Server are stopped. For instructions, see Common tasks for Tivoli Intelligent Orchestrator and Common tasks for WebSphere Application Server.
- Log in to the Tivoli Intelligent Orchestrator computer as
tioadmin.
- Open a DOS command window, either locally or using remote desktop.
Running the installer from Cygwin or a remote SSH connection is not
supported.
- Change to the fp_temp directory.
- Run the following command:
- Note:
- Installation options are case-sensitive.
To perform the full fix pack installation, run the upgrade script with
the application server and database passwords.
winUpgrade.bat -WASadmin was_adminID -WASadminPWD was_admin_pwd -DBRuntimePWD runtime_pwd -DBAdminPWD admin_pwd
- was_adminID
- The WebSphere Application Server administrator ID. The default is
wasadmin.
- was_admin_pwd
- The WebSphere Application Server administrator password. The
default is wasadmin.
- runtime_pwd
- Specify the database user password that was used to install Tivoli
Intelligent Orchestrator.
- admin_pwd
- Specify the database instance owner password that was used to install
Tivoli Intelligent Orchestrator.
- When the installation is complete, verify that the Java SDK
1.4.2 SR6 update for WebSphere Application Server was
installed.
- Change to the %WAS_HOME%\java\bin directory.
- Run the command java -version. The following version
number is displayed in the output if the update was successful:
cn142ifx-20061121
The log file for the update is located in %WAS_HOME%/logs/update/6.0.2-WS-WASJavaSDK-platform-FP00000017.
- Start Tivoli Intelligent Orchestrator. For startup instructions,
see Common tasks for Tivoli Intelligent Orchestrator.
The first time that you start the product after installing the fix pack,
the automation package migration process runs and updates automation packages
provided with Tivoli Intelligent Orchestrator.
- Note:
- During the migration process, the deployment engine is not available to run
workflows. Wait until the __master_tcdriver_update workflow
has finished running before you perform other actions.
- If you disconnected data model objects from the
default device model in step 6 of Installation requirements, you can now reconnect the objects.
- Connect to the database using the same command that you used in step 6 of Installation requirements.
- Run the following command to connect the objects.
db2 "update dcm_object set device_model_id = 1 where id in (id1, id2, ...)"
Replace id1, id2, ... with a
list of the object IDs separated by commas. Use the object IDs that you
saved in step 6 of Installation requirements.
- If you created customized automation packages, you must load them
separately after Tivoli Intelligent Orchestrator automation packages are
migrated.
- Stop Tivoli Intelligent Orchestrator. For instructions, see Common tasks for Tivoli Intelligent Orchestrator.
- For each automation package that you want to load, copy the directory
%TIO_HOME%\eclipse_FP1\plugins\package_name
to %TIO_HOME%\eclipse\plugins,
where package_name is the name of the customized
automation package.
- Start Tivoli Intelligent Orchestrator so that the customized automation
packages are loaded.
Use the following procedure to upgrade IBM Tivoli Provisioning Manager for
OS Deployment Embedded Edition to the latest version. All of your
existing operating system images are preserved during the upgrade.
In Tivoli Intelligent Orchestrator Version 5.1, IBM Tivoli
Provisioning Manager for OS Deployment Embedded Edition was called Rembo
Toolkit 4.0.
To upgrade IBM Tivoli Provisioning Manager for OS Deployment Embedded
Edition:
- Click Inventory > Manage Inventory >
Computers and find the computer that has the IBM Tivoli
Provisioning Manager for OS Deployment Embedded Edition server
installed.
- Click on the computer name and select the Software tab.
- Next to TPM for OS Deployment EE, click Actions >
Upgrade. The upgrade will take a few moments to
complete.
- Note:
- In Tivoli Intelligent Orchestrator Version 5.1, the software name to
upgrade is Rembo Toolkit 4.0.
Important: In Tivoli Intelligent Orchestrator Version
5.1 and fix pack 1, the sysprep.exe and
setupcl.exe files were located in the following
directory: %TIO_HOME%\repository\rembo\<win_subdir>, where
<win_subdir> is one of the following:
- win2k\32-bit, for Windows 2000 Server 32-bit
- win2k\64-bit, for Windows 2000 Server 64-bit
- win2k3\32-bit, for Windows Server 2003 32-bit
- win2k3\64-bit, for Windows Server 2003 64-bit
- winxp\32-bit, for Windows XP 32-bit
- winxp\64-bit, for Windows XP 64-bit
After you upgrade to Tivoli Intelligent Orchestrator fix pack 2, move these
files to the following directory:
%TIO_HOME%\repository\windows-operating-system\<win_subdir>.
The concurrency level determines the number or parallel deployments that
are permitted within a task. Before Fix Pack 2, the default level was
set to 1. The fix pack installer changes the currently configured value
to 5. If you were using a different concurrency level before applying
the fix pack, you should reconfigure the concurrency level.
- Log on to the Tivoli Intelligent Orchestrator Web interface.
- Click System Management > Global Settings.
- On the Variables tab, locate the default concurrency
level variable and click Actions >
Properties.
- Change the value and click Save.
This section describes important updates to endpoints for Fix Pack
2.
After you have completed installation of the fix pack, you must upgrade
older versions of the common agent to version
1.3.2.11. The common agent must be upgraded on
both the depot servers and the endpoints that are participating in the
software distribution process.
Either one of the following older common agent versions can be
upgraded:
- 1.3.0.26, provided with Tivoli Intelligent
Orchestrator 5.1.
- 1.3.1.13, provided with Tivoli Intelligent
Orchestrator 5.1.0.1 (Fix Pack 1).
Use the following procedure to upgrade the common agent on multiple
computers. Refer to the topic "Upgrading the common agent" in
the
information center for additional details about
upgrading the common agent.
- Ensure that enough free disk space is available on endpoints for the
upgrade.
- 80 MB in the tivoli/ep directory
- 180 MB in the agent directory for temporary files.
- Log on to the Tivoli Intelligent Orchestrator Web interface.
- Click Task Management > Favorite Tasks.
- In the Table Filtering list, select Workflow Task, and then
click Create. Follow the instructions in the wizard to
create your workflow task:
- On the Introduction page, click Next.
- On the Select Workflow page, type a name and a description for your task,
and then select the TCA_Device_Upgrade.wkf workflow. Click
Next.
- On the Define Workflow Parameters page, select DeviceID.
Click Next.
- Review your choices on the Summary page, and click
Finish.
- Run the favorite task that you have just created:
- On the Favorite Tasks page, in the task list, find the workflow task that
you have created. In that row, click Actions >
Run. Follow the instructions in the wizard to run the task
on multiple endpoints.
- On the Select Target Systems page, select the target endpoints for the
task. Click Next.
- On the Favorite Task Parameters page, edit the task parameters as
required. Click Next.
- On the Schedule page, select Now to run the task immediately,
or schedule the task to run at a specified date and time. Specify the
notification settings for the task, and then click Next.
- Review your choices on the Summary page and click
Finish.
An existing Tivoli Intelligent Orchestrator computer that has been upgraded
with the fix pack might have an updated architecture bus parameter for the
operating system software configuration template. The default is value
is 32-bit.
- Note:
- A capture image task will fail if the architecture bus parameter is empty or
incorrect.
If the upgraded computer is a 64-bit computer, run the Windows
Configuration Discovery again to populate the correct parameter value.
- Click Inventory > Manage Discovery > Discovery
Configurations.
- Next to the Windows Configuration Discovery, click Actions >
Run.
- Specify a unique name for this discovery task.
- Display the target computer list By Computer and select the
computer that you will use to capture the image.
- Specify if you want the task to run immediately or schedule for a later
time.
- Click Submit.
The Windows Configuration Discovery will discover the attributes of the
computer.
To verify that the correct architecture bus parameter value was populated,
perform the following steps:
- Click Inventory > Manage Inventory >
Computers and select the computer.
- Click the Software tab.
- Click the Windows software installation.
- On the Software Installation page, expand Configuration
Templates.
- Verify that the parameter ArchitectureBus is in the
configuration template and has a value of either 32-bit or
64-bit. The parameter and a valid value are required for
image capture to work successfully.
If Automation Package Developer Environment is installed in Eclipse on a
separate computer, perform the following steps to upgrade it.
- Ensure that Eclipse is not running.
- Copy the archive file %TIO_HOME%\tools\apde.zip
to the remote computer.
- Extract the contents of the archive file to the directory where Automation
Package Developer Environment is installed. For example
C:\apde. The contents of the archive file are placed
in the eclipse\plugins subdirectory.
- Start Eclipse with the -clean option so that the plug-in
changes are applied:
eclipse.exe -clean
- Exit Ecplise.
The following automation packages are replaced during fix pack
installation.
- zVM.tcdriver
- The fix pack installation uninstalls this automation package and installs
zVM_Server.tcdriver to replace it.
- AIX_FIX.tcdriver
- This automation package is obsolete and is replaced by
AIX_PATCH.tcdriver. To remove the any data model
objects used by the AIX_FIX.tcdriver, run the
CleanUP_AIX_FIXMigrateDCM_5_1_0_1 workflow after the fix pack
installation. For instructions on running a workflow, see Running a workflow.
After you have installed the fix pack, you must reinstall automation
packages that you have created or customized. If you have made changes
to data model objects that are imported by an automation package since
installing it in Version 5.1.0.0, you can create
migration workflows to automate the required changes to the data model
objects.
For more information, see "Migrating customized automation
packages" in the
information center.
The following main steps occur during installation of the fix pack:
- Installation of fix pack files.
- Post-installation configuration such as migration of directory
server data and migration of automation packages.
- Upgrade of the agent manager.
- Upgrade of the dynamic content delivery service.
The fix pack uninstaller can revert the changes made in step 1, but it
cannot revert any of the changes made after that step. An uninstaller
is not available for the other steps. If an installation error occurs
during any of these steps, restore the backup of Tivoli Intelligent
Orchestrator that you created before you applied the fix pack, and then try
the fix pack installation again.
To recover from an installation error:
- Record any error messages that you received and address the errors.
- Check the log files for information about the error and possible recovery
actions.
- Fix pack installer
- %TIO_HOME%\logs\update
- Data migration
- %TIO_LOGS%\fixpack
- WebSphere Application Server
- %WAS_HOME%\logs\update
- The agent manager
- The AM_installdir\logs
directory.
- The dynamic content delivery service
- The default location for the dynamic content delivery service logs
is:
C:\Program Files\IBM\tivoli\common\ctgde\logs
- Check Known problems and workarounds for possible installation errors and recovery
actions.
- Restore the system image that you created for the Tivoli Intelligent
Orchestrator computer in Backing up your installation using your standard backup tools and processes.
- If your directory server is on a separate computer, ensure that you also
restore your backed up directory server data as described in Backing up directory server data.
- Apply the fix pack again.
For information about uninstalling, see Uninstallation information.
During fix pack installation, the following automation packages are
uninstalled:
- default_automation_package.tcdriver is uninstalled to
prevent workflow name conflicts with the original workflows provided with
Tivoli Intelligent Orchestrator.
- discovery-library.tcdriver and
zVM.tcdriver (obsolete)
If one of these automation packages cannot be uninstalled because it is not
currently installed, an error message similar to the following example appears
in postinstall.log. You can ignore this error message.
2007-03-16 02:23:27,592 ERROR COPTDM172E An error occurred when the system uninstalled the "zvm" driver because the driver status must be installed.
During fix pack installation, the Tivoli Intelligent Orchestrator
information center is updated to Version 5.1.0.2.
You can also view the updated Tivoli Intelligent Orchestrator information center.
The following subsections highlight additional important changes to the
documentation.
Updated Tivoli Intelligent Orchestrator publications are available in the
fix pack image in the GA_guide subdirectory.
The preinstallation checklists for installation of Tivoli Intelligent
Orchestrator Version 5.1.0.0 are also updated and are
available in the updated Tivoli Intelligent Orchestrator Installation
Guide or as standalone checklists in preinstall subdirectory
of the fix pack image.
The user tioadmin is normally created for you by the Fast Start
installer. If you want to create the user tioadmin before
you start the installation, ensure that the user is a member of the
Administrators group. The tioadmin user must be a member of
the Administrators group to start Tivoli Intelligent Orchestrator after
installation.
The DCMUpdate command that is used to update the properties of
an object in the data model must use propertyID rather than
DCM_Object_ID for the update.
In the "Conditional statements" topic in the information center, the last example should be replaced
with:
In the following example, the value of propertyID determines if a the
Property_Name property exists and belongs to Server_ID. If the property
is not found, it is added to the data model. If the property exists,
the value is updated.
var propertyID = DCMQuery(/property[@key=$Label_Key AND @componentid=$Component_Id AND @dcmobjectid=$Server_ID])
if Jython(not propertyID) then
DCMInsert parent = DCMQuery(/server[@id=$Server_ID]) <<EOI
<property component="$componentName" name="$Property_Name" value="$Property_Value" />
EOI
#--
else
DCMUpdate parent = DCMQuery(/property[@id=$propertyID]) <<EOU
<property component="$componentName" name="$Property_Name" value="$Property_Value" />
EOU
#--
endif
In the "Updating objects" topic in the
information
center, the example provided in Step 5 should be replaced with:
#Workflow to update the properties of a software stack
#Name worklfow, define locale workflow
workflow test_update_property LocaleInsensitive
#determine the componentID
var componentID = DCMQuery(/kanahacomponent[@name=$componentName])
#determine the stack software moduleID
var stackSoftwareModuleID = DCMQuery(/StackSoftwareModule [@name="Windows2000"])
#Updates the subnet mask to the IP address
#using the DCMUpdate command
var propertyID = DCMQuery(/property[@key="snmp.community.read" AND @componentid=$componentID AND @dcmobjectid=$stackSoftwareModuleID])
DCMUpdate parent = DCMQuery(/property[@id=$propertyID]) <<EOF
<property name="snmp.community.read" value="admin" component="$componentName" >
EOF
The Patch management link on the Tutorials page on the Web
interface and the Show me link in the "Managing patches in
large environments" topic in the information center installed with Fix
Pack 2 point to incorrect files. To fix these links:
- Change to the %TIO_HOME%\help\eclipse\com.ibm.etools.viewlet.doc
directory.
- Create a subdirectory called swf.
- Extract the file TPM51FP2_PatchMgmt_viewlet_swf.html
from the file doc.zip to the swf
directory.
- Open the file TPM51FP2_PatchMgmt_viewlet_swf.html in a
text editor.
- Find and replace the following text:
Find: Patch_management_FINAL_DRAFT.swf
Replace with: TPM51FP2_PatchMgmt_viewlet.swf
- Make a copy of the modified file
TPM51FP2_PatchMgmt_viewlet_swf.html and save it as
TPM51FP2_PatchMgmt_viewlet_viewlet_swf.html in the
swf directory.
- From the %TIO_HOME%\help\eclipse\com.ibm.etools.viewlet.doc
directory, add both the TPM51FP2_PatchMgmt_viewlet_swf.html
and TPM51FP2_PatchMgmt_viewlet_viewlet_swf.html files to
doc.zip. Ensure that information about the relative
path (swf) is included when you add the file.
- If you have already started Tivoli Intelligent Orchestrator, clear the
information center cache and restart Tivoli Intelligent Orchestrator:
- Stop Tivoli Intelligent Orchestrator.
- Change to the %TIO_HOME%\help\configuration
directory.
- Delete all files except config.ini.
- Start Tivoli Intelligent Orchestrator.
When you start Tivoli Intelligent Orchestrator again, the animation is
available from the Tutorials page on the Web interface and the "Managing
patches in large environments" tutorial in the information center.
This section describe how to uninstall files installed by the fix pack
installer. This process only reverts files installed by the fix pack
installer. It does not revert migrated data or upgraded core
components.
- If you only need to revert the changes made by the fix pack installer, use
the information in this section.
- If the fix pack installation performed any additional steps after running
the fix pack installer, the only way to revert all changes is to restore your
backup of the Tivoli Intelligent Orchestrator installation before you applied
the fix pack. For more information, see Recovering from installation errors.
Before you uninstall the fix pack:
To uninstall the fix pack:
- From a command prompt, log in to the Tivoli Intelligent Orchestrator
server as Administrator
- On the Tivoli Intelligent Orchestrator server, ensure that both the
%JAVA_HOME% and %WAS_HOME%
environment variables are set.
- Note:
- The %JAVA_HOME% variable is set to %WAS_HOME%\java
- Change the directory to fp_temp\installer where
fp_temp is the directory in which you unzipped the fix
pack ZIP file.
- From fp_temp\installer, run the following command,
from a Windows Command prompt, to launch the uninstallation using the silent
mode:
updateSilent.bat -fixpack -uninstall %TIO_HOME% tio51_fp2_win_Enterprise fp_temp\installer
For example, to uninstall the fix pack on Windows systems:
updateSilent.bat -fixpack -uninstall "C:\Program Files\IBM\tivoli\tio" tio51_fp2_win_Enterprise "C:\fp-temp\installer"
- The system completes the installation. A successful installation
gives an error level of 0. Review the log files located in %TIO_HOME%\logs\update
directory for any errors.
After you have completed the uninstallation procedure, you must redeploy
the EAR (expanded archive) files on the WebSphere Application Server.
To redeploy the EAR files:
- Log in to the Tivoli Intelligent Orchestrator server as user
tioadmin.
- Start the WebSphere Application Server. For instructions, see Common tasks for WebSphere Application Server.
- Run the command given below from a Cygwin command prompt:
"%TIO_HOME%/tools/was_deploy.sh" username password server base_DN
For example:
"%TIO_HOME%/tools/was_deploy.sh" wasadmin wasadmin server1 "dc=mycompany,dc=com"
- Note:
- Replace the variables in the command with the correct values:
- was_user with your WebSphere Application Server user
name
- was_pwd with your WebSphere Application Server
password
- server with the Application server name
- base_DN with the Base Distinguished Name
of the Application server. The correct value for base_DN can
be obtained from the XML tag <root> in %TIO_HOME%/config/user-factory.xml.
- Stop the WebSphere Application Server. For instructions, see Common tasks for WebSphere Application Server.
This section describes known limitations in this release of Tivoli
Intelligent Orchestrator. Where applicable and known, suggested
workarounds are identified.
This section provides workarounds to problems that you might encounter
during the installation of the fix pack.
When starting Tivoli Intelligent Orchestrator V 5.1.0 from
the Windows Services menu, the following error occurs:
Could not Start the IBM Tivoli Intelligent Orchestrator service on Local Computer
Error 1069: The service did not start due to a logon failure
The tioadmin user must have Log On As Service privileges.
To grant the privilege:
- Login as tioadmin.
- Go to Start > Programs > Administrative tools.
- Start Local Security Policy Management console.
- In that console go to: Local Policies >User Rights
Assignment.
- Add tioadmin user to the Log on as service
property.
When you run the winUpgrade.bat script, an error message
might be displayed:
ERROR: unable to determine the installation location of CDS, exiting.
To fix the error:
- Find the location of the vpd.script file on your
system. This location must contain the path
\cds_manager\Gen1\_vpddb\.
- In the winUpgrade.bat file, locate the section:
# environment checks & initialization
- In that section, locate the CDS_VPD_FILE variable that
corresponds to the operating system you are running (64-bit or
32-bit) and change its value to the location found in Step 1.
- Save and close the file.
- Run the updated winUpgrade.bat script again.
After starting Tivoli Intelligent Orchestrator for the first time,
deployment requests for workflows remain in the Create state and do
not run.
The first time that you start Tivoli Intelligent Orchestrator after the
applying the fix pack, the deployment engine runs a workflow to migrate
automation packages provided with the product to the current fix pack
level. During this migration process, the deployment engine does not
accept any other deployment requests.
When the migration process is complete, the deployment engine starts to
process deployment requests in the queue.
If the migration process fails, the deployment engine will not start and
workflows will not run. You must restore your backup of Tivoli
Intelligent Orchestrator and try to apply the fix pack again.
If your Tivoli Intelligent Orchestrator environment is configured to run
both of the following types of Windows Update Agent discovery scans:
- Discovery scans that originate from the Tivoli Intelligent Orchestrator
for server-based patch management.
- Discovery scans that originate from endpoints for client-based
remediation.
Ensure that you schedule these discovery scans so that the scan periods do
not overlap. If both discovery scans are running at the same time, the
discovery scans might fail.
In environments that contain Tivoli Management Framework (TMF) endpoints,
no errors are reported when an old version of Windows Update Agent (WUA) is
installed on the endpoints. After scanning for missing patches, Tivoli
Intelligent Orchestrator reports success even though some endpoints do not
have the minimum required version of WUA installed.
Before scanning for missing patches, ensure that the latest version of WUA
is installed on the endpoints. For information on how to install WUA,
see the "Installing WUA on endpoints" topic in the information center.
When attempting to install certain Windows patches, the installation
reports success, but the Windows Update Agent (WUA) scan does not find the
patch installed and therefore does not add it to the Software tab for that
computer. This problem typically appears when attempting to install
patches that have been superseded by newer ones. This known issue is
caused by a WUA problem.
Avoid approving or installing Windows patches that have been
superseded.
If the Track traffic setting is set to Yes for the
Windows Firewall compliance check, and you are running the check on
an endpoint that is using Windows Native Firewall, the following
recommendation may be generated even if the firewall is active:
Change the value of the "Track traffic" setting for the firewall software "Windows Native Firewall" to match the compliant value "true".
You can ignore this recommendation.
A user with the software operator role is unable to view the Publish
feature on the Web interface.
To allow the user to publish files to depot servers, assign the permission
Depot - Manage to the software operator role:
- Click System Management > Manage Security >
Security Roles.
- Click on the Depot - Manage permission in the Available
Permissions list and click Add.
- Save your changes.
Software distribution and installation might fail for users that do not
have the Device.ManagerSoftware permission on all of the
selected target computers.
To be able to successfully distribute and install software products using
the Software Management > Install > Software
Products option, the user must have the
Device.ManagerSoftware permission on all of the selected
target computers. If the user does not have this permission on one of
the selected target computers, the software distribution and installation
might fail on all of the targets.
To assign a static IP address to a Windows 2000 computer, the network
interfaces of the target computer must be physically connected and
network-enabled. Interfaces that are not enabled on the network
will not be fully configured.
This limitation is caused by a known issue with Windows 2000. For
more information, refer to article KB815322 on the Microsoft Web site.
If you receive the following error when you try to retrieve a list of
packages in Software Package Editor, here is some additional information about
the error and how to diagnose it.
DISSP6047E An error occurred while retrieving the list of packages. See the log for details.
Explanation: An error occurs when you try to retrieve the
list of packages by selecting Open > Open from
repository. This problem is caused by communication problems, and the
operation is not performed.
Verify the following conditions:
- The connection to Tivoli Intelligent Orchestrator by checking the
hostname, the port, and the URL configured on the Preferences page of the
Eclipse-based Software Package Editor. Try to ping the host using the
configured hostname and port from the Software Package Editor computer.
- The presence of a firewall. Ensure that the firewall is not
blocking connections on the Tivoli Intelligent Orchestrator port.
- Tivoli Intelligent Orchestrator is up and running. For information
about checking status, see Common tasks for Tivoli Intelligent Orchestrator.
For additional details, see the workflow log in the Tivoli Intelligent
Orchestrator Web Interface, and the swdisGUI.tr1 and
swdisGUI.tr2 trace files. If you are using the
Eclipse-based Software Package Editor, you can find these trace files in the
Eclipse installation directory. If you are using the Web Start Software
Package Editor, you can find these trace files in the Web Start cache memory
directory.
When you exclude targets from an activity plan at the plan level using a
target file, the excluded targets are displayed when you submit the
plan. This behavior is a limitation of the user interface and does not
affect the way that the activity plan is processed.
Registration of device manager endpoints causes an OutOfMemory
error. The error appears in the WebSphere Application Server log file
%TIO_HOME%\tioprofile\logs\server1\SystemOut.log.
Reduce the maximum number of open connections and change the heap
size.
- Log on to the WebSphere Application Server administration console
at:
https://hostname:9043/ibm/console/logon.jsp
- Change the number of open connections.
- Click Servers > Application servers >
server_name > Ports.
- Click View associated transports for the appropriate
port.
- Change the Maximum open connections setting to
2500.
- Change the maximum heap size:
- Click Servers > Application servers >
server_name > Process Definition > Java
Virtual Machine.
- Change the Maximum Heap Size setting to 1024
MB.
Files that have been published to a depot server might be lost when the
common agent and subagents are upgraded on that depot server.
Consequently, the distribution and installation of the published files to
endpoints fail with a "File not found" error.
Before upgrading the common agent and subagents on the depot server,
unpublish all files from the depot and ensure that all tasks are
completed. Then, upgrade the common agent on the depot server, publish
the files again, and distribute and install files on the endpoints.
If you use platform-dependent variables when you specify the path of the
source files contained in a software package block (SPB) built on UNIX(R)
or Linux(R), and you download this SPB file on Windows, the SPB file might
get corrupted. The same behavior occurs if you build the SPB file on a
Windows and you download it on UNIX or Linux.
If you are using a Windows XP computer as your Microsoft patch download
server, you may receive an Out of Disk Error when attempting to download the
32-bit version of Windows 2003 Service Pack 2.
Install the service pack manually:
- Using the Package Path provided in the Software Installable
page for the patch, download the service pack manually to a location on the
Tivoli Intelligent Orchestrator server. The following location is
recommended:
$TIO_HOME/repository/wua/updates/<installable_ID>, where
<installable_ID> is the software installable ID. For
example, if the installable ID is 3603, the path is
$TIO_HOME/repository/wua/updates/3603.
- In the Software Installable page, click Edit >
Properties.
- Set the Installable Path to the relative path of the location
from Step 1, for example, /wua/updates/3603.
- Set File Repository to LocalFileRepository and click
Save.
As an alternative to installing the service pack manually, use Windows
Server 2003 or Windows 2000 Server as the operating system on the Microsoft
patch download server.
When you run an inventory scan with the Use software signatures
option, the Solaris operating system may not be discovered or listed in the
Software tab for your target machine.
This may occur because the Solaris operating system revision is not covered
in the current Solaris signature that is available in the Tivoli Intelligent
Orchestrator software signature catalogue. This is a known problem with
the Tivoli Intelligent Orchestrator software signature scan.
To work around this problem, you need to manually create a Solaris
signature based on the information reported by your Solaris machine.
To create a Solaris operating system signature and associate it with a
software definition:
- Check the Solaris information on your Solaris target machine.
- Log on to the Solaris target machine.
- From the command line, run the following command to check the operating
system level: pkginfo -l SUNWcsr
- You may see the following output from the command line:
-bash-3.00# pkginfo -l SUNWcsr
PKGINST: SUNWcsr
NAME: Core Solaris, (Root)
CATEGORY: system
ARCH: sparc
VERSION: 11.10.0,REV=2006.02.21.15.53
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: core software for a specific instruction-set architecture
PSTAMP: on10-patch20060403161831
INSTDATE: Mar 30 2007 14:18
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES: 447 installed pathnames
48 shared pathnames
13 linked files
108 directories
86 executables
5982 blocks used (approx)
- A signature can be created based on the concatenation of these
strings: NAME:Core Solaris, (Root), VERSION:
11.10.0,REV=2006.02.21.15.53
and VENDOR: Sun Microsystems, Inc. You must include a
white space between each of the strings. For example, a signature
string can be created as follows: Core Solaris, (Root)
11.10.0,REV=2006.02.21.15.53 Sun
Microsystems, Inc.
- Add a new Solaris signature to the %TIO_HOME%\xml\samplebook\IBM-software-custom-signature.xml
file as shown below:
<Signature name="Solaris 10 revision 2006.02.21.15.53">
<Metadata>
<version>2006.04.26.11.16.43</version>
<schemaVersion>1.0</schemaVersion>
<component>
<hdType>OS</hdType>
<hd>SOLARIS</hd>
<os>SOLARIS</os>
<name>Solaris</name>
<version>10</version>
</component>
</Metadata>
<Platforms>
<Platform type="SOLARIS"/>
</Platforms>
<Variable name="IS_INSTALLED" export="true">
<PackageInfoEqual provider="os" code="SUNWcsr"
value="Core Solaris, (Root) 11.10.0,REV=2006.02.21.15.53 Sun Microsystems, Inc." />
</Variable>
</Signature>
- Save your changes, then load the new signature into Tivoli Intelligent
Orchestrator by running the following commands:
- For Windows: cd %TIO_HOME%\xml\samplebook\, then
"%TIO_HOME%\tools\importSoftwareSignature.cmd"
IBM-software-custom-signature.xml true
- For other platforms: cd $TIO_HOME/xml/samplebook, then
$TIO_HOME/tools/importSoftwareSignature.sh
IBM-software-custom-signature.xml true
- To associate the newly created signature with a Solaris definition:
- Log on to Tivoli Intelligent Orchestrator.
- Click Software Management > Manage Software Catalogue
> Software Signatures.
- Select Solaris as your Operating System and then search for the
signature name (for example, Solaris 10 revision
2006.02.21.15.53).
- Click the Actions button, then Associate Software
Definition.
- In the Search field, type Solaris and find the
correct Solaris definition to associate with the newly created
signature.
- Save your changes.
A known issue on Solaris platforms affects patch management in the Solaris
environment. For more information, go to http://sunsolve.sun.com/search/document.do?assetkey=1-26-101688-1.
When scanning for missing patches for the first time, if selecting
Latest for current TL as the Maintenance Strategy Model,
the discovery scan finds a missing patch called AIX_Latest.
After installing the patch on the endpoints and receiving confirmation that it
installed successfully, subsequent scans find the AIX_Latest patch
missing again.
This known limitation is caused by a Service Update Management Assistant
(SUMA) issue.
If you do not have the ability to create a complete image of your Tivoli
Intelligent Orchestrator computer, follow the information in this section to
back up your database and save the current Tivoli Intelligent Orchestrator and
core component installation directories.
- Note:
- A full Tivoli Intelligent Orchestrator image is the supported backup
method.
Before you begin to back up or restore the database, ensure that all
running workflows are stopped, and then stop Tivoli Intelligent
Orchestrator.
- Log on as tioadmin.
- Ensure that Tivoli Intelligent Orchestrator is running. For
instructions see Common tasks for Tivoli Intelligent Orchestrator.
- Stop all running workflows.
- Change to the %TIO_HOME%\tools directory.
- From the command prompt, run the following commands:
cancel-all-in-progress.cmd
clean-up-deployment-requests.cmd
The log files cancel-all-in-progress.log and
clean-up-deployment-requests.log are created with the results of the
commands.
- Stop Tivoli Intelligent Orchestrator. For instructions see Common tasks for Tivoli Intelligent Orchestrator.
- Stop all running applications on the Tivoli Intelligent Orchestrator
server.
To back up the database:
- Ensure that you have completed the steps in Before backing up or restoring the database.
- Open the file %TIO_HOME%\config\dcm.xml to
verify the database name and user name. The name element
contains an alias for the database name, and the username element
contains the user name. This information is specified Tivoli
Intelligent Orchestrator installation.
- Log on as Administrator.
- Open a DB2 command window.
- Run the following command to check for other running applications:
db2 list applications
- If the command lists other applications, run the following command to
disconnect them:
db2 force applications all
- If you are not connected to the database, use the db2 connect
command to connect to the database.
- Back up the database with the following command:
db2 backup db db_name user user_name using password to location
- db_name
- The name of the database.
- user_name
- The user name of the user performing the backup.
- password
- The password used to authenticate the user name.
- location
- The location that the database backup will be stored.
- The full path of the location is required. The specified directory
must already exist.
- The instance owner user must have write permissions to the specified
path.
- Consider saving the backup in a location that is accessible from the
Tivoli Intelligent Orchestrator computer so that you do not need to transfer
the backup to a second location when you are performing backup and restore
operations.
For example:
db2 backup db TC user db2inst1 using pa55w0rd to D:\backup
- If you did not select a target directory that is accessible to the Tivoli
Intelligent Orchestrator computer, transfer the backup to an accessible
location.
A backup has been created and can be used to restore the Tivoli Intelligent
Orchestrator database when it is required.
To restore the database:
- Ensure that you have completed the steps in Before backing up or restoring the database.
- Open the file %TIO_HOME%\config\dcm.xml to
verify the database name and user name. The name element
contains an alias for the database name, and the username element
contains the user name. This information is specified in the Tivoli
Intelligent Orchestrator installation.
- Log on as Administrator.
- Open a DB2 command window.
- Run the following command to check for other running applications:
db2 list applications
- If the command lists other applications, run the following command to
disconnect them:
db2 force applications all
- End the DB2 session with the command db2 terminate.
- Restore the backed up database with the command:
db2 restore db db_name user user_name using password from location
- db_name
- The name of the database.
- user_name
- The user name of the user restoring the database.
- password
- The password used to authenticate the user name.
- location
- The location where the backup is stored. The full path of the
location is required.
For example:
db2 restore db tc user db2inst1 using pa55w0rd from D:\backup
The Tivoli Intelligent Orchestrator database has been restored. The
database backup remains in place so that you can restore the database whenever
it is required.
Follow the instructions in Backing up directory server data.
Back up the following directories before you apply the fix pack so that you
can recover the files at a later time or if you encounter errors during
installation.
- Tivoli Intelligent Orchestrator installation directory
- This directory contains Tivoli Intelligent Orchestrator and files for
dynamic content delivery service. The default location is:
C:\Program Files\ibm\tivoli\tio
- Note:
- If you installed the dynamic content delivery service in a different
directory, ensure that you back up that directory.
- Agent Manager installation directory
- The default location is:C:\Program
Files\IBM\AgentManager
This appendix describes common tasks for starting and stopping
applications.
You can check the status of Tivoli Intelligent Orchestrator and stop and
start Tivoli Intelligent Orchestrator.
- Verify the following requirements:
- Change to the %TIO_HOME%\tools
directory.
- Run the appropriate command:
- Check status
-
tioStatus.cmd wasadmin_username wasadmin_password
- Start Tivoli Intelligent Orchestrator
-
tio.cmd start
- Stop Tivoli Intelligent Orchestrator
-
tio.cmd stop
The message "TIO shutdown completed." is displayed upon successful
shutdown.
The following parameters are used in the commands:
- wasadmin_username
- The WebSphere Application Server administrator user name. The
default is wasadmin.
- wasadmin_password
- The password for the specified user name.
To run a workflow from the Web interface:
- Click Automation > Workflows.
- Search for the workflow name. The search results are
displayed.
- In the search results, find the row with the workflow to run. In
that row, click the Actions menu icon, and then click
Run The Input Parameter for Workflow window is displayed.
- Click Run in the Input Parameter for Workflow window.
- Check the results of the workflow. Click Automation >
Workflow Status to view workflow status.
The following steps describe tasks for the WebSphere Application Server
profile for Tivoli Intelligent Orchestrator, tioprofile.
- Change to the directory %TIO_HOME%\tioprofile\bin.
- Run the appropriate command:
- Check status
-
serverStatus server1 -username wasadmin_username -password wasadmin_password
- Start WebSphere Application Server
-
startServer.cmd server1
- Stop WebSphere Application Server
-
Stop the profile tioprofile:
stopServer.cmd server1 -username wasadmin_username -password wasadmin_password
startServer.cmd server1
The following parameters are used in the commands:
- wasadmin_username
- The WebSphere Application Server administrator user name. The
default is wasadmin.
- wasadmin_password
- The password for the specified user name.
- Start the WebSphere Application Server.
- Enable cookies in the Web browser that you use to access the
administrative console in order for the administrative console to work
correctly.
- Open a browser window and enter the following URL:
https://hostname:9043/ibm/console
where hostname is the fully-qualified domain
name of the computer where the application server is running. For
example:
https://tpmserver.example.com:9043/ibm/console
- Log in with your WebSphere Application Server user ID and password.
The default user ID is wasadmin.
Use the following commands to check server status and to start and stop the
server. For more information, refer to the Tivoli Directory Server
documentation.
Checking Tivoli Directory Server status
ibmdirctl -D cn=root -w password status
Starting Tivoli Directory Server
ibmdirctl -D cn=root -w password start
Stopping Tivoli Directory Server
ibmdirctl -D cn=root -w password stop
The following subsections describe common tasks for DB2:
To verify the status of DB2, you can check if the database instance service
is running.
- Log in as Administrator.
- Open the Services control panel.
- Find the entry for the DB2 instance. If there are multiple DB2
entries, look for the entry with Tivoli Intelligent Orchestrator database
owner. For example, for the default Tivoli Intelligent Orchestrator
database owner db2inst1, the service name starts with DB2
- DB2INST1.
- If the database instance is not started, right-click the database
instance name and click Start.
To start a DB2 instance:
- Log on as Administrator or a user that is a member of the
Administrators, Server Operators, or Power Users group.
- Run the following command from the command line:
db2start
To stop DB2:
- Stop Tivoli Intelligent Orchestrator. For instructions, see Common tasks for Tivoli Intelligent Orchestrator.
- Log on as Administrator or a user that is a member of the
Administrators, Server Operators, or Power Users group.
- Display all applications and users that are connected to the specific
database that you want to stop. To ensure that no vital or critical
applications are running, list applications. You need SYSADM,
SYSCTRL, or SYSMAINT authority for this.
- Force all applications and users off the database. You require
SYSADM or SYSCTRL authority to force users.
- To stop the instance type using the command line, enter:
db2stop
- Note:
- The db2stop command can only be run at the server. No
database connections are allowed when running this command; however, if
there are any instance attachments, they are forced off before the instance is
stopped.
To check if Microsoft Active Directory is running:
Click Start > Programs > Administrative
Tools > Manage Your Server. In the list of server
roles, verify that server is currently configured with the Domain
Controller (Active Directory) role.
For information about starting and stopping Microsoft Active Directory,
refer to your Microsoft Active Directory documentation.
If you have any questions about this fix pack, call the IBM Support Center
for your country. For example, in the USA call 1-800-IBM-SERV.
For specific contact numbers for all countries, refer to the following Web
site:
http://techsupport.services.ibm.com/guides/contacts.html
If you find a problem or have a suggestion about the Automation Package
Development Environment features or the documentation in general, contact IBM
through the Tivoli Provisioning Manager and Intelligent Orchestrator
Automation Package Development Environment forum. The forum is a
technical discussion focussed on installing, configuring and using the
Automation Package Development Environment (APDE) for writing workflows and
creating automation packages for the Tivoli Intelligent Orchestrator
products.
To access the forum:
- Go to http://www-128.ibm.com/developerworks/forums/tivoli_forums.jsp.
- Click on the Tivoli Provisioning Manager and Intelligent Orchestrator
Automation Package Development Environment link on the Web site.
The following section includes important information about this document
and its use.
Table 4. Revisions
| Created/Revised by
| Date of Creation/Update
| Summary of Changes
|
| DR
| June 1, 2007
| Document created
|
| NY
| June 12, 2007
| Updates to disk space requirements and fix pack installation instructions
for APAR IY99859
|
This information was developed for products and services offered in the
U.S.A.
IBM may not offer the products, services, or features discussed in this
document in other countries. Consult your local IBM representative for
information on the products and services currently available in your
area. Any reference to an IBM product, program, or service is not
intended to state or imply that only that IBM product, program, or service may
be used. Any functionally equivalent product, program, or service that
does not infringe any IBM intellectual property right may be used
instead. However, it is the user's responsibility to evaluate and
verify the operation of any non-IBM product, program, or service.
IBM may have patents or pending patent applications covering subject matter
described in this document. The furnishing of this document does not
grant you any license to these patents. You can send license inquiries,
in writing, to:
IBM Director of Licensing
IBM Corporation
North Castle Drive
Armonk, NY 10504-1785
U.S.A.
For license inquiries regarding double-byte (DBCS) information, contact the
IBM Intellectual Property Department in your country or send inquiries, in
writing, to:
IBM World Trade Asia Corporation
Licensing
2-31 Roppongi 3-chome, Minato-ku
Tokyo 106, Japan
The following paragraph does not apply to the United Kingdom or any other
country where such provisions are inconsistent with local law:
INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS
IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT
NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE.
Some states do not allow disclaimer of express or implied warranties in
certain transactions, therefore, this statement may not apply to you.
This information could include technical inaccuracies or typographical
errors. Changes are periodically made to the information herein;
these changes will be incorporated in new editions of the publication.
IBM may make improvements and/or changes in the product(s) and/or the
program(s) described in this publication at any time without notice.
Any references in this information to non-IBM Web sites are provided for
convenience only and do not in any manner serve as an endorsement of those Web
sites. The materials at those Web sites are not part of the materials
for this IBM product and use of those Web sites is at your own risk.
IBM may use or distribute any of the information you supply in any way it
believes appropriate without incurring any obligation to you.
Licensees of this program who wish to have information about it for the
purpose of enabling: (i) the exchange of information between
independently created programs and other programs (including this one) and
(ii) the mutual use of the information which has been exchanged, should
contact:
IBM Canada Ltd.
Office of the Lab Director
8200 Warden Avenue
Markham, Ontario
L6G 1C7
Canada
Such information may be available, subject to appropriate terms and
conditions, including in some cases, payment of a fee.
The licensed program described in this document and all licensed material
available for it are provided by IBM under terms of the IBM Customer
Agreement, IBM International Program License Agreement or any equivalent
agreement between us.
AIX, DB2, DB2 Universal Database, IBM, eServer(TM), iSeries(TM),
pSeries(R), zSeries(R), POWER(TM), the IBM logo, Passport
Advantage(R), Tivoli, the Tivoli logo, Lotus(R), Rational(R), and
WebSphere are trademarks or registered trademarks of International Business
Machines Corporation in the United States, other countries, or both.
Intel(R), Itanium(R), and Pentium(R) are trademarks or
registered trademarks of Intel Corporation or its subsidiaries in the United
States, other countries, or both.
Linux is a trademark of Linus Torvalds in the United States, other
countries, or both.
Microsoft and Windows are registered trademarks of Microsoft Corporation in
the United States, other countries, or both.
Java and all Java-based trademarks and logos are trademarks or registered
trademarks of Sun Microsystems, Inc. in the United States, other
countries, or both.
UNIX is a registered trademark of The Open Group in the United States and
other countries.
Other company, product, and service names may be trademarks or service
marks of others.