Technote (FAQ)
Question
When receiving a fresh Tivoli Security Information and Event Manager Fix Pack (TSIEM FP) that upgrades the z/OS agent, what actions need to be performed on the z/OS zSecure side?
Answer
Note that the following procedure can also be used to upgrade from Tivoli Compliance Insight Manager (TCIM) to Tivoli Security Information and Event Manager (TSIEM). Steps 4 through 8 would be used to upgrade only the z/OS zSecure portion, i.e. upgrading from zSecure 1.11 to 1.13.1.
- Stop the current z/OS agent by running your normal stop procedures, C2ECSTOP or C2EJSTOP are the defaults.
- Get the new pax.z file from the FP and binary upload to z/OS. (For a Tivoli Compliance Insight Manager to Tivoli Security Information and Event Manager upgrade, look for the 'mvs390_oe_2' folder in the Tivoli Security Information and Event Manager installation materials to find the 'ibm.tsiem.actuator.pax..Z' file.) See http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install211.htm?path=18_2_1_17_4_1#inspaxf
- Unpack the new pax.z file by running job C2EUNPAC. See http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install212.htm?path=18_2_1_17_4_2#insupsw
- Delete (or rename) the log and run directories in /u/c2eaudit/actuatr1/.
- Run the C2EAROOT job to create fresh log and run directories. See http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install217.htm?path=18_2_1_17_5_3#insroot
- Have the Tivoli Security Information and Event Manager Administrator create a fresh configuration (.cfg) file and upload that to z/OS. See http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install222.htm?path=18_2_1_17_6_0#instcff
- Run the C2ECNNCT job using the fresh configuration file. See http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install223.htm?path=18_2_1_17_6_1#insital
- Restart the z/OS agent in full function mode by stopping the agent then restarting C2EAUDIT. See http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install224.htm?path=18_2_1_17_6_2#insfllf
- Test UIS and ES collects. :-)
Upgrading an existing agent http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install225.htm?path=18_2_1_17_7#insuexa
Reinstalling and uninstalling the Agent http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.zsecure.doc_1.13.1/zsec1131_install226.htm?path=18_2_1_17_8#wq297
| Segment | Product | Component | Platform | Version | Edition |
|---|---|---|---|---|---|
| Security | Tivoli zSecure Audit for ACF2 | 1.10, 1.11 | |||
| Security | Tivoli zSecure Audit for Top Secret | 1.10, 1.11 | |||
| Security | Tivoli Security Information and Event Manager | Enterprise | |||
| Security | Tivoli Compliance Insight Manager | Enterprise |
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.