IBM Support

Find and install updates through the CLI on Security Network IPS sensors

Technote (FAQ)


How do you find and install available updates through the CLI on a Security Network IPS (GX) appliance?


In most scenarios, updating the GX appliance should be done through the designated process as documented in Updates and licensing administration. There might be circumstances where this method of updating is not available. Use the information in this article to find and apply updates by using the command line interface (CLI).


Important: When performing administration tasks via ssh or local console, configuration changes made to your IBM appliance by any user other than admin could degrade appliance performance. Installing or activating other services or applications may also impact appliance performance or security. IBM Infrastructure Security Support will not support configuration changes made using the root user account unless specifically directed by a support engineer or IBM documentation. The following DCF Technote content is supported. Any further changes made that are not included in this document will place your product into an unsupported state and IBM product support may require you to reimage your appliance to restore it to a supported state.

Go through the information below to find and install updates on the GX appliance through the CLI:

  1. SSH to the device and login with the root credentials.
  2. Remove any previously downloaded files by using the command below:
    rm -f /var/spool/updates/*.pkg
  3. Restart the update service by using the following command:
    service iss-lum restart
  4. Run the following command to search for available updates:
    lumCtrl --discover -w
    Note: This might take a few minutes to complete.
  5. To see if any available updates are available, run the following command:
    For XPU: lumCtrl --updavail ipm
    For firmware: lumCtrl --updavail fw
    If false is returned, there are no updates for this type. If true is returned, there are available updates.
  6. To install any available updates, run the following command:
    For XPU: lumCtrl --install ipm
    For firmware: lumCtrl --install fw
    Note: If you are several firmware versions behind, it attempts to download and install all available versions up to the current. If you want to install a version before the current, use the -v flag to specify the firmware to stop at. For example, if you only want to install firmware versions up to 4.6.1 but not 4.6.2, use the following command:
    lumCtrl --install fw -v 4.6.1
  7. To see when the last update was installed, run the following command:
    For XPU: lumCtrl --lastupdate ipm
    For firmware: lumCtrl --lastupdate fw

Note: Use lumCtrl --help for a comprehensive list of all the available commands.

Related information

A Japanese translation is available

Document information

More support for: IBM Security Network Intrusion Prevention System

Software version: 4.6.1, 4.6.2

Operating system(s): Firmware

Reference #: 1964050

Modified date: 29 August 2016