Quick start

To set up and initialize Solaris patching in SA:

1. Create an SA user that has the following permissions:

   • Read and write permissions for the /Opsware/Tools/Solaris Patching folder
   • Read and write permission for the “Manage Patch” feature permission

   • Feature permissions set to “Yes” for:

     • “Allow Install Patch”
     • “Allow Uninstall Patch”
     • “Manage Patch Compliance Rules”

   See the SA Administer section for more information on creating users and setting permissions.

2. Log in as root to an SA slice core server or a master core server.

3. Update the configuration file located at /etc/opt/opsware/solpatch_import/solpatch_import.conf as follows:

   • Add your SA user name and password to the lines that begin with hpsa_user and hpsa_pass. Example:

     hpsa_user=my_sa_username
hpsa_pass=<password>

   • Add your My Oracle account user name and password to the lines that begin with download_user and download_pass.

     Example:

     download_user=my_oracle_username
download_pass=<password>

     This configuration file is used by the solpatch_import command.

     You can create a separate, private copy of the configuration file and use the -c option or the --conf option for solpatch_import to specify your configuration file.

4. (Optional) Run the following command to encrypt your passwords in the configuration file:

   solpatch_import --hide_passwords

   The solpatch_import command is located at /opt/opsware/solpatch_import/bin.

   If this is the first time you are using Solaris patch management in SA, you must create a new Solaris patch database. The solpatch_import -a create_db command creates the Solaris patch database, downloads patch information from Oracle (in the patchdiag.xref file), and then uploads the patch information into the database:

   solpatch_import -a create_db

   If you already have a patchdiag.xref file, use the following command to create the Solaris patch database and upload the patch information from your patchdiag.xref file into the database:

   solpatch_import -a create_db -x <local patchdiag.xref file>

   This command can take a few hours to run, depending on how many Solaris patches are already in your SA Library.

   SA is now ready for you to download Solaris patches and install them on your servers as described in the following sections.

5. Make sure your Solaris patch database contains the latest patch information. See Maintain the Solaris patch database.