Retrieve and download Microsoft patch supplements from HPELN

Retrieve Microsoft patch supplements from HPELN

In WSUS patching mode, SA retrieves all required patches directly from a WSUS Server in your network. However, if you are working in Microsoft Offline Catalog patching mode, SA retrieves information about Microsoft patches from the wsusscn2.cab file. This file contains patches and associated metadata only for security Microsoft updates. SA provides non-security patches via the HPE Live Network.

When HPE updates this supplemental data, you can configure the HPE Live Network to automatically upload it to the SA Microsoft patch database.

You cannot download patches from HPELN in WSUS patching mode.

To obtain the supplementary data file when it is updated and upload it into the SA Library:

  1. Obtain an HPE Passport ID from:

    http://h20229.www2.hp.com/passport-registration.html

  2. Log in to the HPE Live Network portal using your HPE Passport credentials:

    https://hpln.hpe.com/group/hp-live-network-connector

  1. The HPE Live Network connector (LNc) is installed on the core server where the SA Software Repository component is installed.

    You can download the HPE Live Network Connector User Guide from the Live Network Connector community on the HPE Live Network at:

    https://hpln.hpe.com/group/hp-live-network-connector

    Click the Resources tab and open the Documentation folder.

  2. On the system where the LNc is installed, run the following commands to enable the Microsoft patching service:

    live-network-connector write-config --add --setting=content.ms_patch_supp=1

    and

    live-network-connector write-config --setting=sas.force_win_patch_import=1 --add

  1. (Optional) To disable the Microsoft patching service, run the same command with the value set to 0:

    live-network-connector write-config --setting=content.ms_patch_supp=0

    and

    live-network-connector write-config --setting=sas.force_win_patch_import=0

Alternatively, you can manually download the supplemental patch data file from the HPE Live Network and upload it to the SA database. See Manually download the Microsoft patch supplements from HPELN.

Manually download the Microsoft patch supplements from HPELN

This section describes how to manually download the supplementary Microsoft patch data file from the HPE Live Network and upload it into the SA patch database.

This is only required if you are working in Offline Catalog patching mode as the wsusscn2.cab file contains updates for security issues. In WSUS patching mode, WSUS synchronizes with Microsoft Update to regularly download both security and non-security updates to a central WSUS repository on your network.

HPE recommends that you set up the LNc to automatically upload this file whenever it changes as described in Retrieve Microsoft patch supplements from HPELN. However, if you download the file manually, you should regularly check for updates and install them into the SA patch database as described here.

To obtain the supplementary data file:

  1. Obtain an HPE Passport ID from:

    http://h20229.www2.hp.com/passport-registration.html

  2. Log in to the HPE Live Network portal using your HPE Passport credentials:

    https://hpln.hpe.com/group/hp-live-network-connector

  3. The HPE Live Network connector (LNc) is installed on the core server where the SA Software Repository component is installed.

    You can download the HPE Live Network Connector User Guide from the Live Network Connector community on the HPE Live Network at:

    https://hpln.hpe.com/group/hp-live-network-connector

    Click the Resources tab and open the Documentation folder.

  4. Click Content Catalog from the HPE Live Network menu and search for “MS Patch Supplement for Server Automation” under the Server Automation product.

  5. Download the latest Microsoft Patch Supplement, named latest_OPSWWinPatchDB.zip, and place it in the Core slice server directory:

    /opt/opsware/mm_wordbot/util

  6. Import the Microsoft Patch Supplement metadata via the following command:

    ./import_win_patch_bundle --bundle latest_OPSWWinPatchDB.zip

  7. Since HPE updates the Microsoft patch supplementary data file, it is recommended that you periodically check this file for updates and when this file changes, follow these steps again to download the latest supplementary patch information into your SA patch database.