Security fixes are collections of updates for the Linux-based base systems of the Management Unit, HNC and Server Unit x86. Security fixes enhance protection for the system concerned, e.g. against unauthorized intrusion and against attacks from the outside.
Up-to-date security fixes must be installed regularly when security requirements are more stringent, in particular when the system concerned can be accessed not only from a protected management network, but also from the outside.
Up-to-date security fixes are provided on the support sites of FUJITSU on the internet or (when requested) on CD/DVD, and are always installed on site by the administrator.
Security-relevant actions
Security fixes are provided for the system concerned (Management Unit, HNC or Server Unit x86) and managed on this system. You must therefore perform the activities described below for each of the systems used (i.e. on an SE server on the Management Unit, HNC and Server Unit x86):
Clarify which security fixes need to be installed.
Obtain any security fix required from the FUJITSU download server on the internet and download the security fix to any directory on the administration PC.
In exceptional cases you obtain the security fix from Customer Support on CD/DVD.If the security fix is located on the administration PC, you must transfer it to the system concerned.
If it is supplied on CD/DVD, you must transfer it to the hard disk of the system concerned.Install the security fix (if it can be installed).
If the installed security fix has the installation type Reboot, it only takes effect after a reboot (status "not active").
You need a maintenance window to reboot the Server Unit.
When the Management Unit is rebooted, BS2000 consoles and dialogs and the SVP console cannot be operated. Furthermore, any LOCLAN connections which are employed are interrupted, and EMFILEs cannot be used. If a redundant Management Unit exists, it can be used to operate BS2000.
When the HNC is rebooted, the ZASLAN connections are interrupted. If a redundant HNC exists, BCAM switches the connections to it if this is specified in the configuration.