Manually enabling Liveupdate functionality on CCS agents
search cancel

Manually enabling Liveupdate functionality on CCS agents

book

Article ID: 161004

calendar_today

Updated On:

Products

Control Compliance Suite Control Compliance Suite Standards Server Control Compliance Suite Standards Module

Issue/Introduction

Agents were installed accidentally without turning on LiveUpdate functionality.  Need to turn on functionality without running the Register GUI to enable LiveUpdate on each agent.

 

Environment

CCS 12.5.X agents

CCS 12.6.X agents

Resolution

The presence and content of the <install path>\.....esm\config\liveupdate.dat file determines whether the agent can accept live updates.  The Liveupdate functionality is required to be activated on the agent in order to update Security Updates, content updates, product updates, and agent version updates. 

If the liveupdate.dat file does not exist in the ....esm\config folder on the agent, then creating this file (blank...i.e. with no contents) will enable the agent to take liveupdates from any ESM manager that it is specifically registered to.  In CCS version 12.5.x or 12.6.x, all CCS Managers in the deployment can then be used to LiveUpdate the agent unless restricted by routing rules.   Inputting a specific CCS manager's name into the liveupdate.dat file will restrict it to taking Liveupdates ONLY from that one manager (which is not recommended).  The default is to leave this file blank (empty) to ensure that some manager can update the agent if required.

As a possible workaround, 3rd party scripts can be used to create the liveupdate.dat file on an agent where it is missing to enable LiveUpdate.  Such scripts may be deployed by other means not using CCS (ie. possibly either via Windows Active Directory for Windows machines or via some 3rd party product for UNIX machines).  All scripts should be run with superuser authority as the agent should have been installed with the Local Administrator (Windows) or with the root ID (UNIX).  Failure to install the liveupdate.dat file with the appropriate rights could result in failure to push Liveupdates to the agent.  NOTE: Broadcom does not provide any scripts to create the liveupdate.dat file on the agent, and this method is not officially supported for creating the liveupdate.dat file on the agents.