cc/td/doc/product/ismg/policy/ver21
hometocprevnextglossaryfeedbacksearchhelp
PDF

Table of Contents

Update Options

Update Options

As an administrator charged with system maintenance, you may find it necessary to update the product license or file signatures associated with your Cisco Secure Policy Manager system. These tasks are necessary to reflect changes associated with a new patch or product version (such as moving from an evaluation version to a fully supported version).

In this chapter, you will find the following topics, with accompanying procedures:

Update Product License

A Cisco Secure Policy Manager license disk is packaged with your product, and during the installation process you are prompted for the license disk and the password for that license.

Updating Product License

From the Update Product License dialog box, you can update the current license of your installed Cisco Secure Policy Manager product.

To update the Cisco Secure Policy Manager license, perform the following task:


Step 1 To access the Update Product License dialog box, point to Product Updates on the Help menu, and then click License on the submenu.

Result: The Update Product License dialog box appears.

Step 2 To specify the filename and path to the license key, type that filename and path in the License filename and path box, or click Browse to locate that disk and file.

If you stored the license key file on your local machine, be sure to record the path to that file for future reference.

Step 3 To specify the password that corresponds to the license key file that you just specified, type that password in the Password box.

Be sure to record this password and store it in a safe place for future reference.


Note The License host box identifies the Policy Server host running the Primary Policy Database, and thus the primary host, that will be targeted for the license upgrade. The Policy Server host distributes the upgrade information to all secondary hosts in the system. This box is for your informational purposes only.

Step 4 To submit this information, click OK. Or, to close the Update Product License dialog box without submitting the license update, click Cancel.

After you update your license, you can view the new license information by clicking the About Cisco Secure Policy Manager command on the Help menu.


 

Update File Signatures

Whenever a critical Cisco Secure Policy Manager system file changes (like an .exe or .dll file), that file needs to be "signed" so its authenticity is ensured. You can manually perform this procedure by updating file signatures, although in most cases, this procedure occurs automatically (such as during Cisco Secure Policy Manager patch installations). If you replace one of these system files and do not update the file signature, you will experience error messages.

Learn More About Updating File Signatures

File signatures are used to detect possible security breaches within the Cisco Secure Policy Manager system. The Controlled Host Component (CHC) performs system integrity checks and starts and authenticates all agents that compose Cisco Secure Policy Manager as they are loaded on an as-needed basis. During system initialization, the CHC performs integrity checks on Cisco Secure Policy Manager files by comparing a computed cryptographic checksum of each binary against a pre-calculated value stored in the Policy Database. If the values do not match, the CHC logs the fact that the binary file was modified without authorization.

Each installation or update, such as an upgrade or patch, computes the initial checksums and stores them in the Policy Database. The only time that you might need to manually update file signatures is if you received a special patch, such as an updated .dll file. Before Cisco Secure Policy Manager can use such a file, it must be signed (the checksum must be computed) and that signature must be stored in the Policy Database.

Some files can be updated without having their file signatures updated. These files include the Help files provided with Cisco Secure Policy Manager. This enables easy updates to the Help system.

Updating File Signatures

You need to update file signatures whenever a critical Cisco Secure Policy Manager system file changes (like an .exe or .dll file). You can manually perform this task by following the procedures below.

To update file signatures, perform the following task:


Step 1 To access the Update File Signatures dialog box, point to Product Updates, and click File Signatures on the Help menu.

Result: The Update File Signatures dialog box appears.

Step 2 To specify the target hosts for which you want to update the file signatures, click those hosts in the Target Machine(s) box.

Step 3 To submit this information, click OK.

Result: If you clicked OK, an additional dialog box informs you that the update is scheduled.

Step 4 To clear the additional dialog box, click OK.


 


hometocprevnextglossaryfeedbacksearchhelp
Posted: Tue May 30 08:31:26 PDT 2000
Copyright 1989 - 2000©Cisco Systems Inc.