Filter
Top Products
396 Building a Network Access Control Solution with IBM Tivoli and Cisco Systems
5. You must initialize the package creation utility environment. Issue the
following commands:
cd %BINDIR%
cd tcmremed\cfg
sputil_initial_setup.bat
This creates the necessary objects on the Tivoli Configuration Manager, such
as:
– TcmRemedRegion Policy Region
– TcmRemedProfMan Profile Manager
– SPUtilConfig.properties file in the %BINDIR%\tcmremed\cfg directory
6. In the %BINDIR%\tcmremed\cfg directory there are several additional files.
Some of them will be used as is, but some of them must be updated. For each
pair of collector type and workflow type there is a separate configuration file
containing the default remediation package options. These files are named
using the following convention:
<name_of_the_collector>_<workflow_type>.DefaultConfig.properties
For example:
nac.win.any.hotfix.PostureHotfixV2_HOTFIX_WF.DefaultConfig.properties
By default there are nine files:
– nac.win.any.nav.PostureNavV2_DEFS_WF.DefaultConfig.properties
– nac.win.any.nav.PostureNavV2_SCAN_WF.DefaultConfig.properties
– nac.win.any.nav.PostureNavV2_VERSION_WF.DefaultConfig.properties
– nac.win.any.hotfix.PostureHotfixV2_HOTFIX_WF.DefaultConfig.properties
– nac.win.any.oslevel.PostureOSLevelV2_SERVICE_PACK_WF.DefaultConfig
.properties
– nac.win.any.regkey.PostureRegKeyV2_KEY_WF.DefaultConfig.properties
– nac.win.any.regkey.PostureRegKeyV2_VALUE_WF.DefaultConfig.properties
– nac.win.any.services.PostureServices_SERVICE_RUNNING_WF.DefaultCo
nfig.properties
Most of them can be used as is, but a few must be edited. There is also a file
missing for SERVICE_DISABLED_WF, so we have to create one named
nac.win.any.services.PostureServices_SERVICE_DISABLED_WF.DefaultCo
nfig.properties.