Patching AIX - best practice? how to? anything?


 
Thread Tools Search this Thread
Operating Systems AIX Patching AIX - best practice? how to? anything?
# 1  
Old 09-10-2009
Question Patching AIX - best practice? how to? anything?

Hi everyone,
Can anyone explain the best practice for keeping an AIX environment up to date? I have 12 AIX LPARs and a whole slew of vulnerabilities. These vulnerabilities vary from OS issues to WebSphere/MQ issues and more. I went through all of them and created a list of APARs I need to apply and which LPARs they apply to. However, I can't find out where to download these APARs on IBMs site.

I read further on IBM's site and saw that multiple service packs are released for each technology level. Is this the way to patch AIX? Do you apply service packs as they are released? Or do you apply APARs individually?

I'm currently on AIX 6.1 technology level 2. oslevel -r shows 6100-02. I'm thinking I should apply the latest service pack for TL 2, which is SP 4. But I'm not sure if this is what other people do for patching AIX...

If anyone can shed some light on the topic of patching AIX it would be much appreciated.

Thanks in advance,
Ryan
# 2  
Old 09-10-2009
First off, a sound update strategy in my experience is to update when you must, not update when you can. Every update introduces some risk and if you don't have to take this risk then let the system alone.

Having said this: it seems you are not quite aware what an APAR or a fix is. You might want to read this article to learn about what fixes, APARs, maintenance/technical levels, etc. are. You might also want to read this thread for some further information.

There are some threads pinned in the top of the forum with some useful links, IBMs Fix Central should be among them. There you can download all the IBM fixes.

I hope this helps.

bakunin
# 3  
Old 09-14-2009
Thanks, Bakunin. I read through the stickies and the threads you recommended. I have a better understanding now of how all the different fixes (APARs, maintenance levels, technology levels, service packs, etc.) are related. It sounds like the interim fixes I'm looking to apply get rolled up into service packs and then technology levels to be distributed. I also read on IBM's site that interm fixes should not be applied without being instructed to do so by IBM documentation or support.

The problem I'm facing is that our internal auditors want our AIX systems "up to date." And it sounds like being "up to date" in the AIX world means applying the latest TL and SP. Is that correct? Sorry, I'm just trying to get a second opinion before I start installing the latest TL. And according to IBM's site here IBM Support: Fix Central, the latest is TL3 or AIX 6.1.

Thanks
# 4  
Old 09-16-2009
Quote:
Originally Posted by need2bageek
[...]The problem I'm facing is that our internal auditors want our AIX systems "up to date." And it sounds like being "up to date" in the AIX world means applying the latest TL and SP. Is that correct? [...]
I don't know what your auditors want exactly but the IBM AIX update policy goes about like this: There are two maintenance cycles per year for AIX software maintenance. The major upgrade release is around February/March. The minor upgrade release is around August. IBM recommends to do those two updates. From this follows that as long as you don't stay more than two TL behind the current TL you should not have problems when opening a PMR with IBM.
Then there are the Servicepacks aka Fixpacks that almost never include new features but help correcting errors in a certain Technology Level. Avoiding known errors is always a good idea and doing so would certainly count as keeping a system "up to date".

Btw to avoid a widening gap between oslevels and microcodes Firmware upgrade should be done always when a planned system outage takes place.
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. AIX

AIX server patching

Can anyone here help me in understanding how to patch AIX machine.Its all vulnerability patching and i have sent an attachment with this saying what needs to be patched.I have not done patching at all.Can anyone help me with the steps on how to do the Patching.Whoever is helping i think this is... (3 Replies)
Discussion started by: Revathi2089
3 Replies

2. AIX

StorWize v3700 and Power8 (S822) AIX, configuration best practice for LUNs?

Hello, We have an Power8 System (S822) and a IBM StorWize v3700 SAN. The OS is AIX 7.1. With this hardware from what I read I need to download/install special SDDPCM drivers, so I did (SDDPCM VERSION 2.6.6.0 (devices.sddpcm.71.rte). I carved my volumes in the StorWize and presented to... (3 Replies)
Discussion started by: c3rb3rus
3 Replies

3. What is on Your Mind?

Where to get AIX box/servers for practice?

where I'm working does not have any AIX box/servers for testing eventhough we're not heavily invested on UNIX. It is just sometimes there are a few client's servers that need AIX related stuff to be done. last time I checked, I could find old AIX tower on ebay but there's no more. p/s: on job... (4 Replies)
Discussion started by: malayo
4 Replies

4. AIX

AIX practice

Dears, Kindly as preparing to get AIX certification I'd like to have your guide & support where can I find dump or exam forms for below :- Test 000-103: AIX 6.1 Basic Operations Test 000-221: AIX 7 Administration I want to look at real questions and try to solve it , is it possible to... (1 Reply)
Discussion started by: arm
1 Replies

5. UNIX for Dummies Questions & Answers

hp ux practice

hi i am new in unix.i have installed linux in my pc,but i want to practice and be expatise in hp ux.but i have no hp server for do it.how could i practice hp ux?please help and give suggestion. (1 Reply)
Discussion started by: dipanjan123
1 Replies

6. Shell Programming and Scripting

best practice please

I have a data file that I tail and dump the data into a new file at midnight. To work I had to use tail -n2 livefile.csv >> storefile.csv. This is ging me 2 or 3 entries at a time into the storefile.csv. if I continue this then I will have to run a second pass on the file to remove the... (4 Replies)
Discussion started by: Mikey
4 Replies

7. Shell Programming and Scripting

What is the best practice?

I'm playing the shell game of moving and deleting files to make room for current DB backup. A set of files gets moved to serverB when serverA threshold is exceeded. I created two scripts one for serverA and one for serverB. Both scripts are run by cron entry. There is a difference of 12 minutes... (4 Replies)
Discussion started by: BigSky
4 Replies

8. AIX

Need an AIX system to practice on for genfilt

Does anyone know if there's an easy way to get an AIX system to experiment with? It's easy to learn Linux because it's readily available and can be installed just about anywhere, but it looks like AIX requires proprietary hardware. My end goal is to test the behavior of packet filtering rules... (4 Replies)
Discussion started by: purefinity
4 Replies

9. UNIX for Dummies Questions & Answers

Samba Practice

I have a dual boot machine with both "Windoze ME" and Redhat Linux 7.2. I want to know if it is possible to practice with the Samba Suite on a dual boot machine if I was able to incorporate using IP addresses. I was thinking if your able to ping yourself why wouldn't you be able to administer... (3 Replies)
Discussion started by: bilal_aa
3 Replies
Login or Register to Ask a Question