(imported topic written by SystemAdmin)
Hello -
I have a recently installed TEM 8.1 pilot. I purchased LCM, SUA, and MDM modules. I have integrated the Microsoft OS patches, the Adobe Flash player patches, 7-zip, and Adobe 10 Standard so far. These items appear to update/install on the pilot machines (PC0001 through PC0007). I am having trouble with the Oracle Java Runtime Environment (JRE) patches. Both JRE 6 Update 33 and JRE 7 Update 5 appear to be failing.
Initially I had problems because the SHA1 and file size values in the fixlets didn’t match what I downloaded from Oracle (on July 06, 2012). I re-downloaded JRE 6 Update 33 and JRE 7 Update 5 (both Windows 32-bit) from Oracle yesterday (July 23, 2012). I used the IBM SHA1.EXE utility to confirm the SHA1 values. I copied these file to the “D:\Program Files (x86)\BigFix Enterprise\BES Server\wwwrootbes\bfmirror\downloads\sha1” directory on the TEM server and changed the files names to match the SHA1 values from the fixlet.
/* ********************************************************************** */
/* ********************************************************************** */
/* **********************************************************************
- LOG FILE FROM PC0002
**
At 14:41:11 -0400 - Updates for Windows Applications (http://sync.bigfix.com/cgi-bin/bfgather/updateswindowsapps)
Relevant - Java Runtime Environment 6 update 33 Available (JRE 6 Installed) (fixlet:7051048)
At 14:41:36 -0400 -
Report posted successfully.
At 14:41:53 -0400 - Updates for Windows Applications (http://sync.bigfix.com/cgi-bin/bfgather/updateswindowsapps)
Relevant - Java Runtime Environment 7 update 5 Available (JRE < 7 Installed) (fixlet:7051055)
At 14:42:13 -0400 -
Report posted successfully.
At 14:42:14 -0400 -
PollForCommands: Requesting commands
At 14:42:39 -0400 - Updates for Windows Applications (http://sync.bigfix.com/cgi-bin/bfgather/updateswindowsapps)
Relevant - Java Runtime Environment - Disable Java Update (fixlet:7053001)
At 14:42:58 -0400 -
Report posted successfully.
… (CUT HERE) …
At 15:00:26 -0400 -
GatherActionMV command received. Version difference, gathering action site.
At 15:00:27 -0400 - actionsite (http://tem.domain.tld:52311/cgi-bin/bfgather.exe/actionsite)
Download ‘http://relay-1.domain.tld:52311/bfmirror/bfsites/manydirlists_1/__diffsite_961cc96ada94bed0d2ff9d76556e8651995d940f_to_4de62d12209f2c3b18bc8a19eca399e914835762’ as ‘__TempUpdateFilename’
At 15:00:28 -0400 -
Gather merging new file C:\Program Files\BigFix Enterprise\BES Client__BESData\actionsite\Action 452.fxf
At 15:00:29 -0400 - actionsite (http://tem.domain.tld:52311/cgi-bin/bfgather.exe/actionsite)
Successful Synchronization with FixSite (version 648) - ‘http://relay-1.domain.tld:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://tem.domain.tld:52311/cgi-bin/bfgather.exe/actionsite&Time=23Jul15:00:26&rand=6eec184b&ManyVersionSha1=961cc96ada94bed0d2ff9d76556e8651995d940f’
At 15:00:37 -0400 - actionsite (http://tem.domain.tld:52311/cgi-bin/bfgather.exe/actionsite)
Relevant - Java Runtime Environment 7 update 5 Available (JRE < 7 Installed) (fixlet:452)
At 15:01:06 -0400 -
Report posted successfully.
At 15:01:07 -0400 -
PollForCommands: Requesting commands
At 15:01:13 -0400 -
ActionLogMessage: (action 452) Action signature verified
At 15:01:15 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: false (action id 452)
At 15:01:25 -0400 -
DownloadPing command received (ID=452)
At 15:01:26 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
At 15:01:28 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:01:37 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:01:46 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:01:55 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:02:04 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:02:09 -0400 -
PollForCommands: Requesting commands
At 15:02:13 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:02:22 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/452/0’
DownloadsAvailable: true (action id 452)
ActionLogMessage: (action 452) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 452) Submitting download request
ActionLogMessage: (action 452) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe’
At 15:02:31 -0400 -
ActionLogMessage: (action 452) JobFailed - cancel and fail action
ActionLogMessage: (action 452) DownloadJobFailed
At 15:02:37 -0400 -
ActionLogMessage: (action 452) ending action
At 15:02:39 -0400 - actionsite (http://tem.domain.tld:52311/cgi-bin/bfgather.exe/actionsite)
Not Relevant - Java Runtime Environment 7 update 5 Available (JRE < 7 Installed) (fixlet:452)
At 15:03:07 -0400 -
Report posted successfully.
At 15:03:13 -0400 -
PollForCommands: Requesting commands
At 15:04:16 -0400 -
PollForCommands: Requesting commands
- */
/* ********************************************************************** */
/* ********************************************************************** */
/* **********
- LOG FILE FROM PC0007
**
t 23:29:16 -0400 -
User interface process started for user ‘domainuser2’
At 23:29:17 -0400 -
ActionLogMessage: (action 453) Action signature verified
At 23:29:20 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/453/0’
DownloadsAvailable: true (action id 453)
ActionLogMessage: (action 453) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 453) Submitting download request
ActionLogMessage: (action 453) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe’
ActionLogMessage: (action 453) Download url: ‘http://software.bigfix.com/download/bes/util/RunAsCurrentUser-2.0.3.1.exe’
At 23:29:27 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/453/0’
At 23:29:28 -0400 -
DownloadsAvailable: true (action id 453)
ActionLogMessage: (action 453) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 453) Submitting download request
ActionLogMessage: (action 453) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe’
ActionLogMessage: (action 453) Download url: ‘http://software.bigfix.com/download/bes/util/RunAsCurrentUser-2.0.3.1.exe’
At 23:29:35 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/453/0’
DownloadsAvailable: true (action id 453)
ActionLogMessage: (action 453) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 453) Submitting download request
ActionLogMessage: (action 453) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe’
ActionLogMessage: (action 453) Download url: ‘http://software.bigfix.com/download/bes/util/RunAsCurrentUser-2.0.3.1.exe’
At 23:29:44 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/453/0’
DownloadsAvailable: true (action id 453)
ActionLogMessage: (action 453) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 453) Submitting download request
ActionLogMessage: (action 453) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe’
ActionLogMessage: (action 453) Download url: ‘http://software.bigfix.com/download/bes/util/RunAsCurrentUser-2.0.3.1.exe’
At 23:29:48 -0400 -
PollForCommands: Requesting commands
At 23:29:53 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/453/0’
DownloadsAvailable: true (action id 453)
ActionLogMessage: (action 453) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 453) Submitting download request
ActionLogMessage: (action 453) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe’
ActionLogMessage: (action 453) Download url: ‘http://software.bigfix.com/download/bes/util/RunAsCurrentUser-2.0.3.1.exe’
At 23:30:01 -0400 -
DownloadsAvailable: checking for ‘http://relay-1.domain.tld:52311/bfmirror/downloads/453/0’
DownloadsAvailable: true (action id 453)
ActionLogMessage: (action 453) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action 453) Submitting download request
ActionLogMessage: (action 453) Download url: ‘http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe’
ActionLogMessage: (action 453) Download url: ‘http://software.bigfix.com/download/bes/util/RunAsCurrentUser-2.0.3.1.exe’
At 23:30:10 -0400 -
ActionLogMessage: (action 453) JobFailed - cancel and fail action
ActionLogMessage: (action 453) DownloadJobFailed
At 23:30:14 -0400 -
ActionLogMessage: (action 453) ending action
At 23:30:17 -0400 - actionsite (http://tem.domain.tld:52311/cgi-bin/bfgather.exe/actionsite)
Not Relevant - Java Runtime Environment 6 update 33 (32-bit) Available (JRE 6 32-bit version Installed) (x64) (fixlet:453)
At 23:31:05 -0400 -
Report posted successfully.
At 23:31:06 -0400 -
PollForCommands: Requesting commands
At 23:32:07 -0400 -
PollForCommands: Requesting commands
- */
/* ********************************************************************** */
/* ********************************************************************** */
/* **********************************************************************
- JRE 6 Update 33 fixlet action
**
Action1
Script Type BigFix Action Script
prefetch jre-6u33-windows-i586.exe sha1:6b6c9408ea833e44908678f0d216f8599a1f4646 size:16987952 http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe
// Note: update .exe will restart service automatically
if{exists running service “JavaQuickStarterService”}
delete __appendfile
delete stop_javaquickstarter.bat
appendfile net stop JavaQuickStarterService
move __appendfile stop_javaquickstarter.bat
waithidden stop_javaquickstarter.bat
endif
regset "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava32”=dword:00000001
waithidden __Download/jre-6u33-windows-i586.exe /s /norestart
action may require restart “6b6c9408ea833e44908678f0d216f8599a1f4646”
continue if {((exists value “DisplayVersion” whose ((it >= “6.0.330”) of ((if (it as string = “1.5.0”) then (it as string & “.00”) else (it as string)) as version)) of keys whose ((value “DisplayName” of it as string as lowercase contains “j2se runtime environment” OR value “DisplayName” of it as string as lowercase starts with “java™”)) of it) AND (exists key whose (((it contains “java” OR it contains “j2se”) AND (it contains “runtime environment” OR it contains “update”)) of (value “DisplayName” of it as string as lowercase)) of it)) of key “HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall” of registry}
regdelete "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava32”
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Action2
Script Type BigFix Action Script
prefetch jre-6u33-windows-i586.exe sha1:6b6c9408ea833e44908678f0d216f8599a1f4646 size:16987952 http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-6u33-windows-i586.exe
// Note: update .exe will restart service automatically
if{exists running service “JavaQuickStarterService”}
delete __appendfile
delete stop_javaquickstarter.bat
appendfile net stop JavaQuickStarterService
move __appendfile stop_javaquickstarter.bat
waithidden stop_javaquickstarter.bat
endif
waithidden taskkill /F /IM java.exe
waithidden taskkill /F /IM javaw.exe
waithidden taskkill /F /IM javaws.exe
waithidden taskkill /F /IM iexplore.exe
waithidden taskkill /F /IM firefox.exe
regset "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava32”=dword:00000001
waithidden __Download/jre-6u33-windows-i586.exe /s /norestart
action may require restart “6b6c9408ea833e44908678f0d216f8599a1f4646”
continue if {((exists value “DisplayVersion” whose ((it >= “6.0.330”) of ((if (it as string = “1.5.0”) then (it as string & “.00”) else (it as string)) as version)) of keys whose ((value “DisplayName” of it as string as lowercase contains “j2se runtime environment” OR value “DisplayName” of it as string as lowercase starts with “java™”)) of it) AND (exists key whose (((it contains “java” OR it contains “j2se”) AND (it contains “runtime environment” OR it contains “update”)) of (value “DisplayName” of it as string as lowercase)) of it)) of key “HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall” of registry}
regdelete "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava32”
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
- */
/* ********************************************************************** */
/* ********************************************************************** */
/* **********************************************************************
- JRE 7 Update 5 fixlet action
**
Action1
Script Type BigFix Action Script
prefetch jre-7u5-windows-i586.exe sha1:504d94c7cc1617b44af8d81de6fd83120b04dfa5 size:21055472 http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe
// Note: update .exe will restart service automatically
if{exists running service “JavaQuickStarterService”}
delete __appendfile
delete stop_javaquickstarter.bat
appendfile net stop JavaQuickStarterService
move __appendfile stop_javaquickstarter.bat
waithidden stop_javaquickstarter.bat
endif
regset "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava7_32”=dword:00000001
waithidden __Download/jre-7u5-windows-i586.exe /s /norestart
action may require restart “504d94c7cc1617b44af8d81de6fd83120b04dfa5”
continue if {exists value “DisplayVersion” whose ((it = “7” and it >= “7.0.50”) of (it as string as version)) of keys whose (value “DisplayName” of it as string as lowercase contains “j2se runtime environment” OR value “DisplayName” of it as string as lowercase starts with “java™”) of key “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall” of registry}
regdelete "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava7_32”
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Action2
Script Type BigFix Action Script
prefetch jre-7u5-windows-i586.exe sha1:504d94c7cc1617b44af8d81de6fd83120b04dfa5 size:21055472 http://download.oracle.com/MANUAL_BES_CACHING_REQUIRED/jre-7u5-windows-i586.exe
// Note: update .exe will restart service automatically
if{exists running service “JavaQuickStarterService”}
delete __appendfile
delete stop_javaquickstarter.bat
appendfile net stop JavaQuickStarterService
move __appendfile stop_javaquickstarter.bat
waithidden stop_javaquickstarter.bat
endif
waithidden taskkill /F /IM java.exe
waithidden taskkill /F /IM javaw.exe
waithidden taskkill /F /IM javaws.exe
waithidden taskkill /F /IM iexplore.exe
waithidden taskkill /F /IM firefox.exe
regset "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava7_32”=dword:00000001
waithidden __Download/jre-7u5-windows-i586.exe /s /norestart
action may require restart “504d94c7cc1617b44af8d81de6fd83120b04dfa5”
continue if {exists value “DisplayVersion” whose ((it = “7” and it >= “7.0.50”) of (it as string as version)) of keys whose (value “DisplayName” of it as string as lowercase contains “j2se runtime environment” OR value “DisplayName” of it as string as lowercase starts with “java™”) of key “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall” of registry}
regdelete "
HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\EnterpriseClient\JavaInstallation
" “InstallingJava7_32”
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
- */
/* ********************************************************************** */
/* ********************************************************************** */
MY ENVIRONMENT:
PC0002: Windows XP Professional SP3 x86. BES Client
PC0007: Windows 7 Enterprise SP1 x64. BES Client
TEM Server uses logical name tem.domain.tld (set up that way so I can move it to a new machine in the future, if need be). There is a CNAME record in the DNS which points tem.domain.tld to server3.domain.tld. These A and CNAME records only resolve internally. The TEM server is a Windows 2008 R2 SP1 Standard server with 12GB ram and 2x146GB and 2x600GB HDD in RAID1 mirrors.
First relay uses logical name relay-1.domain.tld (set up that way so I can move it to a new machine in the future, if need be). There is a CNAME record in the DNS which points relay-1.domain.tld to server192.domain.tld. These A and CNAME records resolve both internally and externally and 52311 is open to the outside world. I am using the self-signed SSL. This relay is a Windows 2008 SP2 x86 Standard server with 2GB RAM and 64GB HDD RAID 1 mirror with 35GB free.
Second relay uses logical name relay-2.domain.tld (set up that way so I can move it to a new machine in the future, if need be). There is a CNAME record in the DNS which points relay-2.domain.tld to server72.domain.tld. These A and CNAME records resolve both internally and externally and 52311 is open to the outside world. I am using the self-signed SSL. This relay is a Windows 2008 R2 SP1 Standard server with 4GB RAM and 2x146GB and 6x3TB HDD in RAID10 mirrors with 8TB free.
Thanks!
Aaron