7.1 Installing or Updating Security Patches for Access Manager Appliance and Analytics Server

Getting the latest security updates through Channel Update is not supported for the latest Analytics Server shipped with Access Manager 4.5 Service Pack 3 HotFix 1. The latest Analytics Server is available as a service and not as an appliance. For information about how to get the security patches for the earlier version of Analytics Server, see Getting the Latest Security Patches in the NetIQ Access Manager Appliance 4.4 Installation and Upgrade Guide.

To get the latest security updates for Access Manager Appliance, follow any of these options:

7.1.1 Registering to Micro Focus Customer Center

To get the latest security updates for Access Manager Appliance, the user must register with the Micro Focus Customer Center by using the activation code obtained with the product:

Run the registration_MCC.sh script located at: /opt/novell/channel.

Enter a valid e-mail ID associated with the Micro Focus account and the activation code at the following prompt:

Please enter the following information to register your product. By completing this simple registration, you will get immediate access to online updates.

After you see the “Registration Successful” message, enter the following command to verify if the repository named NAM453-APP-Updates was created:

                zypper lr

An output similar to the following appears:

Access Manager Appliance

# | Alias                                | Name
| Enabled | Refresh
--+--------------------------------------+-----------------------------------
1 | SLES-12 SP5-12.5-0 | SLES-12 SP5-12.5-0
| Yes     | No
2 | nu_novell_com:NAM453-APP-Updates      | NAM453-APP-Updates
| Yes     | Yes

Run the zypper up command to install the patches.
After the patches are installed, restart the machine.
Confirm that all the patches are installed by running zypper up command again.

The details of new packages that will be installed are displayed.

7.1.2 Configuring Subscription Management Tool

You can register Access Manager Appliance to local Subscription Management Tool (SMT) server and download software updates from there instead of communicating directly with the Micro Focus Customer Center and the NU servers.

To use an SMT server for client registration and as a local update source, you must configure the SMT server in your network first. The SMT server software is distributed as an add-on for SUSE Linux Enterprise Server. For information about configuring the SMT server, see Subscription Management Tool (SMT) for SUSE Linux Enterprise 11.

SMT Configuration

You must configure the SMT server and set up subscription for NAM4x-APP-Updates channel to receive the updates for Access Manager Appliance.

Install the SMT server in a SLES 12 SP5 server. For more information, see Subscription Management Tool (SMT) for SUSE Linux Enterprise 11.
Log in to you Micro Focus Customer Center account.
Select My Products > Mirroring Credentials, then click Generate Credentials.
Copy the mirroring credentials before logging out of your Novell Customer Center account.
Run the SMT Configuration tool from YAST, then specify the mirroring credentials.
Run the SMT Management tool.

The NAM4x-APP-Updates, sle-12-x86_64 repository is displayed in the Repositories tab.
Select sle-12-x86_64, then click Toggle Mirroring to ensure mirroring is selected for this repository.
Click Mirror Now. This step ensures that the NAM4x-APP-Updates channel updates are mirrored from nu.novell.com to your local SMT server.
When mirroring is complete, click OK to close the tool.

Configuring Access Manager Appliance

Copy /usr/share/doc/packages/smt/clientSetup4SMT.sh from the SMT server to the client machine.

You can use this script to configure a client machine to use the SMT server or to reconfigure it to use a different SMT server.
Specify the following command as root to execute the script on the client machine:
```
./clientSetup4SMT.sh --host server_hostname
```
For example,
```
./clientSetup4SMT.sh --host smt.example.com. 
```
You can get the SMT server URL by running the SMT Configuration tool at the server. The URL is set by default.
Enter y to accept the CA certificate of the server.
Enter y to start the registration.
The script performs all necessary modifications on the client.
Execute the following command to perform registration:

suse_register
Specify the following command to get online updates from the local SMT server:

zypper up
Reboot the machine if prompted at the end of any patch install.
Confirm that all the patches are installed by running zypper up command again.