WebEx Node patch readme ++++++++++++++++++++++++++++++++++++++++++ Name ==== MeetingPlace WebEx Node 8.5 Patch2 Version: 8.5.5.10 Filename: MP8.5MR3_Patch2_WebExNode_85510.tar.gz Released: April 25, 2013 Contains ======== MeetingPlace WebEx Node Patch2 Filename: MP8.5MR3_Patch2_WebExNode_85510.bin Version: 8.5.5.10 Released: April 25, 2013 Cksum: 1617761987 78117438 MP8.5MR3_Patch2_WebExNode_85510.bin Defects fixed ============= CSCty59446 - http://10.224.25.46/..webex.cfg to DownFile, size:4k content:random data CSCue34876 - The CB "cache" directory content can be downloaded CSCue62771 - Change WebEx Node internal certificate to 2048 bits CSCue80030 - WebEx node sslgw will not work when DC ACE has 2+ CA certifications CSCue86969 - Can download CB cache files according to MZM URL CSCue36664 - Ability to Access cache Directory Contents CSCue99295 - Restart WebEx Node is required to trigger download new cert from CWNMS Dependencies ============ Initial 8.5FCS (8.5.2.8) installation required. Installation instructions ========================= Note: After log in as wbxadmin user on WebEx node, if initial installation was at least 60 days ago, wbxadmin and root user password will expire. Wbxadmin will be prompted to change the password when he logs in after this period, but new, more complex password criteria is enforced. The password must adhere to the following guidelines - Must be at least 14 characters in length - Must contain at least 2 upper case character (A-Z) - Must contain at least 2 lower case character (a-z) - Must contain at least 2 numeric digit (0-9) - Must contain at least 2 special character (! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~) - Cannot be the same or similar to the old one 1. Copy the patch file to the MP Application server using an SCP client (e.g. WinSCP) in /tmp directory. If using Linux-like OS: - Open console/terminal and navigate (cd) to the location of file.tar.gz - Use 'scp' command to copy the file to the app server: scp MP8.5MR3_Patch2_WebExNode_85510.tar.gz mpxadmin@application_server_IP_address:/tmp - Enter 'mpxadmin' credentials and track copy progress. If using MS Windows download the tool from this page: http://sourceforge.net/projects/winscp/files/WinSCP/4.2.7/winscp427.zip/download?use_mirror=hivelocity&use_mirror=softlayer - Extract files into a WinSCP folder - Run WinSCP.exe - Enter Host name (MP Application server's IP address), - User name (mpxadmin), Password (mpxadmin's password),and click Login - Once you have established connection, just drag the patch file file.tar.gz from your desktop to the /tmp directory on MP App server - Close WinSCP tool 2. SSH to WebEx node. Use ssh client for your OS (Putty, SecureCRT, etc.). Most Linux distros already have installed ssh client which can be used from console/terminal. Log in using 'wbxadmin' credentials. 3. Show configuration parameters: show webex config 4. Copy shown configuration into .txt file. This parameters will be used later for WebEx Node reconfiguration. 5. Then use the following command to activate shell: utils system terminal 6. "su" to the root user: su - 7. Copy the patch .tar.gz file into /opt/cisco/sftp folder on WebEx Node. Use the following command: scp mpxadmin@application_server_IP_address:/tmp/MP8.5MR3_Patch2_WebExNode_85510.tar.gz /opt/cisco/sftp 8. Go to /opt/cisco/sftp directory: cd /opt/cisco/sftp 9. Uncompress .tar.gz. Use the following command: tar xzvf MP8.5MR3_Patch2_WebExNode_85510.tar.gz 10. Check cksum of the extracted patch .bin file: cksum MP8.5MR3_Patch2_WebExNode_85510.bin If the the checksum value matches value above, you can proceed with running the patch. If the checksum value doesn't match, the file is corrupted, please, contact Cisco TAC to get the file republished. 11. Set the appropriate (755) permissions on the extracted .bin file: chmod 755 MP8.5MR3_Patch2_WebExNode_85510.bin 12. Run it: ./MP8.5MR3_Patch2_WebExNode_85510.bin Answer the confirm/continue prompts. 13. The patch installer will stop services, update the binaries, and start services. 14. When patch instalation is finished, close the SSH session. 15. Open a new SSH connection. Log in using 'wbxadmin' credentials. 16. Verify the installation version: show webex version It should be 8.5.5.10. 17. Repeat the steps for other WebEx Node (if they exist in the system). The patch can be rolled back. The procedure is the same as for installing patch. Please follow guidelines and steps given above and run it with -r switch: ./MP8.5MR3_Patch2_WebExNode_85510.bin -r