4.4 Locally Installing or Upgrading the SCAP Module on an Agent Computer

Directly install or upgrade the SCAP module on the local agent computer by completing the following steps. If you want to install the SCAP module remotely from Secure Configuration Manager, see Deploying or Updating the SCAP Module to a Remote Agent Computer. You can install or upgrade the SCAP module only on computers that have either the NetIQ Security Agent for Windows or the NetIQ UNIX Agent installed.

4.4.1 Locally Installing on a UNIX Agent Computer

The UNIX Agent Manager console enables you to deploy the SCAP module to UNIX agent computers.

To locally install the SCAP module on a UNIX agent computer:

  1. Copy the .tar files for your operating system and the wcPatch file to the PSHOME/netiq/bin directory on the computer where you want to install the module. You can find the value for PSHOME in the /etc/vsaunix.cfg file on the local computer.

  2. Run the su command to switch to the root user account.

  3. Change to the PSHOME/netiq/bin directory.

  4. Run the command ./wcPatch APPLY <file name> <version> <temporary directory> where:

    • <file name> is the file name of the patch for the specific operating system, provided in the UNIX agent folder of the NetIQ Secure Configuration Manager Module for SCAP installation kit. For example, p12p34.tar provided in the HP-UX_ia64 folder.

    • <version> is the patch number of the patch provided in the UNIX agent folder of the installation kit. For example, 1.2.3.45.

    • <temporary directory> is the directory on a remote computer where you want to store temporary files during installation.

    NOTE:If you want to use a directory on the computer where you are installing, you will need twice as much free disk space as normally required.

  5. Perform Step 4 for patches provided in the UNIX agent folder of the installation kit.

  6. Re-register the agent in Secure Configuration Manager. For more information, see the User’s Guide for Secure Configuration Manager.

4.4.2 Locally Installing or Upgrading on a Windows Agent Computer

You can install or upgrade the SCAP module on a local Security Agent for Windows computer.

To locally install or upgrade the SCAP module on a Windows agent computer:

  1. Log on to the local agent computer with a local administrator account.

  2. Run the NetIQSCAPModuleForWindowsAgent.msi program from the Windows agent folder of the NetIQ Secure Configuration Manager Module for SCAP installation kit.

    Follow the instructions in the wizard until you have finished installing the module.