Welcome to the Endpoint Management Blog, where you can read the perspectives from network and service assurance experts. This Blog provides insights into the endpoint management solution, as well as technical details about specific IBM products.
IBM Tivoli Endpoint Manager
for Security and Compliance Security Configuration
The security and Compliance team at IBM has modified the
content within SCM Reporting
---- Affected Sites ---- SCM
The “Security and Compliance Analytics” deployment dashboard has been updated
to point to the latest msi to support SCA 1.2 -
The “Create Custom Checklist Wizard” has been updated with individual check
selection functionality. The radio buttons now present... [More]
Just wanted to let you guys know that our Patch Tuesday kernel fixlets
for Jan 2012 are live. They are going to be in Enterprise Security version 1557. For
now, we have content for: MS12-001 thru MS12-006. MS12-007 should be
coming out a little later. You can find the security bulletin releases from Microsoft here. Happy patching.
Just a quick note to let you know that we have increased our deployment size upgrade recommendations to encourage deployments of less than 15,000 seats to begin the upgrade process. As always, we recommend that you upgrade your servers and consoles at the same time because older consoles will not be able to connect with the upgraded server. We'll be updating our deployment size recommendations more frequently now that the holidays are over, so please subscribe to the blog's RSS feed to make sure you're aware of the latest updates. We'll... [More]
Earlier today, Microsoft released an out-of-band security bulletin related to vulnerabilities in the .NET Framework. We published the Fixlets for this bulletin in Patches for Windows site at around 3pm PST. The Fixlets in localized versions of the sites are now available as well.
IBM is pleased to announce the general availability of application update management content for Mac OS X client. Published Site Versions: Updates for Mac Applications (version 2) Highlights include: - Supported applications include Adobe Reader, Adobe Flash Player, and Adobe Shockwave. - The fixlets only handle updates of the applications. Software deployment or uninstallation is not included. Actions to Take: Lifecycle Management, Security and Compliance, and Patch Management customers who wish to use the new content should use the... [More]
As part of our ongoing efforts to reduce the size of our Fixlets, we are publishing a new version of the OS Deployment Fixlet today. There is no change to function, but this new version will require less disk space. The new version number is 11.
Security Configuration Management (SCM) for Unix Systems The Security and Compliance team at IBM has modified the content within the UNIX System checklists to add enhancements. ---- Site Versions ---- Self-Parameterizing Sites: DISA STIG Checklist for AIX 5.1 v9 DISA STIG Checklist for AIX 5.2 v8 DISA STIG Checklist for AIX 5.3 v8 DISA STIG Checklist for AIX 6.1 v8 DISA STIG Checklist for HPUX 11.00 v8 DISA STIG Checklist for HPUX 11.11 v8 DISA STIG Checklist for HPUX 11.23 v8 DISA STIG Checklist for RHEL 3 v8 DISA STIG Checklist for... [More]
Just wanted to give everyone a heads up that we are in the process of reviewing and updating our fixlets. The good news is that these changes will have a positive impact on your environments by reducing the size of the fixlets while maintaing all of the same function. As we progress I will post to the blog which fixlets are being updated each day. We will begin rolling out these changes next week, updating between 4-6 sites a day.
Just a quick post on some of the setup and configuration changes you can expect in version 8.2. On upgrade, all existing Console users will be migrated to local users. Console users will be asked to provide .pvk files on initial login for the purposes of verification only and will not be used for subsequent login attempts. Consoles in 8.2 connect to the Server through HTTPS 52313. This replaces the previous method of ODBC connections. This is configurable. Account provisioning is now handled by the Console, not the BESAdmin tool. However,... [More]
We just published the Fixlets for Patches for Windows sites for German, Japanese and Chinese (Simplified) languages. The Patch Tuesday content for the remaining language sites should be available by Wednesday evening PST.
Just wanted to let you guys know that our Patch Tuesday fixlets for November 2011 are live. They hit the world roughly forty minutes ago. We also published the re-release of MS11-037 as part of that push. We'll be working next on the non-English Patch Tuesday fixlets.
Just a heads up, our tenative delivery times for this upcoming Patch Tuesday are 2:00PM PST for all patches. We'll release non-English security patches shortly afterwards. You can find more information about the upcoming November Patch Tuesday here: http://technet.microsoft.com/en-us/security/bulletin/ms11-nov