How to use Oracle Enterprise Manager Ops Center to patch your Solaris Systems ?
By Anand Akela on Mar 06, 2012
Oracle Enterprise Manager Ops Center allows you to update your Solaris systems with patches available from My Oracle Support (MOS).
Like always in life, there are multiple ways to perform a given task and the same is true for Ops Center.
Juergen Fleischer, Senior IT/Product Architect , Oracle Enterprise manager Ops center provided the content for this blog to guide you through different ways to perform Oracle Solaris patching depending on deployment scenarios.
Scenario 1 - Applying a single Patch to an Asset
Let's start with installing just a single patch to a system. To perform this task you would select the OS Asset and pick the action 'View/Modify Catalog' from the right hand side Actions panel.
From the pop-up screen, you can search for the patchid, see which revision is already installed and select a newer one if required.
Here is a MOS how-to document describing this in all detail:
Scenario 2 - Applying multiple patches to several systems
If you have to apply a list of patches to multiple systems every now and then, creating an Update Profile would be the best method, as once you have created the Profile it can be used many times ensuring the exact same patches in the list are applied each and every time.
Update Profiles are located in the 'Plan Management' section. Update Profiles can be used in two ways: either you select a single or a group of OS assets and pick the action 'New Update OS Job'. Or, you pick the Update Profile in the Plan Management section and select 'New Update OS Job'. The wizard will allow you to select one or more target assets or groups.
Here is a MOS how-to with all the details:
Scenario 3 - Regular Baseline Patching
For regular Baseline Patching 'Update Profiles' can be based on given patchsets which are made available by the Ops Center Knowledge Base (KB).
The KB offers two different patchsets, the monthly released Solaris Baselines (based on Oracle's internal EIS-DVD) and the current or archived versions of the "Recommended Patchset for Solaris". These are updated whenever a new critical patch gets released. Every quarter, one of these Recommended Patchsets for Solaris will be renamed as the 'Critical Patch Update' in line with standard Oracle practice. It's up to the Customer's patching policy and strategy to determine which patchsets should be used and how often they should be applied.
Scenario 4 - Latest & Greatest patchset
Finally, if required, Customers can select what is called "Latest & Greatest" patchset. These are all the latest available patches for all installed packages. To perform this task, use the 'Host Compliance Report' and tick the Security & Bug Fixes check box.
More details can be found in this blog entry
or in this MOS how-to document:
So far, we have talked about various scenarios around applying a single patch or multiple patches. These patches can be applied on a running system or by using LiveUpgrade (LU). LU allows creating Alternate Boot Environment (ABE), Synchronizing boot environments, Patching the ABE and then Activating the ABE.
For detailed examples and howto examples:
Before using LiveUpgrade, please verify that the latest LU-Patch (sparc: 121430, x86: 121431) is installed on the running system.
Furthermore, when payching zones always make use of the parallel zone patching feature, independent if using LU or not. Following blog entry describes this very well :