Updating scanner catalogs
Scanner catalogs are used by the scanner to discover software on the endpoints. The catalogs are automatically updated after each import of the BigFix software catalog. Use this procedure only if the automatic update of the scanner catalogs fails.
Before you begin
- The License Metric ToolBigFix Inventory server is visible to the BigFix server.
- If Secure Socket Layer (SSL) is enabled in License Metric ToolBigFix Inventory, the BigFix server recognizes SSL certificates of License Metric ToolBigFix Inventory as valid.
Procedure
-
Check whether the action that automatically updates scanner catalogs was created.
-
If the action exists, check whether it failed due to prefetch problems. If it does not
exist, go to step 3.
If the status is Failed, communication between the BigFix server and the License Metric ToolBigFix Inventory server is blocked. Ensure that the servers can communicate. Then, download the Catalog Download Fixlet to force the catalog update. If you cannot change the configuration to allow communication between servers, edit the fixlet so that the BigFix InventoryLicense Metric Tool server can download catalogs from the BigFix server, and then run the fixlet.
-
Download the fixlet for forcing the update of scanner catalogs.
- Log in to License Metric ToolBigFix Inventory.
- In the top navigation bar, click .
- Click the question mark sign . Then, click Catalog Download Fixlet. Choose the location where you want to save the catalog_download.bes file, and click Save.
- Optional:
If the problem is caused by the lack of communication between servers, edit the
catalog_download.bes file and substitute the host_name
and port of the License Metric ToolBigFix Inventory server
with values that allow the server for downloading scanner catalogs from the BigFix server.
prefetch catalog.xml.bz2 sha1:24dcb13c743f2f92b0c5e9887e9df1d4491c4a66 size:398083 http://host_name:port/sam/catalogs/CIT_catalog_WINDOWS.xml.bz2 sha256:1e81c865d7fc96468649dbd5c334a2d77b12c5dd252671e22a7e5df0bd7ccbbe
Important: Change the host_name and port for all catalogs. -
Upload the catalog_download.bes file to the BigFix console and run the Catalog Download
(Version: version) fixlet.
- Copy the file to the computer where the BigFix console is installed.
- Log in to the BigFix console.
- To import the file to the console, click .
- Open the directory where you store the catalog_download.bes file, select the file, and click Open. The file is imported.
- In the left pane, click . The list of available fixlets opens in the upper right pane.
- Select Catalog Download (Version: version), and click Take Action.
- Select computers on which you want to run the fixlet, and click OK.
- Wait for the next scheduled software scan and import of data or run these actions manually. For more information, see: Initiating software scans and Scheduling imports of data.
- Optional:
If the problem is not solved, manually copy the catalog files from the BigFix InventoryLicense Metric Tool server to the BigFix server.
Results
Install or Upgrade Scanner in private mode on windows
About this task
In case you have already the newest catalog uploaded the BFI server and then you have installed agent in the private mode, the newest catalog may not be automatically propagated to the agent. In such case follow the steps:
Procedure
-
Download the fixlet for forcing the update of scanner catalogs.
- Log in to BigFix Inventory.
- In the top navigation bar, click .
-
Click the question mark sign Question mark sign. Then, click Catalog Download
Fixlet. Choose the location where you want to save the
catalog_download.bes
file, and click Save.
-
Edit the
catalog_download.bes
file and substitute the relevances:This:
<Relevance><![CDATA[if (name of operating system as lowercase starts with "win") then (exists (folder "cit" of folder (value of variable "windir" of environment)) whose (exists file "cit.ini" of it) and (exists folder ((key "CIT_HomeDirectory" of file "cit.ini" of folder "cit" of folder (value of variable "windir" of environment)) & "\bin") whose ((exists file "wscansw.exe" of it) and (exists file "wscanfs.exe" of it)))) else (exists (folder "/etc/cit") whose (exists file "cit.ini" of it) and (exists folder ((key "CIT_HomeDirectory" of file "cit.ini" of folder "/etc/cit") & "/bin") whose ((exists file "wscansw" of it) and (exists file "wscanfs" of it))))]]></Relevance>
with the following:<Relevance><![CDATA[if (name of operating system as lowercase starts with "win") then ((exists (folder "cit" of folder (value of variable "windir" of environment)) whose (exists file "cit.ini" of it) and (exists folder ((key "CIT_HomeDirectory" of file "cit.ini" of folder "cit" of folder (value of variable "windir" of environment)) & "\bin") whose ((exists file "wscansw.exe" of it) and (exists file "wscanfs.exe" of it)))) OR (exists folder ((pathname of parent folder of data folder of client) & "\LMT\CIT\scanner\bin") whose ((exists file "wscansw.exe" of it) and (exists file "wscanfs.exe" of it)))) else (exists (folder "/etc/cit") whose (exists file "cit.ini" of it) and (exists folder ((key "CIT_HomeDirectory" of file "cit.ini" of folder "/etc/cit") & "/bin") whose ((exists file "wscansw" of it) and (exists file "wscanfs" of it))))]]></Relevance>
this:
<Relevance>if (name of operating system as lowercase starts with "win") then ((exists (folder "cit" of folder (value of variable "windir" of environment)) whose (exists file "cit.ini" of it)) and ((key "CIT_Exploiters" of file "cit.ini" of folder "cit" of folder (value of variable "windir" of environment)) contains "SUA:")) else ((exists (folder "/etc/cit") whose (exists file "cit.ini" of it)) and ((key "CIT_Exploiters" of file "cit.ini" of folder "/etc/cit") contains "SUA:"))</Relevance>
With the following:
<Relevance><![CDATA[if (name of operating system as lowercase starts with "win") then (((exists (folder "cit" of folder (value of variable "windir" of environment)) whose (exists file "cit.ini" of it)) and ((key "CIT_Exploiters" of file "cit.ini" of folder "cit" of folder (value of variable "windir" of environment)) contains "SUA:")) OR (exists folder ((pathname of parent folder of data folder of client) & "\LMT\CIT\scanner\config") whose (exists file "Cit.properties" of it))) else ((exists (folder "/etc/cit") whose (exists file "cit.ini" of it)) and ((key "CIT_Exploiters" of file "cit.ini" of folder "/etc/cit") contains "SUA:"))]]></Relevance>
-
Upload the
catalog_download.bes
file to the BigFix console and run the Catalog Download (Version: version) fixlet.- Copy the file to the computer where the BigFix console is installed.
- Log in to the BigFix console.
- To import the file to the console, click .
-
Open the directory where you store the
catalog_download.bes
file, select the file, and click Open. The file is imported. - In the left pane, click . The list of available fixlets opens in the upper right pane.
- Select Catalog Download (Version: version), and click Take Action.
- Select computers on which you want to run the fixlet, and click OK.