Install/Upgrade BigfixMeSync Plugin to v1.1.2 - superseded
| 1 Votes |
Versioning - This is an older version.
| 1 | Install/Upgrade BigfixMeSync Plugin to v1.0.0 | 2/20/2015 3:19:14 AM |
| 2 | Install/Upgrade BigfixMeSync Plugin to v1.1.0 | 6/19/2015 6:10:50 AM |
| 3 | Install/Upgrade BigfixMeSync Plugin to v1.1.1 | 6/25/2015 6:37:21 AM |
| 4 | Install/Upgrade BigfixMeSync Plugin to v1.1.2 | 10/26/2015 3:51:39 PM |
| 5 | Install/Upgrade BigfixMeSync Plugin to v1.1.3 | 11/16/2015 3:48:21 AM |
| 6 | Install/Upgrade BigfixMeSync Plugin to v1.1.4 | 3/15/2016 3:29:00 PM |
| 7 | Install/Upgrade BigfixMeSync Plugin to v1.1.5 | 5/2/2016 7:00:23 AM |
Description
|
This task installs the BigfixMeSync plugin onto your IEM server. Click Take Action and target the IEM Server to complete this task. 1. Install the plugin service using BESSupport -> ID# 708 Then this task will become valid and installable, do so. At the first start BigfixMeSync plugin: 1. Creates Bigfix.me Sync custom site When you see that Bigfix.me Sync custom site is created, you may need to restart your console to see the new bigfix.me domain. Then drill down to the Sync BFME Dashboard within Bigfix.me Sync site to further configure the Bigfix.me Synchronization Plugin. |
Property Details
| 6272 | |
| Install/Upgrade BigfixMeSync Plugin to v1.1.2 | |
| BESC | |
| Installation / Upgrade | |
| 408885 | |
| luisa_attanasio@it.ibm.com | |
| <Unspecified> | |
| <Unspecified> | |
| 2/22/2015 12:00:00 AM | |
| BigfixMeSynch | |
| lattanas on 10/26/2015 3:51:39 PM | |
| lattanas on 10/26/2015 3:51:39 PM | |
| 8031 Views / 12 Downloads | |
* Average over 1 rating.
** Log In or Register to add your rating.
|
Relevance
| Used in 7 fixlets | * Results in a true/false |
(if (name of operating system starts with "Win") then platform id of operating system != 3 else true) AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true) AND (exists root server) AND exists main gather service whose (version of it >= "9")
NOT in proxy agent context
| Used in 22 fixlets | * Results in a true/false |
exists main gather service whose (version of it >= "9")
| Used in 7 fixlets | * Results in a true/false |
( if ( it contains "Win" ) then (exists services whose(service name of it = "BESPluginService" AND state of it = "Running") ) else false ) of name of operating system
| Used in 9 fixlets | * Results in a true/false |
exists key "HKLM\SOFTWARE\BigFix\Enterprise Server\MFSConfig" whose (exists value "RESTUsername" of it AND exists value "RESTPassword" of it AND exists value "RESTURL" of it AND exists value "RESTPasswordEncryption" of it) of registry
| Used in 1 fixlet | * Results in a true/false |
if (exists key "HKLM\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync" whose (exists value "Path" of it) of registry) then NOT exists folder (value "Path" of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync" of registry as string) whose (exists file "bigfixMeSync.exe" whose (version of it = "1.1.2") of it AND exists file "REST.dll" whose (version of it = "1.0.10") of it) else true
Actions
Action 1 (default)
Action Link Click
here to install the bigfixMe Synchronization plugin.
Script Type
BigFix Action Script
// set install parameters
parameter "pluginVersion" = "1.1.2"
parameter "serverFolder" = "{parent folder of file (following text of first "%22" of (image path of main gather service as string))}"
parameter "pluginsFolder" = "{parameter "serverFolder"}\Applications"
parameter "configFolder" = "{parameter "pluginsFolder"}\Config"
parameter "pluginFolder" = "{parameter "pluginsFolder"}\bigfixMeSync"
// create pluginsFolder folder and sub-folder pluginFolder if needed
if {NOT exist folder (parameter "pluginsFolder")}
waithidden cmd.exe /C mkdir "{parameter "pluginsFolder"}"
endif
if {NOT exist folder (parameter "configFolder")}
waithidden cmd.exe /C mkdir "{parameter "configFolder"}"
endif
if {NOT exist folder (parameter "pluginFolder")}
waithidden cmd.exe /C mkdir "{parameter "pluginFolder"}"
endif
// going to try to precache first
prefetch bigfixMeSync1.1.2.zip sha1:09378148e9e9ee04e4fdd35a813ba0077a4cd7d0 size:2374944 http://files.bigfix.me//bigfixMeSync1.1.2.zip sha256:16c360728c2115542fc64a14531d58cdf48fe2179065d9678a8289fdc83de4bf
//rretrieve unzip utility
prefetch unzip.exe sha1:e1652b058195db3f5f754b7ab430652ae04a50b8 size:167936 http://files.bigfix.me/unzip-5.52.exe sha256:8d9b5190aace52a1db1ac73a65ee9999c329157c8e88f61a772433323d6b7a4a
utility __Download\unzip.exe
waithidden __Download\unzip.exe -qq -o -d "{parameter "pluginFolder"}" __Download\bigfixMeSync1.1.2.zip
// Configure Plugin settings
delete __appendfile
if {NOT exists file "bigfixMeSync.xml" of folder (parameter "configFolder")}
appendfile "1.0" encoding="utf-8" ?>
appendfile
appendfilebigfixMeSync
appendfile" {parameter "pluginFolder"}\bigfixMeSync.exe" %RESTURL% %MOUSERNAME% %MOPASSWORD%
appendfile
appendfile600
appendfile
appendfileTrue
appendfile
move __appendfile "{parameter "configFolder"}\bigfixMeSync.xml"
endif
// configure plugin
regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync]" "Installation Time"="{now}"
regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync]" "Version"="{parameter "pluginVersion"}"
regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync]" "Path"="{escape of (parameter "pluginFolder")}"
regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync]" "DebugLevel"="0"
regset "[HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server\Applications\bigfixMeSync]" "KeepLogs"="15"
// Start Plugin Service if it is stated
if {exists service "BESPluginService"}
waithidden cmd.exe /C net restart BESPluginService
endifc
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Sharing
| Social Media: |
Comments
 |
|
| @ed_sf, Just to clarify, the MO account's password used is not in plain text , it's crypted with the Windows Crypto API and then stored in the registry . | |
 |
|
| Also, I think this might use the encrypted master operator password that is placed on the root server for many different REST API uses, but that itself is a potential issue. | |
|
|
| @ed_sf .. I would not recommend this in production use for many reasons. You would be better off using this in a dev environment, then set up syncing for a particular site between the dev environment and the production environment so that you only sync over content that you have validated. | |
 |
|
| Is this safe to use? from what I see it looks like the MO account's password is going to be in plain text on the server. If a hacker gets a hold of it they now have access to all of your systems you manage with BigFix. | |
|
|
| Uploaded new version containing fix to skip content with validation problems | |
