Installation Instructions for Hot Fix K59003

64-bit Enabled AIX

Hot fix K59003 addresses the issue(s) in SAS Enterprise GRC 5.1_M4 as documented in the Issue(s) Addressed section of the hot fix download page:

http://ftp.sas.com/techsup/download/hotfix/HF2/K59.html#K59003

K59003 is a "container" hot fix that contains the following "member" hot fixes which will update the software components as needed.

K58003  updates  SAS Enterprise GRC Administrative Tools 5.1_M4
J52004  updates  SAS Enterprise GRC Mid-Tier 5.1_M4
N24003  updates  SAS Enterprise GRC Server 5.1_M4

Before applying this hot fix, follow the instructions in SAS Note 35968 to generate a SAS Deployment Registry report, then verify that the appropriate product releases are installed on your system. The release number information in the Registry report should match the 'member' release number information provided above for the software components installed on each machine in your deployment.

The hot fix downloaded, K59003pt.zip, includes the updates required for all components listed above on all applicable operating systems. To apply this hot fix on multiple machines, you can either save K59003pt.zip on each machine or save it in a network location that is accessible to all machines.

Do NOT extract the contents of K59003pt.zip. The hot fix installation process will extract the contents as needed.

IMPORTANT NOTES

1. Files delivered in this hot fix will be backed up during the installation process. However, it is good general practice to back up your system before applying updates to software.

2. You must have Administrator Privileges on your CLIENT or SERVER machine.

3. All currently active SAS sessions, daemons, spawners and servers must be terminated before applying this hot fix.

4. This hot fix should be installed using the same userid who performed the initial software installation.

INSTALLATION

The hot fix will be applied using the SAS Deployment Manager (SDM). By default, the SDM will search in the <SASHOME>/InstallMisc/HotFixes/New directory for hot fixes to be applied, but will also prompt for a location if you have downloaded hot fixes to a different directory.

After downloading K59003pt.zip, follow the instructions for applying hot fixes in the SAS Deployment Wizard and SAS Deployment Manager 9.3: User’s Guide.

The hot fix installation process generates the log file

<!SASHOME>/InstallMisc/InstallLogs/IT_date-and-time-stamp.log

Postexec log files are created after the installation is completed and identifies the files that were added, backed up, changed and removed. These log files include the ‘member’ hot fix id in the name of the file and are also written to the <!SASHOME>/InstallMisc/InstallLogs directory. There is one postexec log for each ‘member’ hot fix applied (member hot fixes are listed at the top of these instructions).

The content of this hot fix is listed in the hot fix manifest.

Notes for hot fix K59003

1. After applying the hot fix, on login to GRC, it will prompt to apply a db patch. Let it apply followed by server restart. It will add the new WORKFLOW_REGISTRY table.

2. As part of this fix, we provide an option for user to disable workflow for Risk, Control, PotentialImpact and Incident related objects. If users need to disable workflow for these objects, then they need to go to SMC, and set the workflow templates value to "OFF" for those objects.

3. A new parameter "allowRemoveAfterValidate" is added to PopAsblTableComponent components. User can set allowRemoveAfterValidate = true if one needs to remove assessables after invalidation. This option can be applied to the following components.

   PopulatedControlTable
   PopulatedImpactTable
   PopulatedRiskTable

   Prerequisite to see the above effect is, the readonly attribute of those components need to be updated

   from: readonly="TEMP.planningReadOnly or TEMP.hasBeenStarted"
   to: readonly="TEMP.planningReadOnly"

4. As part of security fix to prevent cross-scripting vulnerability, please update configdata.properties file and add the property “monitor.http.xframeoptions” with one of the following values:

   SAMEORIGIN - only allows current site to frame content
   ALLOW-FROM uri - only allows the page to be framed from the specified origin (may not be supported on all browsers)
   DENY - prevents any domain from framing the content (not recommended)
   none - turn off header, do not set any value (default)

POST-INSTALLATION INSTRUCTIONS

For each product installed, click the link to be redirected to post-installation instructions.

K58003  updates  SAS Enterprise GRC Administrative Tools 5.1_M4
J52004  updates  SAS Enterprise GRC Mid-Tier 5.1_M4
N24003  updates  SAS Enterprise GRC Server 5.1_M4

K58003  updates  SAS Enterprise GRC Administrative Tools 5.1_M4

NONE

J52004  updates  SAS Enterprise GRC Mid-Tier 5.1_M4

Re-build and Re-deploy Web Application

This hot fix requires that the WebApp be rebuilt and redeployed. Use the following steps to perform this post-installation task:

Step 1: Re-build Web Application

In order for this step to execute correctly, the Metadata Server must be running.

1.1 Invoke the SAS Deployment Manager 9.3

From the SASDeploymentManager directory launch sasdm.sh.
SAS Deployment Manager is installed in the following default location:

<SASHOME>/SASDeploymentManager/9.3

1.2 Select a language in the Choose Language box

1.3 Select Rebuild Web Applications

1.4 Select Configuration Directory or Enter the Configuration Directory and Level that needs to be updated

1.5 Specify Connection Information, including the sasadm User ID and Password

1.6 Select Enterprise GRC MidTier 5.1 as the Web Application to Rebuild

1.7 Verify the information on the Summary screen and select Start

1.8 Select Finish when the deployment is complete

This process will update the Enterprise GRC MidTier 5.1 ear in <SASCONFIGDIR>/Web/Staging.
A backup of the original ear file will be placed in the directory below:

<SASCONFIGDIR>/Web/Staging/Backup

Step 2: Re-deploy Web Applications

Re-deploy the web applications based on the instructions for the web application server you are using.

This completes the installation of hot fix K59003 on 64-bit Enabled AIX.