This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

scripted installation and configuration Update Manager

I want to automate the installation and configuration of Sophos

The part which i have trouble with now is the configuration of the Update Manager. I have no internet connection, read the forums and can enter the share manually.

However, i want to automate the configuration of the update manager for the update manager

i use version 4.5.0.9

:12125


This thread was automatically locked due to age.
  • Hello Hannezzz,

    is it actually a SUM which you want to install automatically? Could you give us some more details about your setup (especially the I have no internet connection)?  

    Christian

    :12135
  • The Sum is installed, but not configured yet.

    i want to fill the fields such as the sources where the updates are located, distribution, schedule etc.

    The environment is not connected directly to internet, we download the sources and place them in the sophos share

    :12137
  • I see. Do you want to install several SUMs like this one?

    Do you have only a SUM or a full management server in this air gapped network(s)? I'm still not sure I fully understand what you are about to do so please excuse me asking dumb questions like: download the sources - what are these sources? Is this the Warehouse downloaded by another SUM or a CID?

    Christian

    :12139
  • no problem at all.

    This will be the first SUM in a new installed domain environment.

    We have a test environment, where we download the sources (indeed, the warehouse) and copy the data to that directory.

    From there we want to deploy the clients, but we don't want to configure this manually, because we have several domain environments to deploy, which are all not connected to eachother and to the internet.

    :12141
  • Interesting. Guess it's not designed to be used this way (I see that I'm not as "creative" as I've thought :smileyvery-happy:). 

    Will you manage the clients in these disconnected domains (i.e. not only set up a SUM but a full management server) or not? All a standalone SUM could do is assuring the consistency of the CIDs it is deploying to. But then you could as well copy the CIDs instead of the warehouse. Or did I miss something?

    Christian

    :12145
  • Hi,

    The command line tool UpdateManagerHelper.exe might be able to do what you want.  I've not really used it though to say for certain but from looking at the parameters it looks like it could be useful:

    Usage: UpdateManagerHelper OPTIONS [HOSTNAME|FILE] [USERNAME] [PASSWORD]
    Options:
      -l, --list   : Lists the update managers known to the system (CSV output)
      -i, --import : Imports update manager configation from files with
                     the specific names:
                           HOSTNAME-Upstream.xml
                           HOSTNAME-Downstream.xml
                           HOSTNAME-Subscriptions.xml
                           HOSTNAME-Schedules.xml
                           HOSTNAME-General.xml
                     where HOSTNAME identifies an update manager as output
                     by the --list command
      -e, --export : Exports the configuration of the specified update manager
                     to files with specific names (See --import)
      -il, --import-locations : Imports a the list of user-defined locations
                     from the specified file.
      -el, --export-locations : Exports the list of user-defined locations
                     to the specified file
      -c, --change-credentials : Changes the updating credentials for the
                     specified update manager to the specified username and
                     password. If password is not specified, the program
                     will prompt for one.
      -f, --force   : Overwrite existing files when exporting
      -n, --nowarn  : Don't warn about backing up the database
      -v, --version : Displays version information
      -h, --help    : Shows this message

    So it looks like you can import the config from XML files for a given SUM.

    I found it linked from:
    http://www.sophos.com/support/knowledgebase/article/112598.html
    It doesn't seem to work yet on SEC 4.7 though, you might be best calling Support and asking more about this tool.

    Cheers

    Jak

    :12147
  • Thx, i downloaded the tool, but it gives an error :

    ERROR: Could not load file or assembly 'Sophos.Management.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=021716c8473545fb' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040)
       at Sophos.Management.Tools.UpdateManagerHelper.Utils..ctor() at Sophos.Management.Tools.UpdateManagerHelper.Program.Main(String[] arguments)

    @Christian

    I will manage clients at disconnected domains, with full management. The SUM is also the Sophos Server. We would like to manage all clients throught the console.

    :12203
  • I suspect that one is tied to version 4 of the management service based on the error.  I would suggest contacting Support to see if they have one for version 4.5 or 4.7.

    Regards,

    Jak

    :12213