Open SSL fix for Logjam Attack for Cisco Unified Intelligence Center

Size: px

Start display at page:

Download "Open SSL fix for Logjam Attack for Cisco Unified Intelligence Center"

Geoffrey Marsh
5 years ago
Views:

1 Open SSL fix for Logjam Attack for Cisco Unified Intelligence Center November 2015 Introduction This release notes contain important information about installation procedures for the Open SSL fix for Logjam Attack for Cisco Unified Intelligence Center. Valid Upgrade Paths This patch can be applied to all Unified Intelligence Center releases of versions 9.1(1), 10.x and before applying the patch install the latest COP on all mentioned versions. For detailed information about the Open SSL, refer to the CDETS listed below. Note: Review the Important Notes section for more information on issues that may affect your system. Patch Version ciscocuic-openssl.cop.sgn File Name ciscocuic-openssl.cop.sgn MD5 Checksum 139b1e3c73d703778c923282d8517ecf Related Documentation To view documentation that supports your version of Unified Intelligence Center release, go to: Determining the Software Versions You can determine the version of your Unified Intelligence Center software that is running on your server by using the following command from CLI. The output of the command should be similar to the following: Active Master Version: xxxxx. Important Notes When upgrading to a new release of Unified Intelligence Center, make sure that the updates in this patch are included in the version you are upgrading to. If the system is upgraded to another version that does not contain the fix referenced in the Resolved Caveat in This Patch section below, then this patch will need to be reapplied after the system is upgraded. Cisco Unified Intelligence Center Page 1

2 Installing the Update You must perform the following procedure on the primary node first and then on the secondary nodes of the Unified Intelligence Center. To avoid interruption to agents, perform the installation during a maintenance window. IMPORTANT: You can use the Cisco Unified Operating System Administration page or CLI to perform this upgrade. Do not use CLI to perform this upgrade as the installation may hang. You can install a patch or upgrade version from a DVD (local source) or from a computer (remote source) that the server being upgraded can access. Note: Be sure to back up your system data before starting the software upgrade process. For more information, see Disaster Recovery System Administration Guide. From Local Source: Step 1: Download ciscocuic-openssl.cop.sgn. Step 2: Copy the ciscocuic-openssl.cop.sgn file to a writeable CD or DVD. Insert the new CD or DVD into the disc drive on the local server that is to be upgraded. Step 3: Open Cisco Unified Operating System Administration directly by entering the following URL: Where server-name is the host name or IP address of the admin server. Step 4: Enter your OS Administrator username and password. Step 5: Choose Software Upgrades > Install/Upgrade. Step 6: For the software location source, choose DVD/CD. Step 7: If you burned the patch file to a subdirectory on the CD or DVD, enter the path in the Directory field. Step 8: To continue the upgrade process, click Next. Step 9: Choose ciscocuic-openssl.cop.sgn and click Next. Step 10: In the next window, monitor the progress of the download, which includes the filename and the number of megabytes that are getting transferred. Cisco Unified Intelligence Center Page 2

3 When the download completes, the Checksum window displays. Step 11: Verify the checksum value: 139b1e3c73d703778c923282d8517ecf Step 12: After determining that the checksums match, click Next to proceed with the software upgrade. A warning window displays the selected option. Step 13: Click Install. The Install Status window displays the Install log. Step 14: When the installation completes, click Finish. Step 15: Verify the COP file version using this command from the CLI: Active Master Version: xxxxx Active Version Installed Software Options: ciscocuic-openssl.cop.sgn <-- Note: Other cop files such as this may or may not already be present on your system. From Remote Source: Step 1: Download ciscocuic-openssl.cop.sgn. Step 2: Copy ciscocuic-openssl.cop.sgn to an ftp or sftp server that is to be upgraded. Step 3: Open Cisco Unified Operating System Administration directly by entering the following URL: Where server-name is the host name or IP address of the admin server. Step 4: Enter your OS Administrator username and password. Step 5: Choose Software Upgrades > Install/Upgrade. Step 6: For the software location source, choose Remote File System. Step 7: Enter the directory name for the software upgrade, if required. If the upgrade file is located on a Linux or UNIX server, you must enter a forward slash at the beginning of the directory path. For example, if the upgrade file is in the patches directory, you must enter /patches. If the upgrade file is located on a Windows server, check with your system administrator for the correct directory path. Cisco Unified Intelligence Center Page 3

4 Step 8: Enter the required upgrade information as described: Remote Server: Host name or IP address of the remote server from which software will be downloaded. Remote User: Name of user who is configured on the remote server. Remote Password: Password that is configured for this user on the remote server. Download Protocol: Choose sftp or ftp. Step 9: To continue the upgrade process, click Next. Step 10: Choose ciscocuic-openssl.cop.sgn " and click Next. Step 11: In the next window, monitor the progress of the download, which includes the filename and the number of megabytes that are getting transferred. When the download completes, the Checksum window displays. Step 12: Verify the checksum value: 139b1e3c73d703778c923282d8517ecf Step 13: After determining that the checksums match, click Next to proceed with the software upgrade. A warning window displays the selected option Step 14: Click Install. The Install Status window displays the Install log. Step 15: When the installation completes, click Finish. Step 16: Verify the COP file version using this command from the CLI: Rollback Active Master Version: xxxxx Active Version Installed Software Options: ciscocuic-openssl.cop.sgn <-- Note: Other cop files such as this may or may not already be present on your system. If you need to rollback this update, contact Cisco TAC. Resolved Caveat in this Patch The following caveats are resolved in this COP file. The defect is listed by identifier and then by component. Cisco Unified Intelligence Center Page 4

5 Identifier Component Headline CSCuu82332 vos-platform CUIC : Evaluation of cuis for OpenSSL June 2015 Cisco Unified Intelligence Center Page 5

Software Upgrades. Software Upgrade and Installation. From Local Source CHAPTER

Software Upgrades. Software Upgrade and Installation. From Local Source CHAPTER CHAPTER 7 You can use the options to perform the following types of installations and upgrades: Install/Upgrade Use this option to upgrade the application software, install Cisco Unified CallManager Locale