ASM Roll-up Update

Not supported by SBC SWe Lite in this release.

This article describes the steps necessary to apply ASM Roll-up updates on Sonus SBC 1000/2000 nodes with System Release 2.2.x or higher.

In this section:

Overview

SBC security patches and software updates protect your ASM from vulnerability to malicious viruses and security threats. To keep your ASM up-to-date, do the following:

Load the latest Sonus ASM Rollup available. See Ribbon Support Portal.
Run the default security template. See Applying an SBA Security Template.

Depending on the size of the update and the number of updates being installed, the reboot may take several minutes and possibly up to an hour.

Sonus publishes Update Packs on a regular basis through the Ribbon Support Portal . The Update Packs work with Windows Update and other Non-Windows updates in order to keep the ASM up-to-date. The Update Packs contain a list of tested and authorized Windows updates, or specific installation packages such as Lync Cumulative Updates.

There are two methods of updating the ASM:

The ASM needs to have access to the Internet and specifically to the Microsoft Windows Support website.

As the SBC 1k/2k ASM employs Microsoft's Windows Server operating system, it is necessary to periodically download Windows Updates. Updates are normally downloaded directly to the ASM from the Microsoft Windows Update website. In some cases, the ASM may be installed in a network that does not have Internet access to Microsoft's Windows Update website, therefore the ASM requires an alternative method to download Windows Updates. For more information, see Installing a WSUS.

Two types of ASM Roll-up Update .pkg files are provided and they include the following:

Package

File Examples

Windows Update

Includes:

Windows Service packs
Windows Patches

ASM-ROLL-UP-UPDATES_2018-01.zip

MS Lync Server Cumulative Updates

Includes:

Cumulative Updates.

ASM-UPDATES-LYNC2013_CU1-Apr2016_UX1k2k-release3.0.x-and-later.zip

ASM-UPDATES-LYNC2013_CU1-9_UX1k2k-release2.2.x.zip

You must install the Microsoft Cumulative Update on your main server before applying the CU on the SBA.

NOTE: Windows Update packs are cumulative (you only need to install the latest release). The update requires the following 2-step process:

Installation/Uploading the .pkg via the Install ASM update task. - This installs the Authorized windows updates list
Initiating Windows Update installation (via the operational status pane). - This connects to Microsoft support to install the updates listed in the authorization list

Installing Updates Using the UI

Uploading/Installing the Windows or Cumulative Updates ASM Roll-up File

After installing the latest ASM Roll-up, you should apply or re-apply the default security template to ensure you have the most recent Sonus security protection. See Applying an SBA Security Template.

Download the roll-up file from the Ribbon Support Portal and save it on your desktop or other convenient location.
Launch your preferred browser. See Supported Platforms.
Login to the Sonus SBC 1000/2000 node through the WebUI.
In the WebUI, click the Tasks tab.
In the left navigation pane, go to Application Solution Module > Install ASM Update.

Install ASM Update
Browse to the roll-up (.pkg) file.
Click OK.

Installing the Windows Updates

After a successful upload of a windows update .pkg file, the Update State field in the Windows Update panel changes to Updates Available - Install.
Once the .pkg file is uploaded to the node, the Operational Status pane, the Update State field changes to Updates Available - Install.

To install the updates:

In the WebUI, click the Tasks tab.
In the left navigation pane, go to Application Solution Module > Operational Status.

Operational Status
Click the Updates Available - Install link in the Windows Update panel.
Click OK.
If required, click Restart ASM Now (this is not always required). A reboot may or may not be required. This button will appear only if a reboot is required.

Depending on the size of the update, the reboot may take several minutes.

Installing Windows Update

Windows Update - Field Description

Field Name	Description
Most Current Roll-Up	Specifies the latest Sonus Package applied on the ASM.
Update State	Specifies the state of the Windows Update System.
Restart Required	Specifies the need to restart Windows to finalize an action executed on the ASM.
Additional Info	Specifies more information about the update status (such as, number of updates available or failure details).

Installing Updates Using the REST Interface

This section describes the requirements and procedure for installing ASM Updates using the REST interface.

Upload the Windows updates

Query

 curl.exe --cookie PHPSESSID=$PHPSESSID -k -i https://134.56.226.215/rest/sbaconfig?action=sbaupgrade -F sbaInstallFilename=@ASM_Rollup_2014-01.pkg

Response

<?xml version="1.0"?><root>
 <status>
  <http_code>200</http_code>
 </status>
</root>

Action End on Status

$url = "https://134.56.226.215/rest/sbaactionstatus"
Invoke-RestMethod -Uri $url -Method GET -WebSession $MyPs
 
<?xml version="1.0"?>
<root>
 <status>
  <http_code>200</http_code>
 </status>
 <sbaactionstatus href="https://134.56.226.215/rest/sbaactionstatus">
  <rt_Success>1</rt_Success>
  <rt_ActionType>15</rt_ActionType>
  <rt_PercentComplete>100</rt_PercentComplete>
  <rt_Duration>0</rt_Duration>
  <rt_StatusText>updates installed</rt_StatusText>
  <rt_AllActionsBitmap>127</rt_AllActionsBitmap>
  <rt_ActionStartTime>0</rt_ActionStartTime>
 </sbaactionstatus>
</root>

Apply the Windows Updates

Query the Readiness

Query

$url = "https://134.56.226.215/rest/sbaconfig"
Invoke-RestMethod -Uri $url -Method GET  -WebSession $ps

Response

<?xml version="1.0"?>
<root>
 <status>
  <http_code>200</http_code>
</status>
 <sbaconfig href="https://192.168.123.53/rest/sbaconfig">
  <AclEnable>1</AclEnable>
  <DHCPEnabled>0</DHCPEnabled>
  .
  .
  .
  <rt_UpdateState>1</rt_UpdateState>
  .
  .
  <VersionNumber>101</VersionNumber>
 </sbaconfig>
</root>

Query the Installation