HP VPN Firewall Appliances System Management and Maintenance Configuration Guide

39
• Make sure each patch file you are installing matches the device model and software version.
• Save patch files or patch package files to the root directory of the device's storage medium. If the
storage medium has been partitioned, save the files to the root directory of the first partition.
• Correctly name a patch file in the patch_PATCH-FlAG suffix.bin format. The PATCH-FLAG suffix is
predefined and must be the same as the first three characters of the value for the Version field in the
output from the display patch information command. If a patch file is not correctly named, the
system cannot identify the file.
The default patch file name is patch_hfw.bin.
Installing and running a patch in one step
To install and run patches in one step, use the patch install command. This command changes the state
of installed patches from IDLE to ACTIVE or RUNNING, depending on your choice.
When executing the patch install command, you must choose to run installed patches or disable running
them after a reboot. If you choose to have installed patches continue to run after a reboot, the installed
patches are set in RUNNING state and remain in this state after a reboot. If not, the installed patches are
set in ACTIVE state and change to the DEACTIVE state at a reboot.
To install and run patches in one step:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Install patches in one
step.
patch install { patch-location
| file patch-package }
• patch-location: Specifies the directory where
the patch file is located.
• file patch-package: Specifies a patch package
file name.
In FIPS mode, the patch file or patch package file
must pass authenticity verification before this
command can be executed.
If you execute the patch install patch-location command, the directory specified for the patch-location
argument replaces the directory specified with the patch location command after the upgrade is
complete.
If you execute the patch install file patch-package command, the directory specified with the patch
location command does not change.
To uninstall all ACTIVE and RUNNING patches in one step, use the undo patch install command. For
information about the step-by-step patch uninstall method, see "Uninstalling a patch step by step."
Installing a patch step by step
In contrast to one-step patch installation, step-by-step patch installation enables you to control patch
status during the patch installation process.