
Minorapplicationupdate
Notallmaintenancerequiresthedrasticmeasurespreviouslydescribed.Ifapatchisavailable,butavirus
attackisnotinprogress,amorerelaxedapproachmightbeappropriate.
AsinglescriptcancontroltheoperationthroughtheuseoftheRETRYONERRORcommandandtagles.
1.DownloadPhaseTheprocessbeginswithamessageboxinformingtheuserthatapatchwillbe
downloadedforlaterinstallation.Then,thepatchcanbecopiedfromtheserver.
2.PatchphaseThepatchcodeisreadyforinstallationanditistimetowarntheusertostartinstallation.If
theuserrequestsadelay,ataglecouldbeusedtotrackthedelay.Perhapslaterrequeststoinstallthe
patchmightbemoreurgent.AntidoteDeliveryManagermaintainsthisstateeveniftheuserpowersoff
orrebootstheirsystem.Whentheuserhascompletedallprocessingandisreadyforasystemreboot,
thepatchisinstalledandthesystemisrebooted,ifrequired.
Attention:Afterasystemhasbeenrestoredandrebooted,rebootthesystemagaininorderforchangesto
takeeffect.
AccommodatingVPNsandwirelesssecurity
TheRescueandRecoveryenvironmentdoesnotcurrentlysupporteitherremoteaccessVirtualPrivate
Networks(VPN)orwirelessnetworkattachments.Ifamachineisusingoneofthesenetworkattachmentsin
WindowsXP,andthenrebootstotheRescueandRecoveryprogram,networkconnectivityislost.Therefore,
ascriptliketheoneinthepreviousexampledoesnotworkbecausenetworkingisnotavailableinthe
RescueandRecoveryprogramtodownloadlesandxes.
Thesolutionistopackageallrequiredlesintheoriginalmessageordownloadtheneededlesbefore
rebooting.Placeallnecessarylesinthedirectorywithgo.rrs.Thescriptlemustmovetherequired
lesintotheirnalpositionsbeforeexitingthescript(whenthedirectorycontaininggo.rrsontheclientis
deleted).Placingpatchesinthemessagelemightnotbepracticalifthepatchesareverylarge.Inthis
case,theusershouldbeinformed,thennetworkingisrestrictedtoonlytheservercontainingthepatch.
ThenthepatchcanthenbedownloadedwhilestillinWindowsXP .Althoughthiscanlengthentheexposure
ofWindowsXPtoavirus,theextratimeisprobablynotsignicant.
AntidoteDeliveryManagercommandguide
Thebootmanagercommand-lineinterfaceisAntidoteDeliveryManager.Itresidesinthedirectory
C:\ProgramFiles\Lenovo\RescueandRecovery\ADM.Thefollowingtablepresentstheswitchesandtheir
resultsforAntidoteDeliveryManager.
Table37.AntidoteDeliveryManagercommands
CommandsDescription
APKGMES[/KEYkeyle|
/NEWKEYkeyle|/NOSIG]
message_directorymessage_name[/NODATE]
Ifthe/KEYparameterisused,asigningkeywillberetrievedfrom
keyle.prvandthekeyinkeyle.pubmusthavebeendistributed
toallclientsthatwillprocessthemessage.Bydefault,thekeyle
"KEYFILE.PRV"willbeused.The/NEWKEYparametercanbeused
tocreateakey.Ifsigningisnotdesired,specifying/NOSIGwill
preventsigning.Adatestampwillbeappendedtotheendofthe
messagename,suchasmessage_nameYYMMDDHHmm.zap.
136RescueandRecovery4.23DeploymentGuide
Comentarios a estos manuales