RE: Patch installation frequency

Even though we got bit once this year and it's taken 4 months to get a fix (required both our Vendor and an IBM PTF to address), I agree with Rob you should patch quarterly. You can probably make your auditors happy by installing the Security Group and any other related group that it currently lists, we do that monthly to assuage our internal auditors. We only load the CUME after it's vetted by our primary software vendor as we have had PTFs break their stuff and they make it available with any added fixes required for their software.

We still don't know which PTF started the problem, but it was probably in the HIPER set because I loaded that whole group for another problem, so only load those when it has something you need and don't order the group, order individual PTFs just remember it will order whatever else it is dependent on well, that's my current advice.

Coy Krill
Core Processing Team Lead, AVP
Washington Trust Bank

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob Berendt
Sent: Tuesday, November 19, 2019 09:45
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: Patch installation frequency
Importance: Low

Here we put on all cumes and latest groups once a quarter. We have three Power systems with 5 lpars of IBM i on each.
Even then we've had stuff not get discovered until the 15th partition.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob Berendt
Sent: Tuesday, November 19, 2019 12:41 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: Patch installation frequency

Cume's only come out like twice a year.
Hiper group gets updated about every other week. I would find out when the cumes are scheduled to come out and plan on putting it on about 5-6 weeks afterwards, along with ALL available groups. This should be plenty of time for the bleeding edgers to get it on and get out a hiper or two.
If, however, you're looking for ammunition to fight their opinion and put it on even less frequently I can't help you there. I tend to agree with them.

Putting off putting on PTF's for fear of what it may cause is like driving around with a flat tire because you fear that the spare could possibly explode and rip your head off.

Rob Berendt