Previous Topic: Mixed Policy Management Environments

Next Topic: Troubleshooting Guide


Update Endpoints in a Mixed Policy Management Environment

When you update endpoints in a mixed policy management environment, you update the endpoints in each environment separately.

Note: Endpoints cannot accept rules that modify classes that were introduced in a later CA Access Control version. For example, an r8 endpoint can only accept rules that change r8 functionality, even though you deploy the rules from an r12.5 PMD or DMS.

To update endpoints in a mixed policy management environment

  1. Create a script file with the selang deployment commands you want to deploy to the endpoints.
  2. In CA Access Control Enterprise Management, do the following:
    1. Store the policy version on the DMS.
    2. Assign the stored policy version to the host groups you want to update.

    CA Access Control deploys the policy to the endpoints in the host group.

  3. Update the PMDB with the selang commands in the script file.

    The PMDB propagates the commands to its endpoints.

Note: For more information about how to store and assign policy versions, see the Enterprise Administration Guide. For more information about how to update the PMDB, see the Endpoint Administration Guide for your OS.

More information:

Create and Store a Policy Version

Assign a Stored Policy Version

Update a Policy Model Database