Previous Topic: policydeploy -delete Function—Delete a PolicyNext Topic: policydeploy -fix Function—Re-execute Deployment Task


policydeploy -deploy Function—Deploy or Undeploy a Policy

This function deploys and undeploys policies on the specified endpoints, without assigning policies to a host or unassigning policies from a host.

This function has the following format:

policydeploy { -deploy name[#xx] | -undeploy name[#xx] } {-nodelist hnode_list | -root dbs} [-dms list]
-deploy name[#xx]

Prompts you for whether you want to directly deploy the specified stored policy version (without assigning the policy to the host) on defined endpoints. To deploy the latest stored version of the policy, omit the policy version number.

-dms list

(Optional) Specifies a comma-separated list of DMS nodes to use. When you deploy or undeploy a policy, these are the DMS nodes to which the action is reported. When you store a policy, these are the DMS nodes where the policy is stored.

If you do not specify DMS nodes with this option, the utility uses the list of DMS nodes specified in the local CA ControlMinder database. To specify a list of DMS nodes in the database, you need to issue the following selang command after you create a new DMS using dmsmgr:

so dms+(new_dms_name)

Note: You need to issue the same command if you did not specify the DMS node during installation, or if you want to replace or add the registered DMS on the endpoint. However, when you specify to create an advanced policy management server during installation, the DMS is added to the database and you do not need to manually run the above command.

-nodelist hnode_list

Defines a comma-separated list of hosts (HNODE objects) that you want to perform the operation for.

-root dbs

Defines a comma-separated list of databases where the policy should be deployed or undeployed.

Note: If the root database is a Policy Model parent, the policy is deployed or undeployed throughout its subscribing databases. If the root database is a CA ControlMinder endpoint, the policy is deployed or undeployed on the specified database only. This option is for backward compatibility with r8 SP1 databases and PMDBs.

-undeploy name[#xx]

Prompts you for whether you want to directly undeploy the specified policy version name#xx (without unassigning the policy) from defined endpoints.

To undeploy the latest stored version of the policy, omit the policy version number.