Purpose

When running the Shavlik Protect console in a secure environment without Internet access, it is necessary to download the latest Shavlik Data Files and supported patches from a machine that has Internet access and then transfer the files to the disconnected Protect Console machine.  We are providing a PowerShell script that downloads the Data Files and supported patches for you.

Instructions

The ability to use this script to download patches is only available in Shavlik Protect 9.2.5119 or later. You can confirm the version in Help > About Shavlik.  The installer can be found here: http://www.shavlik.com/support/protect/downloads/

In order to use the PowerShell script, the internet-connected machine must contain the following:

• Windows PowerShell 4.0 or later.
• Microsoft .NET Framework 4.0 or later.
• The PowerShell script .\DownloadDisconnectedData.ps1: DownloadDisconnectedData.zip
  

Download Only Datafiles using Powershell

1. Create a folder on the internet connected machine on C:\. (this example will use C:\Data)
2. Download and extract the PowerShell script (DownloadDisconnectedData.ps1) attached to this document to C:\Data.
3. Open Powershell and navigate to C:\Data.
4. Run the following command replacing C:\Data with whatever output directory you have chosen in step 1:

The major/minor version argument has a two-digit value. Use the value corresponding to your version:

• Protect 9.2: 92
• Protect 9.3: 93

.\DownloadDisconnectedData.ps1 -outdir "C:\Data" -product "Protect" -version 92

    5. Move the downloaded datafiles from C:\Data to C:\ProgramData\LANDESK\Shavlik Protect\Console\DataFiles on the offline Protect console. Overwrite any duplicate files when prompted.

    6. Run Help > Refresh Files in the console. If you are in an offline environment, you will see errors downloading files which is to be expected, but this will also update the database with the newest definitions which is necessary.

Download Datafiles and Patches using Powershell

How to create the list of patches to download:

1. Create a folder on the internet connected machine on C:\. (this example will use C:\Data)
   
2. Scan machines on your disconnected network. (The scan result will provide the list of patches to be downloaded)
   
3. View the scan results after the scan completes.  Use the link on step 6 from the Operations Monitor or View > Results > Today's Items.
4. Highlight and then right-click on the Patch Missing in the middle pane and choose Export Download Package…
   1. You can also choose specific patches using the CTRL-click or Shift-click method after expanding the missing patches list.

     5. Give the .CSV a name and save to your desktop. (we will be using Patches.csv in this example)

     6. Save this .CSV file to the folder you create in step #1.

To use the PowerShell script:

1. Move the DownloadDisconnectedData.zip to the folder you created on the internet connected machine on C:\.
   
2. Extract the PowerShell script (DownloadDisconnectedData.ps1).
3. Open a Windows Command Prompt with Run as administrator privileges.
4. Change to the directory that contains the PowerShell script.
5. Read Disclaimer.txt.
6. Start PowerShell by typing ‘PowerShell’.
7. Use the PowerShell script to download the desired files. Please see the Powershell script information section below for information on how to do this.
8. Move the downloaded datafiles from the downloaded location specified to C:\ProgramData\LANDESK\Shavlik Protect\Console\DataFiles on the offline Protect console. Overwrite any duplicate files when prompted.
9. Move the downloaded patches from the downloaded location to your console's patch repository which can be located in Tools > Options > Downloads.
10. Run Help > Refresh Files in the console. If you are in an offline environment, you will see errors downloading files which is to be expected, but this will also update the database with the newest definitions which is necessary.

Powershell script information:

The major/minor version argument has a two-digit value. Use the value corresponding to your version:

• Protect 9.2: 92
• Protect 9.3: 93 

• In this example, a folder was created here: C:\Data.
• We will be downloading Protect 9.2 content data.
• The exported port patch list is called Patches.csv located in C:\Data.

.\DownloadDisconnectedData.ps1 -outdir "C:\Data" -product "Protect" -version 92 -downloadPackageInputFilePath "C:\Data\Patches.csv"

• The content data files will be located here: C:\Data\DataFiles.
  • These need to be moved to the C:\ProgramData\LANDESK\Shavlik Protect\Console\DataFiles on the offline Protect console.
    
• The patches will be located here: C:\Data\Patches.
  • These need to be moved to theC:\ProgramData\LANDESK\Shavlik Protect\Console\Patches. on the offline Protect console.
    
  • Verify location of the Patches folder through Tools > Operations > Downloads > Patch Download Directory.

Addition Information

How To: Manually Updating Patch Data Files for Shavlik Protect

• The Content Team created a partner.manifest.xml where customers can see the SHA1 and SHA2 hashes for all downloadable Shavlik Protect content files. This list can be used to compare hashes of local files on disk to those contained in the manifest.
  • http://xml.shavlik.com/data/protect/v9/92hash/manifest/partner.manifest.cab

Affected Product(s)

Ivanti Patch for Windows Servers 9.3

Shavlik Protect 9.X