<?xml version="1.0" encoding="UTF-8"?>
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
	<Fixlet>
		<Title>Updated BES Installation Folders Now Available! (Version 7.0.9.164)</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<b>Version 7.0 of the BigFix Enterprise Suite is now available! <BR></b><BR>The following list of computers have outdated BES Installers, created by the BES Installation Generator during initial BES installation (by default, these folders are created at "C:\BES Installers"). BigFix recommends that you upgrade these installation folders to install BES 7.0 components so that all further installations of the BES Server, BES Client, and BES Console will be the latest version.
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
134.91 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[exists key whose (value "DisplayName" of it as string contains "BigFix Enterprise Suite Installation Generator" AND (exists (value "DisplayVersion" of it as string as version) whose (it < "7.0.9.164" AND it >= "6"))) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[version of registration server >= "7"]]></Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>141461911</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to upgrade your BES Installation folders.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">download http://download.bigfix.com/download/bes/7/BES-7.0.9.164.exe

continue if {(size of it = 141461911 AND sha1 of it = "61ebd6b4d6bdce0f9a8f861d3d59a279a211fb9b") of file "BES-7.0.9.164.exe" of folder "__Download"}

wait __download\BES-7.0.9.164.exe -s</ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Relay Now Available! (Version 7.0.9.164)</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD><FONT size=2> <P><B>Version 7.0 of the BigFix Enterprise Suite is now available!</B><BR><BR>The latest version of the&nbsp;BES Relay&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all&nbsp;BES Relays&nbsp;on the targeted computers.</P> <P><STRONG>Please upgrade your BES Server and BES Console before upgrading your BES Relays.</STRONG></P> <P><STRONG>Please upgrade your BES Relays before upgrading your BES Clients!</STRONG></P> <P>More information about BES Relays can be found at <A href="http://support.bigfix.com/bes/misc/besrelays.html">http://support.bigfix.com/bes/misc/besrelays.html</A>.</P> <P><STRONG>Note:</STRONG> The BES Client will briefly display DOS windows while the BES Relay services are being stopped.<BR><BR><FONT color=#ff0000><B>Important Note:</B></FONT> Upgrading your BES Relay may&nbsp;cause your clients to stop reporting on action status and retrieved properties for&nbsp;some time. Please upgrade your BES Relays at a time when this behavior is acceptable. Please contact BigFix Technical Support (<A href="mailto:enterprisesupport@bigfix.com">enterprisesupport@bigfix.com</A>) for more information.</P></FONT></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
2.70 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[exists key whose ((value "DisplayName" of it = "BES Relay" OR value "DisplayName" of it = "BigFix Enterprise Relay") AND exists (value "DisplayVersion" of it as string as version) whose (it < "7.0.9.164" AND it >= "6")) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry]]></Relevance>
		<Relevance><![CDATA[version of regapp "besclient.exe" >= "5"]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[version of registration server >= "7"]]></Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>2836218</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to deploy the BES Relay 7.0 upgrade. </PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell"><![CDATA[download http://download.bigfix.com/download/bes/7/BESRelayUpgrade-7.0.9.164.exe

continue if {(size of it = 2836218 AND sha1 of it = "8ce43a0ce1ca72131ae4f8bb7685da9617898694") of file "BESRelayUpgrade-7.0.9.164.exe" of folder "__Download"}

dos net stop BESRelay
dos net stop BESGather

// Set starting time
setting "_BESClient_PauseWhile"="{now as string}" on "{parameter "action issue date" of action}" for client

// Pause until BESRelay terminates or 2 minutes has passed.
pause while {(exists running application "BESRelay.exe") AND (now - (value of setting "_BESClient_PauseWhile" of client as string as time)) < 2*minute}

wait __download\BESRelayUpgrade-7.0.9.164.exe -s
]]></ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Client Now Available! (Version 7.0.9.164) - WinNT/2000/2003/XP/Vista/2008</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD><B>Version 7.0 of the BigFix Enterprise Suite is now available!<BR><BR></B>The latest version of the&nbsp;BES Client&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all&nbsp;BES Clients&nbsp;on the targeted computers. <BR><BR><BR><FONT color=red><B>You must upgrade your BES Relays before upgrading your BES Clients.</B></FONT><BR><BR><B>Note:</B> This Fixlet message will only become relevant on computers after the BES Server has been upgraded. It may take a little while for the BES Clients to notice that the BES Server is upgraded.<BR><BR><B>Note:</B> BigFix recommends that you run this upgrade targeted to "All Computers" rather than to "Specific Computers" so that all old BES Clients will get upgraded.<BR><BR><B>Note:</B> This upgrade may take several minutes to run because the BES Client service will be restarted as part of the upgrade process and the BES Clients will not report their action results right away.<BR><BR><SPAN id=upgradeLink></SPAN> <SCRIPT type=text/javascript>try {upgradeLink.innerHTML = EvaluateRelevance('if (exists applicable computers of (fixlet 524 of (bes site whose (name of it = "BES Support")))) then ("<b>Important Note: </b>In order to deploy the BES Client 7.0.9 upgrade to clients with an older version of the Client Logging Service, you must first upgrade the Client Logging Service to 7.1 or greater. Please use the Fixlet message: " & (link "Upgrade BES Client Logging Service" of fixlet 524 of (bes site whose (name of it = "BES Support")) as string) & " to facilitate the upgrade process.</p>") else ""'); } catch (e) {upgradeLink.innerHTML = '<b>Important Note:</b> In order to deploy the BES Client 7.0.9 upgrade to clients with an older version of the Client Logging Service, you must first upgrade the Client Logging Service to 7.1 or greater. Please use the Fixlet message ID 524: “Upgrade BES Client Logging Service” in the BES Support site to facilitate the upgrade process.'}</SCRIPT></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
5.19 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[(exists regapp "besclient.exe") AND (version of regapp "besclient.exe" < "7.0.9.164" AND (not exists regapp "besrelay.exe" OR version of regapp "besrelay.exe" >= "7.0.9.164"))]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[version of registration server >= "7"]]></Relevance>
		<Relevance>name of operating system != "WinME" AND name of operating system != "Win98" AND name of operating system != "Win95"</Relevance>
		<Relevance>not exists service "BESClientLoggingService"</Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>5440866</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to deploy the BES Client 7.0 upgrade.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell"><![CDATA[download http://download.bigfix.com/download/bes/7/BESClientUpgrade-7.0.9.164.exe

continue if {(size of it = 5440866 AND sha1 of it = "5b7be871b9a899cfaf2c10b97c1b66fcb7686909") of file "BESClientUpgrade-7.0.9.164.exe" of folder "__Download"}

delete __Local\Get\BESClientUpgrade-7.0.9.164.exe

move __download\BESClientUpgrade-7.0.9.164.exe __Local\Get\BESClientUpgrade-7.0.9.164.exe

run "{pathname of client folder of site "BESSupport" & "\StopServiceThenRunProgram.exe"}" BESClient "__Local\Get\BESClientUpgrade-7.0.9.164.exe -s -a -f2\"{location of regapp "BESClient.exe"}\upgrade-7.0.9.164.log\""]]></ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Client Now Available! (Version 7.0.9.164) - Win98/ME</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD> <P><B>Version&nbsp;7.0 of the BigFix Enterprise Suite is now available!<BR></B><BR>The latest version of the&nbsp;BES Client&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all&nbsp;BES Clients&nbsp;on the targeted computers.<BR><BR><B><FONT color=#ff0000>You must upgrade your BES Relays before upgrading your BES Clients.</FONT></B><BR><BR><B>Note: </B>This Fixlet message will only become relevant on computers after the BES Server has been upgraded. It may take a little while for the BES Clients to notice that the BES Server is upgraded.<BR><B><BR>Note:</B> BigFix recommends that you run this upgrade targeted to "All Computers" rather than to "Specific Computers" so that all old BES Clients will get upgraded.<BR><B><BR>Note:</B> This upgrade may take several minutes to run because the BES Client service will be restarted as part of the upgrade process and the BES Clients will not report their action results right away.</P></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
5.19 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[(exists regapp "besclient.exe") AND (version of regapp "besclient.exe" < "7.0.9.164" AND (not exists regapp "besrelay.exe" OR version of regapp "besrelay.exe" >= "7.0.9.164"))]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance>name of operating system = "WinME" OR name of operating system = "Win98"</Relevance>
		<Relevance><![CDATA[version of registration server >= "7"]]></Relevance>
		<Relevance>not exists service "BESClientLoggingService"</Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>5440866</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to deploy the BES Client 7.0 upgrade.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">download http://download.bigfix.com/download/bes/7/BESClientUpgrade-7.0.9.164.exe

continue if {(size of it = 5440866 AND sha1 of it = "5b7be871b9a899cfaf2c10b97c1b66fcb7686909") of file "BESClientUpgrade-7.0.9.164.exe" of folder "__Download"}

delete __Local\Get\BESClientUpgrade-7.0.9.164.exe
move __download\BESClientUpgrade-7.0.9.164.exe __Local\Get\BESClientUpgrade-7.0.9.164.exe

run __Local\Get\BESClientUpgrade-7.0.9.164.exe -s -a -f2"{location of regapp "BESClient.exe"}\upgrade-7.0.9.164.log"</ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Server and BES Console Now Available! (Version 7.0.9.164)</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD> <P><STRONG>Version&nbsp;7.0 of the BigFix Enterprise Suite is now available!</STRONG></P><?Relevance if (((applicable computer count of fixlet 477 of it + applicable computer count of fixlet 479 of it) of site of current fixlet) != 0) then ((html "<P><B>Before upgrading any BES Server or Console, please ensure that there are no computers reporting relevant for the " & (if (applicable computer count of fixlet 477 of site of current fixlet != 0) then (link of fixlet 477 of site of current fixlet & " Fixlet message") else html "") & (if ((applicable computer count of fixlet 477 of it != 0 AND applicable computer count of fixlet 479 of it != 0) of site of current fixlet) then html " or the " else html "") & (if (applicable computer count of fixlet 479 of site of current fixlet != 0) then (link of fixlet 479 of site of current fixlet & html " Fixlet message") else html "")) & html ".</B> Otherwise, these computers will not be able to communicate with upgraded BES components.</P>") else html "" ?> <P>BigFix Enterprise Suite&nbsp;7.0 contains a number of powerful new features and performance optimizations, including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all&nbsp;BES Servers and Consoles&nbsp;on the targeted computers. Click on the link below for more information on changes in BES 7.0.</P> <P><B>Please take a few moments to read through all of the upgrade material available before attempting the upgrade. Depending on the details of your deployment, the full upgrade process can take a while and BES will not be usable during the upgrade process.</B><BR><BR>Please use the following upgrade path to upgrade to BES&nbsp;7.0 (upgrading in a different order may lead to problems): </P> <OL> <LI><STRONG>BES Server and BES Console:</STRONG> Upgrade <SPAN style="FONT-WEIGHT: bold; COLOR: red">all&nbsp;BES Server and BES Console components at the same time</SPAN> with this Fixlet message (if they are upgraded separately, you will not be able to connect with the BES Console). <LI><STRONG>BES Relays:</STRONG> Upgrade all the BES Relays using another Fixlet message that will become relevant for all old BES Relays. <STRONG>Please upgrade the BES Relays before the BES Clients.</STRONG> <LI><STRONG>BES Clients:</STRONG> The BES Clients will notice that the BES Server is updated and will begin to report the upgrade Fixlet message relevant (the BES Clients by default check once per six hours for the version of the BES Server). It is recommended that you target the BES Client upgrade Fixlet message at "All Computers" instead of "Specific Computers" to make sure to upgrade all BES Clients who have not yet reported. </LI></OL> <P>If you have any issues during the upgrade, you may want to review the manual upgrade instructions below to help resolve the issues.</P> <P><B>Note:</B> If the BES Console is open while the BES Console upgrade installer is run, the upgrade will not be complete until the computer is restarted.</P> <P><STRONG><SPAN style="COLOR: red">Important Note:</SPAN></STRONG> BigFix recommends that you run this upgrade targeted <SPAN style="FONT-WEIGHT: bold; COLOR: red">to the BES Server and all relevant computers. </SPAN><SPAN style="FONT-WEIGHT: bold">Consoles that are not upgraded at the same time as the server will be unable to communicate with the upgraded server.</SPAN> </P> <P><FONT color=#ff0000><STRONG>Important Note:</STRONG></FONT> If the BES Console is open while the BES&nbsp;Server upgrade installer is running, the user may experience an error or a dialog that asks the user to shut down the BES Console. The user&nbsp;would have to exit the BES Console, and then re-open the BES Console again after the upgrade has completed on the BES Server. Please deploy this action at a time when&nbsp;this service interruption is acceptable.</P> <P><FONT color=#ff0000><STRONG>Important Note:</STRONG></FONT>&nbsp;If you are using database replication on the BES database, you must disable the replication before upgrading the BES Server.</P> <SCRIPT type=text/javascript>try{KnownIssuesFixletLink.innerHTML=EvaluateRelevance('link "Known Issues" of fixlet 479 of (site of current fixlet)');}catch (e) {}</SCRIPT></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
50.55 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server" whose (exists ((value "Version" of it) as string as version) whose (it < "7.0.9.164" AND it >= "6") AND exists value "BESInstalled" of it AND value "BESInstalled" of it = 1) of registry  OR (exists regapp "BESConsole.exe" whose (version of it < "7.0.9.164" AND version of it >= "6"))]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[exists file "msiexec.exe" whose (version of it >= "3.1") of system folder]]></Relevance>
		<Relevance>not exists key "HKLM\Software\BigFix\Enterprise Server" whose (exists value "UseRemoteDb" whose (it as string = "1") of it) of registry</Relevance>
		<Relevance><![CDATA[version of regapp "iexplore.exe" >= "6"]]></Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>53003689</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Link3">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to see the new features in BES 7.0.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/changes/changes-7.0.html</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink><![CDATA[ to upgrade all BES Server and/or BES Console components on the target computers. <b>(Please read important notes above before deploying this action.)</b>]]></PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell"><![CDATA[// Update the BES Server
download http://download.bigfix.com/download/bes/7/BESServerUpgrade-7.0.9.164.exe

continue if {(size of it = 29373074 AND sha1 of it = "0a746221de495bb4e15646c353b259e0ed90c3bc") of file "BESServerUpgrade-7.0.9.164.exe" of folder "__Download"}

wait __download\BESServerUpgrade-7.0.9.164.exe /s /a /s /z"UseRoot"

action may require restart

// Update the BES Console if it is installed
continue if {(exists regapp "BESConsole.exe" whose (version of it < "7.0.9.164"))}

download http://download.bigfix.com/download/bes/7/BESConsoleUpgrade-7.0.9.164.exe

continue if {(size of it = 23630615 AND sha1 of it = "b449b4d2c47615179e0bdce96f55ec77be1183a4") of file "BESConsoleUpgrade-7.0.9.164.exe" of folder "__Download"}

wait __download\BESConsoleUpgrade-7.0.9.164.exe /s /a /s /v"INSTALLDIR=\"{pathname of parent folder of regapp "BESConsole.exe"}\""

action may require restart]]></ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES API Now Available! (Version 7.0.9.164)</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD><FONT size=2> <P><STRONG>Version&nbsp;7.0 of the BigFix Enterprise Suite is now available!</STRONG><BR><BR>The latest version of the&nbsp;BES API&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all&nbsp;BES APIs&nbsp;on the targeted computers. Once the BES Server is upgraded to 7.0, older versions of the BES API will no longer be able to communicate with the BES Server.</P> <P><STRONG>Please upgrade your BES Server before upgrading&nbsp;the BES API.</STRONG></P> <P>More information about&nbsp;the BES API can be found&nbsp;in the&nbsp;pdf documents linked&nbsp;below.</P></FONT></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
12.01 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[exists key whose (value "DisplayName" of it = "BigFix Enterprise Suite API" AND exists (value "DisplayVersion" of it as string as version) whose (it < "7.0.9.164")) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[version of registration server >= "7"]]></Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>12591338</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to read the BES Platform API reference (pdf).</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/download/bes/misc/BESDatabaseAPIReference-7.0.pdf</ActionScript>
		</Action>
		<Action ID="Link3">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to read the BES Import-Export reference (pdf).</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/product/documents/BESImportExportReference-6.0.pdf</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to deploy the BES API 7.0 upgrade.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">download http://download.bigfix.com/download/bes/7/BESAPIUpgrade-7.0.9.164.exe

continue if {(size of it = 12591338 AND sha1 of it = "1ffb851e42b927cb81cd366dbf1a689858e778a8") of file "BESAPIUpgrade-7.0.9.164.exe" of folder "__Download"}

wait __Download\BESAPIUpgrade-7.0.9.164.exe -s

action may require restart</ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Server Now Available! (Version 7.0.9.164) - BES Remote Database</Title>
		<Description><![CDATA[
      
<TABLE><TBODY><TR><TD><?Relevance if (applicable computer count of fixlet 477 of site of current fixlet = 0) then (html "<B>If no computers are relevant for this Fixlet message, you may use the " & link of fixlet 469 of site of current fixlet & html " Fixlet message to upgrade your BES Server.</B><BR><BR>") else html ""?> <P><STRONG>Version&nbsp;7.0.9 of the BES Server is now available</STRONG>, but the current BES Server is running from a remote database which cannot be upgraded through a BES Fixlet message. Please follow the instructions in the link below to manually upgrade your BES Server.</P> <P>The latest version of the&nbsp;BES Server&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization.</P> <P>Please contact BigFix Technical Support (<A href="mailto:enterprisesupport@bigfix.com">enterprisesupport@bigfix.com</A>) if you have any questions regarding this upgrade.</P> <P><SPAN style="FONT-WEIGHT: bold; COLOR: red">Important Note:</SPAN> If any BES Consoles are open while the BES Server upgrade installer is running, the users may experience an error or a dialog that asks the user to shut down the BES Console. The user would have to exit the BES Console, and then re-open the BES Console again after the upgrade has completed on the BES Server. Please perform the BES Server upgrade at a time when this service interruption is acceptable.</P> <P><SPAN style="FONT-WEIGHT: bold; COLOR: red">Important Note:</SPAN> If you are using database replication on the BES database, you must disable the replication before upgrading the BES Server.</P></TD></TR></TBODY></TABLE>

    ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[(exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server" whose (exists value "Version" whose (it as string as version < "7.0.9.164") of it AND exists value "BESInstalled" whose (it as string = "1") of it) of registry)]]></Relevance>
		<Relevance>Exists value "UseRemoteDb" whose (it as string = "1") of key "HKLM\Software\BigFix\Enterprise Server" of registry</Relevance>
		<Category>Audit</Category>
		<DownloadSize>0</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for instructions to manually upgrade a BES Server using a remote database.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/cgi-bin/kbdirect.pl?id=397</ActionScript>
		</Action>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for instructions to manually upgrade BES Components.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Server and BES Console Now Available! (Version 7.0.9.164) - Known Issues</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD> <P><STRONG>Version&nbsp;7.0 of the BigFix Enterprise Suite is now available!</STRONG></P> <P>The latest version of the&nbsp;BigFix&nbsp;Enterprise Suite&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all BES Servers and Consoles on the targeted computers. Click on the link below for more information on changes in BES 7.0.</P> <P>Windows Installer 3.1 or greater must be installed to perform this upgrade. Use the action below to install Windows Installer 3.1. Once this is complete, you can use <?Relevance link of fixlet 469 of site of current fixlet?>to upgrade BES Servers and Consoles to version 7.0.9.</P> <P><STRONG>Note:</STRONG> Affected computers may report back as 'Pending Restart' once the patch has run successfully, but the vulnerability will not be closed until the affected computer is restarted.</P> <P>If you have any issues during the upgrade, you may want to review the manual upgrade instructions below to help resolve the issues.</P></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
2.47 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[exists key "HKEY_LOCAL_MACHINE\SOFTWARE\BigFix\Enterprise Server" whose (exists ((value "Version" of it) as string as version) whose (it < "7.0.9.164" AND it >= "6") AND exists value "BESInstalled" of it AND value "BESInstalled" of it = 1) of registry  OR (exists regapp "BESConsole.exe" whose (version of it < "7.0.9.164" AND version of it >= "6"))]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[not (exists file "msiexec.exe" whose (version of it >= "3.1") of system folder)]]></Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>2585872</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Link3">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to see the new features in BES 7.0.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/changes/changes-7.0.html</ActionScript>
		</Action>
		<Action ID="Link4">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to view the Microsoft Windows Installer 3.1 information page.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.microsoft.com/?id=893803</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to install Windows Installer 3.1 on relevant computers.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">download http://download.microsoft.com/download/1/4/7/147ded26-931c-4daf-9095-ec7baf996f46/WindowsInstaller-KB893803-v2-x86.exe

continue if {(size of it = 2585872 and sha1 of it = "8318455b36ba0a748307459279d46f2f4cdb5a0e") of file "WindowsInstaller-KB893803-v2-x86.exe" of folder "__download"}

wait __download/WindowsInstaller-KB893803-v2-x86.exe /passive /quiet /norestart

action may require restart</ActionScript>
		</Action>
	</Fixlet>
	<Fixlet>
		<Title>Updated BES Client Now Available! (Version 7.0.9.164) - WinNT/2000/2003/XP/Vista/2008 (Logging Service Installed)</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD> <P><B>Version 7.0 of the BigFix Enterprise Suite is now available!<BR><BR></B>The latest version of the&nbsp;BES Client&nbsp;provides several enhancements and fixes including a critical security fix that was a result of a formal security audit and code review. Due to the nature of the security changes, BigFix recommends upgrading whenever possible. All BigFix 7.0.9 builds contain this fix. The 7.0.9.164 build contains an additional non-security bug fix for custom site signature authorization. This Fixlet message will upgrade all&nbsp;BES Clients&nbsp;on the targeted computers. <BR><BR><FONT color=red><B>You must upgrade your BES Relays before upgrading your BES Clients.</B></FONT><BR><BR><B>Note:</B> This Fixlet message will only become relevant on computers after the BES Server has been upgraded. It may take a little while for the BES Clients to notice that the BES Server is upgraded.<BR><BR><B>Note:</B> BigFix recommends that you run this upgrade targeted to "All Computers" rather than to "Specific Computers" so that all old BES Clients will get upgraded.<BR><BR><B>Note:</B> This upgrade may take several minutes to run because the BES Client service will be restarted as part of the upgrade process and the BES Clients will not report their action results right away.<BR><BR><FONT color=#ff0000><STRONG>Important Note:</STRONG></FONT> This update will restart the BES Client Logging Service. Please schedule the update to occur at a time when a service interruption is acceptable.<BR><BR></P><SPAN id=upgradeLink></SPAN> <SCRIPT type=text/javascript>try {upgradeLink.innerHTML = EvaluateRelevance('if (exists applicable computers of (fixlet 524 of (bes site whose (name of it = "BES Support")))) then ("<b>Important Note: </b>In order to deploy the BES Client 7.0.9 upgrade to clients with an older version of the Client Logging Service, you must first upgrade the Client Logging Service to 7.1 or greater. Please use the Fixlet message: " & (link "Upgrade BES Client Logging Service" of fixlet 524 of (bes site whose (name of it = "BES Support")) as string) & " to facilitate the upgrade process.</p>") else ""'); } catch (e) {upgradeLink.innerHTML = '<b>Important Note:</b> In order to deploy the BES Client 7.0.9 upgrade to clients with an older version of the Client Logging Service, you must first upgrade the Client Logging Service to 7.1 or greater. Please use the Fixlet message ID 524: "Upgrade BES Client Logging Service" in the BES Support site to facilitate the upgrade process.'}</SCRIPT></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
5.19 MB
      
  </div>
  ]]></Description>
		<Relevance>name of operating system as lowercase starts with "win"</Relevance>
		<Relevance><![CDATA[(exists regapp "besclient.exe" whose (version of it  < "7.0.9.164") AND (not exists regapp "besrelay.exe" OR version of regapp "besrelay.exe" >= "7.0.9.164"))]]></Relevance>
		<Relevance>evaluation of client license = false</Relevance>
		<Relevance><![CDATA[version of registration server >= "7"]]></Relevance>
		<Relevance>name of operating system != "WinME" AND name of operating system != "Win98" AND name of operating system != "Win95"</Relevance>
		<Relevance><![CDATA[exists service "BESClientLoggingService" whose (version of file of it >= "7.1.0.15") AND exists regapp "besclient.exe" whose (version of it >= "6")]]></Relevance>
		<Category>Upgrade</Category>
		<DownloadSize>5440866</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity>Critical</SourceSeverity>
		<Action ID="Link2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> for manual upgrade instructions.</PostLink>
			</Description>
			<ActionScript MIMEType="text/x-uri">http://support.bigfix.com/bes/install/upgradebes.html</ActionScript>
		</Action>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to deploy the BES Client 7.0.9.164 upgrade.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell"><![CDATA[download http://download.bigfix.com/download/bes/7/BESClientUpgrade-7.0.9.164.exe
continue if {(size of it = 5440866 AND sha1 of it = "5b7be871b9a899cfaf2c10b97c1b66fcb7686909") of file "BESClientUpgrade-7.0.9.164.exe" of folder "__Download"}
delete __Local\Get\BESClientUpgrade-7.0.9.164.exe
move __download\BESClientUpgrade-7.0.9.164.exe __Local\Get\BESClientUpgrade-7.0.9.164.exe

download http://software.bigfix.com/download/temp/sleep.exe
continue if {(size of it = 36864 AND sha1 of it = "bf6aae7aec24c07331817e5387efd66ff1a802fa") of file "sleep.exe" of folder "__Download"}
delete "{pathname of parent folder of regapp "besclient.exe"}\sleep.exe"
move __Download\sleep.exe "{pathname of parent folder of regapp "besclient.exe"}\sleep.exe"

// We have to turn CLS back on after the client upgrade, but we also have to wait for the upgrade to finish. Hence the (arbitrary) 2 minute sleep.

delete __appendfile
delete "{pathname of parent folder of regapp "besclient.exe"}\stopSleepStart.bat"
appendfile @ECHO OFF
appendfile __Local\Get\BESClientUpgrade-7.0.9.164.exe -s -a -f2"{location of regapp "BESClient.exe"}\upgrade-7.0.9.164.log"
appendfile "{pathname of parent folder of regapp "besclient.exe"}\sleep.exe" 120000
appendfile net start besclientloggingservice
appendfile del "{pathname of parent folder of regapp "besclient.exe"}\sleep.exe"
appendfile del %0%1
appendfile exit
move __appendfile "{pathname of parent folder of regapp "besclient.exe"}\stopSleepStart.bat"


setting "_BESClient_PauseWhile"="{now as string}" on "{parameter "action issue date" of action}" for client

// Actually turn the CLS off and make sure it's off

waithidden {(pathname of parent folder of regapp "besclient.exe" & "\BESClientLoggingService\BESClientLoggingService.exe -e")}
pause while {exists running service "BESClientLoggingService" AND (now - (value of setting "_BESClient_PauseWhile" of client as string as time)) < 3*minute}

waithidden "{pathname of parent folder of regapp "besclient.exe"}\stopSleepStart.bat"]]></ActionScript>
		</Action>
	</Fixlet>
	<Task>
		<Title>Install BES Relay 7.0</Title>
		<Description><![CDATA[
  <div class=FixletMessage>
      
<TABLE><TBODY><TR><TD> <P><FONT size=2>This task will install the BES Relay on the selected computers. </FONT><FONT size=2>For more information on BES Relays, please visit the following support web pages:</P> <UL> <LI><A href="http://support.bigfix.com/bes/misc/besrelays.html">BES Relay FAQ</A> - Information on using BES Relays to reduce bandwidth on slow WAN links, increase scalability, and increase performance. <LI><A href="http://support.bigfix.com/bes/misc/besrelayhealth.html">BES Relay Health</A> - Information on best practices for setting up and maintaining BES Relays.</FONT></LI></UL></TD></TR></TBODY></TABLE>
     
  </div>
  <div class=FixletProperty>
    <h4>File Size:</h4>
2.70 MB
      
  </div>
  ]]></Description>
		<Relevance><![CDATA[version of client >= "5.0"]]></Relevance>
		<Relevance>not exists regapp "besrelay.exe"</Relevance>
		<Relevance>name of operating system = "WinVista" OR name of operating system = "Win2008" OR name of operating system = "Win2000" OR name of operating system = "WinXP" OR name of operating system = "Win2003" OR name of operating system = "WinXP-2003" OR (name of operating system = "WinNT" AND csd version of operating system contains "6")</Relevance>
		<Relevance>not ((exists key "HKLM\Software\BigFix\Enterprise Server" of registry) AND ((exists value "BESInstalled" of key "HKLM\Software\BigFix\Enterprise Server" of registry) and (value "BESInstalled" of key "HKLM\Software\BigFix\Enterprise Server" of registry = 1)))</Relevance>
		<Relevance><![CDATA[version of regapp "iexplore.exe" >= "5"]]></Relevance>
		<Relevance>version of registration server = "7"</Relevance>
		<Category>BES Server/Relay Setting</Category>
		<DownloadSize>2836218</DownloadSize>
		<Source>BigFix</Source>
		<SourceID><![CDATA[<Unspecified>]]></SourceID>
		<SourceReleaseDate>2008-05-05</SourceReleaseDate>
		<SourceSeverity><![CDATA[<Unspecified>]]></SourceSeverity>
		<Action ID="Action1">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to install the BES Relay to the default location.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">download http://download.bigfix.com/download/bes/7/BESRelayUpgrade-7.0.9.164.exe

continue if {(size of it = 2836218 AND sha1 of it = "8ce43a0ce1ca72131ae4f8bb7685da9617898694") of file "BESRelayUpgrade-7.0.9.164.exe" of folder "__Download"}

wait __download\BESRelayUpgrade-7.0.9.164.exe -s

relay select</ActionScript>
		</Action>
		<Action ID="Action2">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to be prompted for a path where the BES Relay will be installed.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">action parameter query "Relay Install Location" with description "Please enter the path where you would like the BES Relay installed:" with default value "C:\Program Files\BigFix Enterprise\BES Relay"

download http://download.bigfix.com/download/bes/7/BESRelayUpgrade-7.0.9.164.exe

continue if {(size of it = 2836218 AND sha1 of it = "8ce43a0ce1ca72131ae4f8bb7685da9617898694") of file "BESRelayUpgrade-7.0.9.164.exe" of folder "__Download"}

wait __download\BESRelayUpgrade-7.0.9.164.exe -s -a --InstallFolder="{parameter "Relay Install Location" of action}"

relay select</ActionScript>
		</Action>
		<Action ID="Action3">
			<Description>
				<PreLink>Click </PreLink>
				<Link>here</Link>
				<PostLink> to install the BES Relay on the drive with the most free space.</PostLink>
			</Description>
			<ActionScript MIMEType="application/x-Fixlet-Windows-Shell">download http://download.bigfix.com/download/bes/7/BESRelayUpgrade-7.0.9.164.exe

continue if {(size of it = 2836218 AND sha1 of it = "8ce43a0ce1ca72131ae4f8bb7685da9617898694") of file "BESRelayUpgrade-7.0.9.164.exe" of folder "__Download"}

wait __download\BESRelayUpgrade-7.0.9.164.exe -s -a --InstallFolder="{name of drive whose (free space of it = maximum of (free spaces of drives))}\Program Files\BigFix Enterprise\BES Relay"

relay select</ActionScript>
		</Action>
	</Task>
</BES>