HPE Security ArcSight User Behavior Analytics (UBA) 5.0c Patch 1

March 30, 2017

HPE UBA 5.0c Patch 1 includes a set of bugfixes for the HPE UBA appli-
cation. Patch 1 also addresses performance and latency issues experienced
with the user interface in some deployments, and introduces x509/CAC 
authentication using a CAC card reader.

This document provides some of the initial installation steps, but the 
rest are documented in the "readme.txt" file included with this package.
You can install and use HPE UBA only as a complete product and may 
not use portions of such software on a standalone basis separate from 
HPE UBA.


Sections included in these release notes
==========================================

 - Files Provided in this Release
 - Prerequisites
 - Unzip the Package
 - Usage Notes
 - Fixed Issues
 - Open Issues


Files Provided in this Release
=================================
HPEUBA5.0cP1.zip contains the following files:

 - HPEUBA_5.0cP1_Release_Notes_Readme_First.txt (This document)
 - HPEArcSightUBA50cP1_20170315.zip (Contains the scripts for applying the patch)
 - readme.txt (Contains installation steps and fixed issues)


Prerequisites
================================
HPE UBA 5.0 or HPE UBA 5.0c must be installed before applying this patch.


Unzip the Package
===============================

The user performing the installation must have read/write/execute permissions 
on the HPE UBA installation folder.

NOTE 1: HPE recommends making a database backup before applying this patch.
NOTE 2: The non-root user who originally installed the HPE ArcSight UBA needs 
        to unzip and apply this patch.
NOTE 3: Run this patch from the Linux Command Line Interface (CLI). It will 
        not work properly if unzipped from Windows.

1. Download the HPEUBA5.0cP1.zip file from the HPE support portal.

2. Unzip HPEUBA5.0cP1.zip. It contains the three files listed in the 
   "Files Provided in this Release" section above.

3. Open a new terminal and navigate to your HPE UBA installation folder. 
   You should see a 'Tomcat' and 'securonix_home' within that folder.
   
4. Copy HPEArcSightUBA50cP1_20170315.zip extracted from step 2 to your HPE UBA 
   installation folder and unzip the file:  

   unzip HPEArcSightUBA50cP1_20170315.zip
   
5. Follow the instructions in the readme.txt in this package. Use the 
   instructions under the "Installation Instructions" heading in the 
   section labelled: "Apply this Update on every HPE UBA Master/Child node."


Usage Notes
============================

Log out of the HPE UBA application using X509 authentication on Chrome
----------------------------------------------------------------------
   To ensure the application can be completely logged out, the user may 
   need to clear the cache, close all browsers, unplug the CAC card from 
   the reader, and log out all Google Chrome users.
   

Fixed Issues 
===========================
The issues fixed in this patch are listed at the end of the readme.txt 
file.

   
Open Issues
===========================
   
* AT-622:  X509 authentication is not supported on Firefox browser due 
           to third party certificate.

           Workaround:  Use Chrome or IE browser.


-------------------------------------------------------------------------------
© Copyright 2017 Hewlett Packard Enterprise Development, LP 

Follow this link to see a complete statement of copyrights and 
acknowledgements: https://www.protect724.hpe.com/docs/DOC-13026