Technical Tip: CentOS 7 On Prem OS - How to Patch the OS FortiEDR

On a CentOS Server FortiEDR Manager, FortiEDR Aggregator, FortiEDR Core, to Patch the OS perform the following steps. 

1. yum update

2. fortiedr stop

3. fortiedr status (verify services are stopped)

4. sudo sed -i 's/-Dspring.profiles.active=prod,customer/-Dspring.profiles.active=prod,customer -Djdk.security.allowNonCaAnchor=true/g' /etc/systemd/system/webapp.service

5. sudo sed -i 's/-

Dcom.sun.management.jmxremote.ssl=false/-Dcom.sun.management.jmxremote.ssl=false /g' /etc/systemd/system/aggregator.service

6. Reboot

7. JAVA_BIN=$(readlink -f $(which java))

8. JAVA_PATH=${JAVA_BIN%/bin/java}

9. setcap cap_net_bind_service+ep ${JAVA_BIN}

10. echo "${JAVA_PATH}/lib/jli/" > /etc/ld.so.conf.d/java-libjli.conf

11. ldconfig -v

12. fortiedr restart

13. fortiedr status