Deploy Embedded Security solution - One-time process

You must have a system system-specific recovery disk image of the computer on which you are doing the Embedded Security one-time process.

Note: A re-image of the computer might be necessary if the Embedded Security one-time process is done incorrectly. Follow instructions carefully.

On the computers in your system that are running the Grass Valley Embedded Security solution, you must do a one-time initial deployment process, as instructed by this task. This task isolates the steps required for the one-time process. If you have sufficient knowledge of systems and upgrades, you can modify your software upgrade steps as necessary to do the one-time process at the same time as your other software upgrades, rather than as isolated steps. After you have done this one-time process, you can do future upgrades using the normal upgrade process.

This applies to the following:

K2 Summit/Solo system
All types/roles of K2 Media Server
All types/roles of GV STRATUS server
K2 Dyno S Replay Controller

Determine the status of the Embedded Security solution on the computer. You can use SiteConfig check/view software to make this determination or on the local computer you can use the Programs and Features Control Panel to make this determination. Proceed as follows:
- If the computer does not have McAfee Solidifier, which is a component of the Embedded Security solution, do not continue with these steps. The computer must already have the Embedded Security solution before the one-time process is applied.
- If the computer has both McAfee Solidifier and GV Embedded Security Manager, do not continue with these steps. The one-time process installs GV Embedded Security Manager as a separate software component, so its presence indicates that the computer already has the one-time process applied.
- If the computer has McAfee Solidifier but does not have GV Embedded Security Manager, continue with these steps.
Procure the McAfee script from the software download page on the Grass Valley website. The filename to download is McAfee-6.1.1.zip.
Unzip and copy the directory containing the McAfee script and associated files to any location on the local computer.
Use Embedded Security Manager and put the local computer in Update Mode.
Restart the computer.
In SiteConfig, do the following:
1. Add the GV Embedded Security Manager role to the device.
2. Add cab file as necessary to the device's deployment group so that the GVEmeddedSecurityManager cab file is available for deployment.
3. Do a Check Software operation on the device.
4. Deploy software to the device.
On the local computer, run the McAfee script that you downloaded from the Grass Valley website.
Delete the directory containing the McAfee script and associated files from the local computer.
Use Embedded Security Manager and leave the Update Mode. Embedded Security Manager now reports Enabled.
Do Windows updates on the local computer. You can now install Windows updates KB2859537 and KB2872339, which were previously not allowed on Grass Valley systems.

For future Windows updates, it is no longer necessary to exclude KB2859537 and KB2872339.
For future deployment of K2 and GV STRATUS software, it is no longer necessary to put Embedded Security in Update Mode.