Field Descriptions

The tab contains the following columns and fields:

Electronic Updates Tab

Category

Column/Field

Description

General

The initial step in running an Electronic Update is to determine whether you are running it as a local or server update. For more information about these two types of updates, see Specifying an Update as Server or Local.

Electronic Update Type

Select the type of Electronic Update to run based how the Code Insight server obtains the Update Manifest and Update Data files required to perform the update:

•

Local—This type of Electronic Update requires that you have manually downloaded these files from Revenera to a locally accessible location prior to the update. During the update, the Code Insight server uploads each of these files from this location, which you identify in the Update Manifest File and Update Data File fields.

•

Server—The most recent Electronic Update files are automatically downloaded from Revenera to the Code Insight server as part of the Electronic Update process.

Note:By default, downloading files from Revenera is performed using HTTPS. However, you can configure the download process to use SFTP instead. For more information, see “Configuring an SFTP Connection for Downloading Update Files” in the Code Insight Installation & Configuration Guide. This configuration must be performed prior to running updates.

Local Electronic Update configuration

If you intend to run a local Electronic Update, you must specify the location of the two required “update” files that you manually downloaded from Revenera. The location of each file must be locally accessible. To run the update, use the Run Update Now option.

Update Manifest File

Click Select File to search for and select the Update Manifest file (update_manifest.txt) to upload to the Code Insight server. The manifest file contains the following:

•

Information that Code Insight uses to determine whether to perform the update.

•

The expected hash value for each data file stored in the update.zip file (see the Update Data File field description). This information will be compared with the hash values of actual files in the archive to ensure that the files have not changed or been tampered with.

Update Data File

Click Select File to search for and select the data archive (update.zip) file to upload to the Code Insight server. This archive contains data files that provide the CVSS information used by Code Insight to perform update.

Code Insight uses the hash information in the manifest file (see the Update Manifest File field description) to ensure that the data files are the expected ones and have not changed or been tampered with.

Configuration for automatic Electronic Updates (server update only)

Code Insight enables you to configure server incremental updates to run automatically at a frequency you define, as described below.

Note that you can always manually force an incremental or full update between the scheduled updates, or you can disable scheduled automatic updates altogether and manually run updates as needed. In either case, you would need to use the Run Update Now option to run an Electronic Update.

Update Frequency

Select from one of the available frequencies for running an incremental Electronic Update automatically:

•

Never—If you select Never, Electronic Updates will not be run automatically. (Selection of this option hides any additional dropdown lists.)

You can always manually schedule an incremental or full update as needed using the Run Update Now option.

•

Daily—If you select Daily, a second dropdown list is displayed to choose the time of day when you want the Electronic Update to occur.

•

Weekly—If you select Weekly, both the “time of day” and Select a day... dropdown lists are displayed. Select the time of day and the day of the week when you want the Electronic Update to occur.

Save Schedule

Click this button to save the schedule. Your future incremental updates will run automatically according to the frequency you defined.

Configuration for manually running an Electronic Update

You can manually run an Electronic Update at any time. The update is run immediately or placed in queue and initiated once all pending scans have completed. Currently, this is the only way to schedule a local update. If automatic server updates are also configured, a manually-run update is in addition to the automatic updates.

Run Update Now

Select the scope of the manually-run update:

•

Incremental Update—Schedule an incremental Electronic Update. However, if no changes have occurred in the Electronic Update data since it was last run, the update is not executed.

•

Full Update—Force a full Electronic Update to run whether or not changes have occurred in the Electronic Update data since it was last run. Use this option judiciously as a full Electronic Update takes several hours to complete, similar to the time required to run the initial update when Code Insight was installed.

Update

Click this button to initiate the Electronic Update immediately or once pending scans are completed.