SERVICE AVAILABLE DESCRIPTION
cc-eal no Common Criteria EAL2 Provisioning Packages
esm-infra yes UA Infra: Extended Security Maintenance
fips no NIST-certified FIPS modules
fips-updates no Uncertified security updates to FIPS modules
livepatch yes Canonical Livepatch service
# 2. Force motd update for esm-related packages
sudo /usr/lib/update-notifier/update-motd-updates-available --force
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates.
See https://ubuntu.com/advantage or run: sudo ua status
# 3. ssh as non-root and see dynamic motd
csmith@uptown:~/src$ ssh ubuntu@10.10.7.119
Welcome to Ubuntu 14.04.6 LTS (GNU/Linux 5.3.0-10-generic x86_64)
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates.
See https://ubuntu.com/advantage or run: sudo ua status
New release '16.04.6 LTS' available.
Run 'do-release-upgrade' to upgrade to it.
Last login: Mon Oct 7 19:07:46 2019 from 10.10.7.1
# Install latest
# On Unattached system with ESM disabled:
ubuntu@dev-t3:~$ sudo /usr/lib/update-notifier/apt-check --human-readable
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates.
See https://ubuntu.com/advantage or run: sudo ua status
# On Attached system with ESM enabled. updates are properly listed
ubuntu@dev-t3:~$ sudo /usr/lib/update-notifier/apt-check --human-readable
UA Infrastructure Extended Security Maintenance (ESM) is enabled.
54 updates can be installed immediately.
52 of these updates are provided through UA Infrastructure ESM.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
##### Attached system with ESM enabled
# 4. Enabled esm
sudo ua attach <mytoken>
Enabling default service esm-infra
Updating package lists
ESM Infra enabled.
This machine is now attached to '<email address hidden>'.
SERVICE ENTITLED STATUS DESCRIPTION
cc-eal no — Common Criteria EAL2 Provisioning Packages
cis-audit no — Center for Internet Security Audit Tools
esm-infra yes enabled UA Infra: Extended Security Maintenance
fips no — NIST-certified FIPS modules
fips-updates no — Uncertified security updates to FIPS modules
livepatch yes n/a Canonical Livepatch service
# 5. Force motd update for attached machine with ESM enabled
ubuntu@dev-t3:~$ sudo /usr/lib/update-notifier/update-motd-updates-available --force
UA Infrastructure Extended Security Maintenance (ESM) is enabled.
54 updates can be installed immediately.
52 of these updates are provided through UA Infrastructure ESM.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Validation complete on trusty with new ua-client:
# 0. Install latest proposed update- notifier- common notifier- common notifier- common: archive. ubuntu. com/ubuntu/ trusty- proposed/ main amd64 Packages dpkg/status
ubuntu@dev-t3:~$ apt-cache policy update-
update-
Installed: 0.154.1ubuntu8
Candidate: 0.154.1ubuntu8
Version table:
*** 0.154.1ubuntu8 0
500 http://
100 /var/lib/
# 1. Unattached system with ESM disabled
ubuntu@dev-t3:~$ ua status
SERVICE AVAILABLE DESCRIPTION
cc-eal no Common Criteria EAL2 Provisioning Packages
esm-infra yes UA Infra: Extended Security Maintenance
fips no NIST-certified FIPS modules
fips-updates no Uncertified security updates to FIPS modules
livepatch yes Canonical Livepatch service
This machine is not attached to a UA subscription. /ubuntu. com/advantage
See https:/
# 2. Force motd update for esm-related packages update- notifier/ update- motd-updates- available --force
sudo /usr/lib/
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates. /ubuntu. com/advantage or run: sudo ua status
See https:/
# 3. ssh as non-root and see dynamic motd uptown: ~/src$ ssh ubuntu@10.10.7.119
csmith@
Welcome to Ubuntu 14.04.6 LTS (GNU/Linux 5.3.0-10-generic x86_64)
* Documentation: https:/ /help.ubuntu. com/
System information as of Mon Oct 7 19:07:46 UTC 2019
System load: 0.76 Processes: 19
Usage of /home: unknown Users logged in: 0
Memory usage: 0% IP address for eth0: 10.10.7.119
Swap usage: 65%
Graph this data and manage this system at: /landscape. canonical. com/
https:/
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates. /ubuntu. com/advantage or run: sudo ua status
See https:/
New release '16.04.6 LTS' available. upgrade' to upgrade to it.
Run 'do-release-
Last login: Mon Oct 7 19:07:46 2019 from 10.10.7.1
# Install latest
# On Unattached system with ESM disabled:
ubuntu@dev-t3:~$ sudo /usr/lib/ update- notifier/ apt-check --human-readable
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates. /ubuntu. com/advantage or run: sudo ua status
See https:/
# On Attached system with ESM enabled. updates are properly listed update- notifier/ apt-check --human-readable
ubuntu@dev-t3:~$ sudo /usr/lib/
UA Infrastructure Extended Security Maintenance (ESM) is enabled.
54 updates can be installed immediately.
52 of these updates are provided through UA Infrastructure ESM.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
##### Attached system with ESM enabled
# 4. Enabled esm
sudo ua attach <mytoken>
Enabling default service esm-infra
Updating package lists
ESM Infra enabled.
This machine is now attached to '<email address hidden>'.
SERVICE ENTITLED STATUS DESCRIPTION
cc-eal no — Common Criteria EAL2 Provisioning Packages
cis-audit no — Center for Internet Security Audit Tools
esm-infra yes enabled UA Infra: Extended Security Maintenance
fips no — NIST-certified FIPS modules
fips-updates no — Uncertified security updates to FIPS modules
livepatch yes n/a Canonical Livepatch service
Enable services with: ua enable <service>
Account: <email address hidden>
Subscription: <email address hidden>
# 5. Force motd update for attached machine with ESM enabled update- notifier/ update- motd-updates- available --force
ubuntu@dev-t3:~$ sudo /usr/lib/
UA Infrastructure Extended Security Maintenance (ESM) is enabled.
54 updates can be installed immediately.
52 of these updates are provided through UA Infrastructure ESM.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
# 6. ssh Login to see full updated motd
csmith@ uptown: ~/src$ ssh ubuntu@10.10.7.119
Welcome to Ubuntu 14.04.6 LTS (GNU/Linux 5.3.0-10-generic x86_64)
* Documentation: https:/ /help.ubuntu. com/
System information as of Mon Oct 7 19:12:07 UTC 2019
System load: 0.9 Processes: 19
Usage of /home: unknown Users logged in: 0
Memory usage: 0% IP address for eth0: 10.10.7.119
Swap usage: 65%
Graph this data and manage this system at: /landscape. canonical. com/
https:/
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
2 updates can be installed immediately.
0 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 52 additional security updates. /ubuntu. com/advantage or run: sudo ua status
See https:/
New release '16.04.6 LTS' available. upgrade' to upgrade to it.
Run 'do-release-