Depending on the Access Gateway platform, different approaches are required to apply the fix.
a) On an Access Manager or Access Gateway Appliance platform: Simply apply the security updates from the Security update channel to have the latest patches applied. The instructions at https://www.netiq.com/documentation/access-manager-42/install_upgrade/data/bowu0bx.html outline how to do this.
b) On a Linux based Access Gateway Service (SLES or RHEL): Apply the instructions from KB 7017580, passing in the filename of novell-nacm-apache-extra-4.0.9-1.0.1u to update to OpenSSL 1.0.1u.
c) On a Windows based Access Gateway Service: Apply the instructions from KB 7017582, passing in the filename of novell Openssl_Win_101 to update to OpenSSL 1.0.1u.