Installing a Windows patch

Before a patch can be installed on a managed server, it must be imported into HPE Server Automation and its status must be Available. Administrators who have the required permissions can install patches that are marked Limited.

Note
You must have permissions to manage patches. To obtain these permissions, contact your system administrator. See the SA 10.50 Administration Guide.

You can perform the installation by explicitly selecting patches and servers, and you can install a patch even if the patch policy exception is Never Install.

Note
If you have to install any Windows OS Service Packs, it is important that you isolate the OS Service Packs into their own individual policies and install them independently—each one in their own remediation or ad hoc installation job—before installing the remainder of the Vendor Recommended Policy updates. See Windows Operating System service pack requirements for details.

To install a patch on a managed server:

  1. In the navigation pane, select Library > By Type > Patches.
  2. Expand the Patches and select a specific Windows operating system.
  3. In the content pane, select a patch.
  4. From the View drop-down list, select Servers (or Device Groups).
  5. From the Show drop-down list, select Servers without Patch Installed or Device Groups without Patch Installed.
  6. In the preview pane, select one or more servers.
  7. From the Actions menu, select Install Patch.

    The first step of the Install Patch window appears: 1. Servers and Device Groups.
    For instructions on each step, see the following sections:

    After you have completed a step, click Next to advance to the next step. Before you click Start Job, you can return to a completed step to make changes by clicking on it in the list of steps.

  8. When you are ready to launch the installation job, click Start Job.

    After you launch the job, you cannot change its parameters, even if the job is scheduled to run at a later time.

    If the Install Patch window remains open until the job completes, Windows Patch Management updates the Patch Compliance column in the All Managed Servers window with the revised compliance count (in parenthesis) for affected servers. Press F5 or select Refresh from the View menu to update information in the Patch Preview pane.

See Remediating Patch Policies for another method of installing a patch.