Use > Server patching > Patch management for Windows > Microsoft patch database

Microsoft patch database

The Microsoft patch database contains information about released patches and how they should be applied. Patch Management compares all Windows servers to the Microsoft patch database to identify which patches must be applied.

Microsoft posts patches on its web site on the second Tuesday of each month, unless a special circumstance requires an immediate release. Windows patches released on patch Tuesday are available immediately to import into Server Automation. Before Patch Management can install a patch on a managed server, the patch must be downloaded from the Microsoft web site and imported into the Software Repository. You can download and import patches by using the SA Client or by running a script.

Once every 24 hours, the SA Agent on a Windows server compares the server’s current state against the Microsoft patch database (based on the latest version of wsusscn2.cab) that has been imported into SA by the patch administrator. The Agent reports the results of that comparison and then stores the data in the Model Repository. When you request a compliance scan, it can take several minutes. When you look up compliance for a server, the status information is derived from the Model Repository as well.

Note
The Vendor patch key is currently available for Ubuntu and Windows database views. The vendor patch key is a vendor-specific value that allows users to tie a unit (patch) in SA back to the specific patch supplied by the vendor.