Patch compliance

SA performs conformance checks against managed servers and device groups to determine whether all patches in a policy were installed successfully. In case of Red Hat Patching, although the dynamic patch policy is empty, this will be populated with items at runtime. The items that fill the patch policy are none other than the recommended patches from the Scan phase. In other words, the patch compliance scan for Red Hat will check if all patches recommended by the scan phase are installed on the managed server.

There are multiple ways of starting a compliance scan. The most important are:

• Manually start of patch compliance scan
• Scheduled
• As a result of a Patch Policy Remediation

Manually starting a patch compliance scan

To manually start a patch compliance scan on one or more managed servers:

1. In the navigation pane, select Devices.
2. Select the device(s) and right click. From the context menu select Scan.
3. From the new menu list, select Patch Compliance.

Scheduling patch compliance scans

To schedule a patch compliance scan on all Red Hat Managed servers:

1. In the navigation pane, select Administration > Compliance Settings.
2. In the Compliance Settings content pane, in the Patch Compliance Schedule section, click Edit Settings.
3. In the Schedule Compliance Scan window, select Enable Compliance Scan.
4. From the Schedule drop-down list, select the frequency of the scans and then click OK to save the settings.

Patch compliance scans as part of other tasks

SA performs a patch compliance scan on a managed server at the end of remediating a patch policy or at the end of installing a recommended patch.