Select Windows patch products and locales for import
You can limit the patches tracked by HPE Server Automation to specific Windows products and locales of these products. When you import the Microsoft Patch Database, SA retrieves only the products and locales that you selected. This minimizes data storage issues in the SA Core and Software Repository (Word).
A product is a specific edition of an operating system or application, for example Windows Server 2008 R2. The locale of a patch identifies the language of the Windows servers that should receive the patch.
To specify patch products and patch locales for your Microsoft patch database:
In WSUS patching modeIn WSUS mode, filtering by patch product and locale is done on the WSUS server side. SA only displays the read-only list of products and locales selected by the WSUS administrator.
In Offline Catalog patching modeBy default, when you import the Microsoft Offline Catalog, SA imports patch metadata for all patches listed in the database. The default product list is based on the Microsoft product list at the time this version of SA was released. Modify the list of products according to the products in your environment. If there are products in the default selected list that you do not want, deselect them before you import patch binaries.
From the SA client
- In the navigation pane, select AdministrationPatchSettings.
- In the Microsoft tab, select Patch Products and then click Edit.
- In the Edit Patch Products window, use (+) the include and (-) exclude arrows to select the products whose patches you want to import.
-
To populate the list of available products from Microsoft, click either:
- Update Products from Vendor: to update the list of products directly from the vendor site. The vendor site URL is the default URL for the Microsoft Offline Catalog on the Microsoft website. If you modified the default URL, select Revert to Vendor Default go back to the URL defined in your system implementation settings.
-
Update Products from File: Use this option to update the list of products from the wsusscn2.cab file on your local machine. This method is useful for air-gapped environments, where the managed servers do not have internet access.
- Click OK to save your settings.The next time you run import Windows patches, patches for the selected products will be included in the download.
From the populate-opsware-update-library shell script
To limit the patches tracked to specific Windows operating systems, run the command‑line script that automatically imports patches.
The script can filter the patches imported according to operating system, such as specific versions of Windows Servers. When you run this script, patches from all products that are selected in the Patch Settings product list will be imported, unless they are specifically omitted by one of the command-line options. See Script Options.
Patch locales
The locale of a patch identifies the language of the Windows servers that should receive the patch. A patch with the same name might be available for different locales. For example, a patch named Q123456 might be available for servers running the English and Japanese versions of Windows. Although they have the same name, the patches installed on the English and Japanese servers are different binaries.
Windows patch management supports multiple locales in the same SA multimaster mesh. To install a patch on Windows servers with different locales, you specify the patch by name. During the installation (or policy remediation), SA matches the locale of the patch with the locale of each managed server. You do not need to repeat the installation for each locale.
Related topics