Patch Settings window

This window enables you to configure the following settings for patching Windows and Ubuntu servers:

  • Patch metadata and binaries import
  • Supported Microsoft products and locales
  • Ubuntu patching methods for your environment

Windows Patch Settings

Setting Description

Patch Availability

When Windows patches are imported into Server Automation (SA), they are assigned a default value for Availability. To specify the default value, select either Available or Limited.

The populate-opsware-update-library script that automatically imports patches in Offline Catalog mode can override the selection in this window.

Patching Mode

Depending on your available network infrastructure, enable one of the available SA patching modes:

  • Offline Catalog - imports the wsusscn2.cab file from the SA Client or from the populate-opsware-update-library script. The wsusscn2.file contains only security updates. HPE can provide missing non-security updates via HPELN.
  • WSUS - connects to a WSUS server to retrieve Microsoft patches from a custom Windows patching repository. Unlike the Offline Catalog mode, WSUS patching requires access only to the WSUS server on your network from where it can retrieve both security and non-security updates.

Windows Patch Downloads

This section contains information about the Windows patch database used in SA:

  • Patch Database: Depending on your network infrastructure, you can get the Microsoft patching database into SA either by importing the Windows patching catalog (wsusscn2.cab file) or by connecting to a WSUS server on your network.
  • Patch Products: This section lists the Microsoft Windows products affected by the patches tracked by SA.

  • Patch Locales: This section lists the patch languages managed by SA.

In WSUS mode, filtering by patch product and locale is done on the WSUS server side. SA only displays the read-only list of products and locales selected by the WSUS administrator.

Windows Patch Utilities

In Offline Catalog patching mode, SA requires the Windows Patch utilities to deploy the latest version of the Microsoft Update agent onto the managed servers. Windows Update Agent (WUA) scans computers for security updates without connecting to Windows Server Update Services (WSUS) server.

Ubuntu Patch Settings

Setting Description
Proxy

Define the Ubuntu proxy configuration.

Repositories

Define the Ubuntu repositories to access.

Policy Settings

Configure the Ubuntu Patch Policy Settings.

Scanner Options

Specify the Ubuntu scanner behavior.

General

Specify the Ubuntu log settings.

 

Related links

Patch management for Ubuntu

Patch management for Windows

Access the Microsoft patch database

Access the Microsoft patch database

Access the Microsoft patch database

Set patch availability

Select Windows patch products and locales for import