Use > Software management > Quick start to software management > Software policies > Software policies for patch installation

Software policies for patch installation

With SA you can install patches on servers in the following ways:

  • Using Windows patch policies to install Windows patches. See "Patch Management for Windows" in the SA 10.51 Use section for more information.
  • Using Solaris patch policies to install Solaris patches. See "Patch Management for Solaris" in the SA 10.51 Use section for more information.
  • Using patch policies to install HP-UX, AIX and Linux patches. See "Patch Management for Unix" in the SA 10.51 Use section for more information.

A policy can contain both Unix patches and Windows patches. It is recommended that you use Windows patch policies to install Windows patches, Solaris patch policies to install Solaris patches and policies to install other Unix patches on servers.

Patch policies provide you with an option of setting a policy exception. If you need to include or exclude a Windows patch in a patch policy from being installed, you can deviate from a patch policy by specifying that Windows patch in a policy exception. You can also set precedence rules for applying patch policies and policy exceptions. The precedence rules determine the Windows patches that are actually installed on a server. See the "Server Patching" section in the SA 10.51 Use section for more information about precedence rules for applying patch policies and patch policy exceptions.

After you attach a patch policy to a managed server, the remediation process installs the patches in a patch policy on the managed server. If you remove any patches from the patch policy and remediate the server again, the remediation process does not remove the patches from the server.

However, with a software policy, the remediation process removes the patches from the server. There are some patches like Service Packs that cannot be uninstalled. For example, if you remove a Service Pack from a policy and remediate the server again, the Service Pack is not uninstalled from the server.