Import metadata for Windows patches

When you import the Windows patch database from Microsoft's Offline Catalog or from a WSUS server, SA only imports the patch metadata for your filtered patches. The imported patch metadata is stored in the Software Repository (Word) and displayed under LibraryPatches > Windows.

Patch metadata contains the information that SA requires to install Microsoft patches on your managed servers. Metadata supplies information for the properties of an update, thus enabling you to find out whether the patch is relevant for your Windows managed servers. The metadata package downloaded for an update is typically much smaller than the update file itself.

To import patch metadata:

Filtering metadata for import

Depending on your patching mode, SA applies different levels of filtering to ensure that you only import patches for the relevant Microsoft products on your Windows managed servers.

SA retrieves patch metadata from the upstream server where you deployed the WSUS Web service. The WSUS administrator is responsible for keeping any downstream servers synchronized with the upstream server. This ensure you always get the complete and up-to-date list of patch metadata into SA.

After configuring and importing the metadata, you can import the Microsoft patch binaries by using the SA Client. If you are working in Offline Catalog mode, you can also import patch binaries from the populate-opsware-update library command-line script.

Check the list of imported MS patch metadata

After importing Windows patch database from the Microsoft Offline Catalog or from a WSUS server, go to Library > PatchesWindows to verify that SA has imported the metadata for your filtered patches. Patches for which you imported only metadata show up in dimmed, indicating that their binaries are not available in SA yet.

Import patch binaries only for the patches required to remediate non-compliant servers. Before importing binaries, run a compliance scan to find out which patches require your managed servers.

To search for a product patch, select Description as the search value and enter the name of the product, such as Office 2003, in the text box.

Related links

Import Windows patch database from the MS offline catalog

Import the Windows patch database from WSUS

Step 2 - Configure patch policies

Step 3 - Run compliance scans

Step 4 - Import applicable Windows patch binaries