12.4 Configuring Patch Services and the Patch Server

Before you can begin receiving patches, you need to configure Patch Services, select a Patch Server from a Primary Server in the zone, and set the daily schedule for downloading patches.

When a new patch is detected from a device patch scan, the Patch Server downloads the patch information for ZENworks Control Center. The Patches page (on the Security tab) displays the new patch, along with a description and business impact. You can deploy the patch to devices or disregard the patch.

Patch Management stays current with the latest patches and fixes by regular Internet communication with Patch Services to update patch catalogs on zone devices. After the initial 60-day evaluation period, Patch Management requires a paid subscription to continue its daily download of the latest vulnerability and patch information.

If there are multiple ZENworks Servers in your Management Zone, you can select any one of them to be the Patch Server. The server that is selected as the Patch Server becomes an Ondemand Content Master (OCM) by default. If you configure one or more additional OCMs in the Server Hierarchy configuration, you can remove the OCM designation from the selected Patch Server. Only Primary servers can be configured as OCMs and only an OCM can download patches from patch repositories.

To enable Patch Management in ZENworks Control Center:

  1. Navigate to Security > Getting Started > Mitigating Vulnerabilities.

  2. Use the links in the Enable Patch Management section to go directly to the required configuration pages.

    If needed, you can click the video icon next to the Enable Patch Management title to see a video demonstration of this process.