B.1 Patch Management System Variables

See below for a list of variables and how to enter them. You can enter these variables by selecting Configuration > Configuration page > Device Management > System Variables.

NOTE:All system variables are case-sensitive.

zpm-log-retain-days

Set how long the files in the folders specified by the zpm-folders-to-clean setting should be retained on the managed device. The default value is 7 days, which means that any files older than 7 days will be removed from the specified folders.

zpm-folders-to-clean

The ZPM folder contains three subfolders: logs, stage, and content. By default, each folder is cleaned up after the number of days specified by the zpm-log-retain-days variable. Use this variable to limit which folders are cleaned up. For example, if you only want the stage and content folders to be cleaned up, specify only these two folders. Any folder not specified will not be cleaned up. Separate folder entries with a comma.

In general, it is recommended that you clean up all three folders so that excess disk space is not consumed. This variable is typically used only in conjunction with OpenText Customer Care when troubleshooting issues.

zpm-clean-up-timer

Set the interval period for the folder cleanup. The default value is 12, which means that every 12 hours any files older than the zpm-log-retain-days setting will be deleted from the folders specified by the zpm-folders-to-clean setting.

AIRGAP_COLLECTOR_ALWAYS_DOWNLOAD

Set to true to force to download all bundles and expected patches on the Airgap connection server.

(For troubleshooting only)

CONNECTION_TIMEOUT

Enables the adjustment of URL connection timeout duration when downloading patch files (signatures, packages & payloads). Using this system variable can be beneficial when operating in a slow or intermittent network environment.

Default Value: 180 seconds

Valid Range: 0 (infinite) to 3600 seconds (1 hour)

PATCH_AIRGAP_COLLECTOR

Set to true to enable Airgap function on the connection server.

PATCH_AIRGAP_LICENSE

Set valid license for the Airgap disconnection server.

PATCH_AIRGAP_SERVER

Set to true to enable Airgap function on the disconnection server.

PATCH_ALWAYS_SHOW_REBOOT_PROMPT

Set to true to display the patch reboot prompt to users when the Patch Policy Reboot Behavior option for Suppress reboot is set to Yes.

No prompt is displayed on Suppress reboot if this variable is set to false, which is the default behavior.

PATCH_CONVERT_BASELINES_TO_POLICIES

Set to false to skip the process of converting mandatory baselines to patch policies.

PATCH_DAU_SYSTEM_CONTENT

If that is set to true then DAU bundles are created with content type of Patch System.

NOTE:If this is not set prior to existing DAU bundles being created, it is necessary to delete the existing DAU bundles and then run the Patch Server maintenance update.

Default Value: false

Valid Values: true, false

PATCH_DELAY_REBOOT_ANALYZE

Delays the initial patch scan, which is run during device startup, by the specified number of minutes, when a reboot-required patch is installed and the system is rebooted

Valid Range: From 1 to 60 minutes. If the specified value is above 60, then the Analyze process will be delayed by 60 minutes.

Value: Integer value in minutes (from 1 to 60).

PATCH_DELAY_SUPERSEDED_DISABLE

Delays the disabling of superseded patches by the specified number of days. The value configured using this system variable will override the 30, 60 or 90 day value configured in ZENworks Control Center.

Default Value: 120 days

PATCH_DEPLOY_USER_SYSTEM

Set true or false to specify the Window executable’s security level.

true: The option Run as secure system user (Don't allow system to interact with desktop) will be selected.

false: The option Run as dynamic administrator will be selected.

PATCH_NOTIFY_INSTALL_ALLOWCANCEL

Set to true to allow the user to cancel the patch installation.

PATCH_NOTIFY_INSTALL_POPUP_DURATION

Set value to define how long the system tray notification is displayed before being hidden.

PATCH_NOTIFY_INSTALL_POPUP_SHOW_TRAY

Set to true to enable a notification for a pending installation is displayed in the system tray.

PATCH_NOTIFY_INSTALL_MESSAGE

Set value for the text of the notification message.

PATCH_NOTIFY_INSTALL_MESSAGE_POPUP

Set value for text that appears in the notification.

PATCH_NOTIFY_INSTALL_NOTIFYUSER

Set to true to notify the user prior to the installation of the patch.

PATCH_NOTIFY_INSTALL_REBOOT_TIMEOUT

Set the value of the countdown for install notification.

PATCH_NOTIFY_INSTALL_SNOOZE

Set to true to allow the user to delay the installation.

PATCH_NOTIFY_INSTALL_SNOOZE_INTERVAL

Set the value for the duration the install is delayed when the user snoozes.

PATCH_NOTIFY_REBOOT_ALLOWCANCEL

Set to true to enable a cancel option in the reboot notification prompt.

PATCH_NOTIFY_REBOOT_MESSAGE

Set value for the text of the message that appears before patch installation completes and the computer reboots.

PATCH_NOTIFY_REBOOT_MESSAGE_POPUP

Set value for text that appears in the notification.

PATCH_NOTIFY_REBOOT_NOTIFYUSER

Set to true to enable reboot notification and its configuration options.

PATCH_NOTIFY_REBOOT_POPUP_DURATION

Enter a value in hours, minutes or seconds for how long the system tray notification is displayed before being hidden.

PATCH_NOTIFY_REBOOT_POPUP_SHOW_TRAY

Set to true to enable a notification for a pending reboot which is displayed in the system tray.

PATCH_NOTIFY_REBOOT_REBOOT_TIMEOUT

Set the value of the countdown for reboot notification.

PATCH_NOTIFY_REBOOT_SNOOZE

Set to true to enable a snooze option in the deployment reboot notification prompt, which delays the reboot.

PATCH_NOTIFY_REBOOT_SNOOZE_INTERVAL

Set the value for the duration the reboot is delayed when the user clicks Snooze.

PATCH_NOTIFY_REBOOT_SUPPRESSREBOOT

Set to true to enable an option in the reboot notification prompts to prevent the reboot.

PATCH_POLICY_ACTIONS_LIMIT

Enables adjustments of the maximum number of patch policy actions. Thus, using this system variable allows users finer control of patch policy child bundle actions.

Default Value: 1500 actions

Valid Range: 100 to 99999 actions

PATCH_SCAN_ALWAYS

Set to true to ensure that the patch detection scan runs on all devices as scheduled, even when patch discovery for new content does not indicate the need for a scan. When the variable is not set, the default behavior is the same as true.

Default Value: true

Valid Values: true, false

PATCH_TREND_DATA_DAYS

This variable controls the number of days that patch Dashboard and Trending data, which was configured in an earlier version of ZENworks, is stored in the database. Set the value to x days of storing data or set it to 0 to disable storing the data.

NOTE:Patch Dashboard and Trending provided patch compliance and trending data on the Patch dashboard in ZENworks 2017 Update 2 and earlier versions. This variable is only applicable to ZENworks Patch Management environments that have updated to ZENworks Patch Management 2017 Update 4 from an earlier version. It is not applicable for new installations from Update 4 and later. For information about accessing this data, contact Technical Support.

scan.software.installers

This variable, when set to true, enables ZENworks Patch Management to manage applicable Windows Software Installers. For example, Microsoft 365 apps patching. For more information, see Enabling Software Installers.

Default Value: false

Valid Values: true, false

MACOS_PATCH_DOWNLOAD_URL_DOMAIN_NAME

Set the fragment of the download URL for the Mac OS patch, if apple.com is not part of the patch URL.

By default, this system variable is resolved to apple.com, if not configured. Describes a fragment of Mac OS patch download URL, if apple.com is not a part of the patch URL.