A.4 Patch Management System Variables

Within ZENworks Control Center, you can enter system variables to enable/disable certain Patch Management behaviors. See below for a list of variables and how to enter them. You can enter these variables by selecting Configuration > Configuration page > Device Management > System Variables.

NOTE:All system variables are case-sensitive.

AIRGAP_COLLECTOR_ALWAYS_DOWNLOAD

Set to true to force to download all bundles and expected patches on the Airgap connection server.

(For troubleshooting only)

CONNECTION_TIMEOUT

Enables the adjustment of URL connection timeout duration when downloading patch files (signatures, packages & payloads). Using this system variable can be beneficial when operating in a slow or intermittent network environment.

Default Value: 180 seconds

Valid Range: 0 (infinite) to 3600 seconds (1 hour)

PATCH_AIRGAP_COLLECTOR

Set to true to enable Airgap function on the connection server.

PATCH_AIRGAP_LICENSE

Set valid license for the Airgap disconnection server.

PATCH_AIRGAP_SERVER

Set to true to enable Airgap function on the disconnection server.

PATCH_DEPLOY_USER_SYSTEM

Set true or false to specify the Window executable’s security level.

true: The option Run as secure system user (Don't allow system to interact with desktop) will be selected.

false: The option Run as dynamic administrator will be selected.

PATCH_NOTIFY_INSTALL_ALLOWCANCEL

Set to true to allow the user to cancel the patch installation.

PATCH_NOTIFY_INSTALL_POPUP_DURATION

Set value to define how long the system tray notification is displayed before being hidden.

PATCH_NOTIFY_INSTALL_POPUP_SHOW_TRAY

Set to true to enable a notification for a pending installation is displayed in the system tray.

PATCH_NOTIFY_INSTALL_MESSAGE

Set value for the text of the notification message.

PATCH_NOTIFY_INSTALL_MESSAGE_POPUP

Set value for text that appears in the notification.

PATCH_NOTIFY_INSTALL_NOTIFYUSER

Set to true to notify the user prior to the installation of the patch.

PATCH_NOTIFY_INSTALL_REBOOT_TIMEOUT

Set the value of the countdown for install notification.

PATCH_NOTIFY_INSTALL_SNOOZE

Set to true to allow the user to delay the installation.

PATCH_NOTIFY_INSTALL_SNOOZE_INTERVAL

Set the value for the duration the install is delayed when the user snoozes.

PATCH_NOTIFY_REBOOT_ALLOWCANCEL

Set to true to enable a cancel option in the reboot notification prompt.

PATCH_NOTIFY_REBOOT_MESSAGE

Set value for the text of the message that appears before patch installation completes and the computer reboots.

PATCH_NOTIFY_REBOOT_MESSAGE_POPUP

Set value for text that appears in the notification.

PATCH_NOTIFY_REBOOT_NOTIFYUSER

Set to true to enable reboot notification and its configuration options.

PATCH_NOTIFY_REBOOT_POPUP_DURATION

Enter a value in hours, minutes or seconds for how long the system tray notification is displayed before being hidden.

PATCH_NOTIFY_REBOOT_POPUP_SHOW_TRAY

Set to true to enable a notification for a pending reboot which is displayed in the system tray.

PATCH_NOTIFY_REBOOT_REBOOT_TIMEOUT

Set the value of the countdown for reboot notification.

PATCH_NOTIFY_REBOOT_SNOOZE

Set to true to enable a snooze option in the deployment reboot notification prompt, which delays the reboot.

PATCH_NOTIFY_REBOOT_SNOOZE_INTERVAL

Set the value for the duration the reboot is delayed when the user clicks Snooze.

PATCH_NOTIFY_REBOOT_SUPPRESSREBOOT

Set to true to enable an option in the reboot notification prompts to prevent the reboot.

PATCH_POLICY_ACTIONS_LIMIT

Enables adjustments of the maximum number of patch policy actions. Thus, using this system variable allows users finer control of patch policy child bundle actions.

Default Value: 1500 actions

Valid Range: 100 to 99999 actions

PATCH_SCAN_ALWAYS

Set to true to ensure that the patch detection scan runs on all devices as scheduled, even when patch discovery for new content does not indicate the need for a scan. When the variable is not set, the default behavior is the same as true.

Default Value: true

Valid Values: true, false

PATCH_SHOW_BLANK_POLICY

This variable, when set to true, opens the Patches page in a policy that is blank.

Default Value: false

Valid Values: true, false