B.1 Patch Management System Variables

See below for a list of variables and how to enter them. You can enter these variables by selecting Configuration > Configuration page > Device Management > System Variables.

NOTE:All system variables are case-sensitive.

zpm-log-retain-days

Set how long the files in the folders specified by the zpm-folders-to-clean setting should be retained on the managed device. The default value is 7 days, which means that any files older than 7 days will be removed from the specified folders.

zpm-folders-to-clean

The ZPM folder contains three subfolders: logs, stage, and content. By default, each folder is cleaned up after the number of days specified by the zpm-log-retain-days variable. Use this variable to limit which folders are cleaned up. For example, if you only want the stage and content folders to be cleaned up, specify only these two folders. Any folder not specified will not be cleaned up. Separate folder entries with a comma.

In general, it is recommended that you clean up all three folders so that excess disk space is not consumed. This variable is typically used only in conjunction with OpenText Customer Care when troubleshooting issues.

zpm-clean-up-timer

Set the interval period for the folder cleanup. The default value is 12, which means that every 12 hours any files older than the zpm-log-retain-days setting will be deleted from the folders specified by the zpm-folders-to-clean setting.

AIRGAP_COLLECTOR_ALWAYS_DOWNLOAD

Set to true to force to download all bundles and expected patches on the Airgap connection server.

(For troubleshooting only)

CONNECTION_TIMEOUT

Enables the adjustment of URL connection timeout duration when downloading patch files (signatures, packages & payloads). Using this system variable can be beneficial when operating in a slow or intermittent network environment.

Default Value: 180 seconds

Valid Range: 0 (infinite) to 3600 seconds (1 hour)

PATCH_AIRGAP_LICENSE

Set valid license for the Airgap disconnection server.

PATCH_ALWAYS_SHOW_REBOOT_PROMPT

Set to true to display the patch reboot prompt to users when the Patch Policy Reboot Behavior option for Suppress reboot is set to Yes.

No prompt is displayed on Suppress reboot if this variable is set to false, which is the default behavior.

PATCH_CONVERT_BASELINES_TO_POLICIES

Set to false to skip the process of converting mandatory baselines to patch policies.

PATCH_DELAY_REBOOT_ANALYZE

Delays the initial patch scan, which is run during device startup, by the specified number of minutes, when a reboot-required patch is installed and the system is rebooted

Valid Range: From 1 to 60 minutes. If the specified value is above 60, then the Analyze process will be delayed by 60 minutes.

Value: Integer value in minutes (from 1 to 60).

PATCH_DELAY_SUPERSEDED_DISABLE

Delays the disabling of superseded patches by the specified number of days. The value configured using this system variable will override the 30, 60 or 90 day value configured in ZENworks Control Center.

Default Value: 120 days

PATCH_DEPLOY_USER_SYSTEM

Set true or false to specify the Window executable’s security level.

true: The option Run as secure system user (Don't allow system to interact with desktop) will be selected.

false: The option Run as dynamic administrator will be selected.

PATCH_NOTIFY_INSTALL_ALLOWCANCEL

Set to true to allow the user to cancel the patch installation.

PATCH_NOTIFY_INSTALL_POPUP_DURATION

Set value to define how long the system tray notification is displayed before being hidden.

PATCH_NOTIFY_INSTALL_POPUP_SHOW_TRAY

Set to true to enable a notification for a pending installation is displayed in the system tray.

PATCH_NOTIFY_INSTALL_MESSAGE

Set value for the text of the notification message.

PATCH_NOTIFY_INSTALL_MESSAGE_POPUP

Set value for text that appears in the notification.

PATCH_NOTIFY_INSTALL_NOTIFYUSER

Set to true to notify the user prior to the installation of the patch.

PATCH_NOTIFY_INSTALL_REBOOT_TIMEOUT

Set the value of the countdown for install notification.

PATCH_NOTIFY_INSTALL_SNOOZE

Set to true to allow the user to delay the installation.

PATCH_NOTIFY_INSTALL_SNOOZE_INTERVAL

Set the value for the duration the install is delayed when the user snoozes.

PATCH_NOTIFY_REBOOT_ALLOWCANCEL

Set to true to enable a cancel option in the reboot notification prompt.

PATCH_NOTIFY_REBOOT_MESSAGE

Set value for the text of the message that appears before patch installation completes and the computer reboots.

PATCH_NOTIFY_REBOOT_MESSAGE_POPUP

Set value for text that appears in the notification.

PATCH_NOTIFY_REBOOT_NOTIFYUSER

Set to true to enable reboot notification and its configuration options.

PATCH_NOTIFY_REBOOT_POPUP_DURATION

Enter a value in hours, minutes or seconds for how long the system tray notification is displayed before being hidden.

PATCH_NOTIFY_REBOOT_POPUP_SHOW_TRAY

Set to true to enable a notification for a pending reboot which is displayed in the system tray.

PATCH_NOTIFY_REBOOT_REBOOT_TIMEOUT

Set the value of the countdown for reboot notification.

PATCH_NOTIFY_REBOOT_SNOOZE

Set to true to enable a snooze option in the deployment reboot notification prompt, which delays the reboot.

PATCH_NOTIFY_REBOOT_SNOOZE_INTERVAL

Set the value for the duration the reboot is delayed when the user clicks Snooze.

PATCH_NOTIFY_REBOOT_SUPPRESSREBOOT

Set to true to enable an option in the reboot notification prompts to prevent the reboot.

PATCH_POLICY_ACTIONS_LIMIT

Enables adjustments of the maximum number of patch policy actions. Thus, using this system variable allows users finer control of patch policy child bundle actions.

Default Value: 1500 actions

Valid Range: 100 to 99999 actions

PATCH_SCAN_ALWAYS

Set to true to ensure that the patch detection scan runs on all devices as scheduled, even when patch discovery for new content does not indicate the need for a scan. When the variable is not set, the default behavior is the same as true.

Default Value: true

Valid Values: true, false

PATCH_TREND_DATA_DAYS

This variable controls the number of days that patch Dashboard and Trending data, which was configured in an earlier version of ZENworks, is stored in the database. Set the value to x days of storing data or set it to 0 to disable storing the data.

NOTE:Patch Dashboard and Trending provided patch compliance and trending data on the Patch dashboard in ZENworks 2017 Update 2 and earlier versions. This variable is only applicable to ZENworks Patch Management environments that have updated to ZENworks Patch Management 2017 Update 4 from an earlier version. It is not applicable for new installations from Update 4 and later. For information about accessing this data, contact Technical Support.

scan.software.installers

This variable, when set to true, enables ZENworks Patch Management to manage applicable Windows Software Installers. For example, Microsoft 365 apps patching. For more information, see Enabling Software Installers.

Default Value: false

Valid Values: true, false

PATCH_SIZE_LIMIT_FOR_CURL

Set the value above which the patch should be downloaded using cURL. Specify the size in MB. By default, the patch download limit size is 1024 MB.

PATCH_CUSTOM_DOWNLOAD_PATH

Set a custom path to the cURL configuration to the downloaded patch file path (without file name) for a custom patch.

USE_CURL_ON_CUSTOM_DOWNLOAD_FAILURE: In case the custom file does not have the required path, in such cases this variable can be set to true so that the patches can be downloaded from the default location. This variable cannot be used independently.

The above two variables should be used together. By default, USE_CURL_ON_CUSTOM_DOWNLOAD_FAILURE is set to false.

CURL_CONFIG_PATH

Set the path to the cURL configuration with the file name.

If you are using a proxy, then ensure that you add the following parameters in the configuration file:

  • dump-header="curl-response-headers.log"

  • proto=https

  • proxy=<proxy_address>:7443

REMEDIATOR_PASSWORD_MINIMUM_LENGTH

Set minimum password length for Remediator user.

REMEDIATOR_PASSWORD_MAXIMUM_LENGTH

Set maximum password length for Remediator user.

NOTE:Both REMEDIATOR_PASSWORD_MAXIMUM_LENGTH and REMEDIATOR_PASSWORD_MINIMUM_LENGTH should be configured, even if one variable is not configured, then by default, the minimum and maximum password length will be 10 and 15 respectively.

REMEDIATION_USER_PASSWORD_TTL

Set Time To Live for remediation User Password. By default, TTL is set to 7 days.

AIRGAP_SERVER

Set to true when the zone is an Airgap server.

AIRGAP_COLLECTOR

Set to true when the zone is Airgap collector.

useSysVarLocale

Set to true to the use LANG_CODE variable.

LANG_CODE

Specify the language code from the language catalog. For example, en-US

MACOS_PATCH_DOWNLOAD_URL_DOMAIN_NAME

Specify a fragment of the download URL from where patch will be downloaded.