1. Manuals
  2. Brands
  3. Symantec Manuals
  4. Software
  5. ALTIRIS INVENTORY 7.0 SP2 - FOR NETWORK DEVICES...
  6. Manual

Symantec ALTIRIS PATCH MANAGEMENT SOLUTION 7.0 SP2 - FOR WINDOWS V1.0 Manual

Hide thumbs Also See for ALTIRIS PATCH MANAGEMENT SOLUTION 7.0 SP2 - FOR WINDOWS V1.0:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Installation Manual, Manual
Altiris Patch Management
Solution for Windows from
Symantec User Guide
Version 7.0 SP2

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ALTIRIS PATCH MANAGEMENT SOLUTION 7.0 SP2 - FOR WINDOWS V1.0 and is the answer not in the manual?

Questions and answers

Related Manuals for Symantec ALTIRIS PATCH MANAGEMENT SOLUTION 7.0 SP2 - FOR WINDOWS V1.0

Summary of Contents for Symantec ALTIRIS PATCH MANAGEMENT SOLUTION 7.0 SP2 - FOR WINDOWS V1.0

  • Page 1 Altiris Patch Management Solution for Windows from Symantec User Guide Version 7.0 SP2...
  • Page 2 Legal Notice Copyright © 2010 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, Altiris, and any Altiris or Symantec trademarks used in the product are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

  • Page 3: Technical Support

    Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our web site at the following URL: www.symantec.com/business/support/ All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy.
  • Page 4 Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes Licensing and registration If your Symantec product requires registration or a license key, access our technical support web page at the following URL: www.symantec.com/business/support/ Customer service Customer service information is available at the following URL: www.symantec.com/business/support/...
  • Page 5 North America and Latin America supportsolutions@symantec.com Additional enterprise services Symantec offers a comprehensive set of services that allow you to maximize your investment in Symantec products and to develop your knowledge, expertise, and global insight, which enable you to manage your business risks proactively.

  • Page 7: Table Of Contents

    Contents Technical Support ....................3 Chapter 1 Introducing Patch Management Solution for Windows ................11 About Patch Management Solution for Windows ....... 11 How Patch Management Solution for Windows works ......12 Where to get more information ............13 Chapter 2 Implementing Patch Management Solution for Windows ................
  • Page 8 Contents Configuring vendor settings ............31 Configuring software updates installation settings ......31 Configuring inventory and vulnerabilities checking interval ....32 Core Services page ............... 33 Patch management vendor settings page .......... 33 Default Software Update Plug-in Policy page ........35 Chapter 6 Configuring Patch Management server tasks ....
  • Page 9 Contents About Patch Management software update catalog replication ..... 61 Replicating Patch Management import data ........61 About Software Update policy replication ......... 62 Replicating Software Update policies ..........62 Appendix A Technical reference ............65 About hierarchy and data replication direction ........65 About Patch Management security roles ...........
  • Page 10 Contents...

  • Page 11: Introducing Patch Management Solution For Windows

    Chapter Introducing Patch Management Solution for Windows This chapter includes the following topics: About Patch Management Solution for Windows How Patch Management Solution for Windows works Where to get more information About Patch Management Solution for Windows Patch Management Solution for Windows takes inventory of managed computers to determine the operating system and software updates (patches) they require.

  • Page 12: How Patch Management Solution For Windows Works

    Notification Server, then pass the settings down to child Notification Servers . Further on integration, Patch Management Solution for Windows can be used with other Altiris solutions from Symantec such as Altiris® Recovery Solution from Symantec. After Recovery Solution is installed, Patch Management Solution for Windows provides an agent option to automatically create a snapshot before patch installations.

  • Page 13: Where To Get More Information

    User Guide Information about how to use this product, The Documentation Library, which is including detailed technical information and available in the Symantec Management instructions for performing common tasks. Console on the Help menu. The Product Support page, which is This information is available in PDF format.
  • Page 14 Information about how to use this product, The Documentation Library, which is including detailed technical information and available in the Symantec Management instructions for performing common tasks. Console on the Help menu. Help is available at the solution level and at Context-sensitive help is available for most the suite level.

  • Page 15: Implementing Patch Management Solution For Windows

    “Installing Patch Management Solution for Windows” on page 18. Install or upgrade the Altiris Agent 7.0 on every computer to which you want to send patches. For more information, see topics about installing the Altiris Agent in the Symantec Management Platform User Guide.
  • Page 16 Implementing Patch Management Solution for Windows Implementing Patch Management Solution for Windows Install or upgrade the Software Update Plug-in. “Installing the Software Update Plug-in” on page 24. “Upgrading the Software Update Plug-in” on page 24. Configure the Patch Management Solution core settings. “Configuring patch management Core Services settings”...

  • Page 17: Installing Patch Management Solution For Windows

    Windows Patch Management Solution for Windows requires the following: Symantec Management Platform 7.0 SP4. For more information, see topics about system requirements for Symantec Management Platform in the Symantec Management Platform Installation Guide. When you install or upgrade Patch Management Solution for Windows through the Symantec Installation Manager, Symantec Management Platform is installed or upgraded automatically.

  • Page 18: Installing Patch Management Solution For Windows

    Management Suite installation file from the Symantec Web site (www.symatec.com). If you already have the Symantec Installation Manager installed, click Start > All Programs > Altiris > Symantec Installation Manager > Symantec Installation Manager. In the Symantec Installation Manager, click Install New Products.
  • Page 19 Installing Patch Management Solution for Windows Migrating from Patch Management Solution for Windows 6.2 to 7.x “To install the Symantec Installation Manager on a 6.x Notification Server” on page 19. Running the Symantec Installation Manager migration wizard on the 6.2 to export data.
  • Page 20 Installing Patch Management Solution for Windows Migrating from Patch Management Solution for Windows 6.2 to 7.x Double-click the file NSUpgradeWizard.exe. To start migration, on the first page of the wizard, click Next. On the Export / Import Task Selection page of the wizard, click Export data from an Altiris Notification Server to a file store.

  • Page 21: Uninstalling Patch Management Solution For Windows

    Uninstalling Patch Management Solution for Windows Use the Symantec Installation Manager to uninstall the product. Licensing Each Symantec product comes with a seven-day trial license that is installed by default. You can register and obtain a 30-day evaluation license through our Web site at www.altiris.com...
  • Page 22 Installing Patch Management Solution for Windows Licensing...

  • Page 23: Installing The Software Update Plug-In

    Chapter Installing the Software Update Plug-in This chapter includes the following topics: About the Software Update Plug-in Installing the Software Update Plug-in Upgrading the Software Update Plug-in Uninstalling the Software Update Plug-in About the Software Update Plug-in user interface About the Software Update Plug-in The Software Update Plug-in manages all of the Patch Management Solution for Windows functionality on a managed computer.

  • Page 24: Installing The Software Update Plug-In

    Altiris Agent settings. To install the Software Update Plug-in In the Symantec Management Console, on the Settings menu, click Agents/Plug-ins > All Agents/Plug-ins. In the left pane, click Agents/Plug-ins > Software > Patch Management >...

  • Page 25: Uninstalling The Software Update Plug-In

    “Installing the Software Update Plug-in” on page 24. To uninstall the Software Update Plug-in In the Symantec Management Console, on the Settings menu, click Agents/Plug-ins > All Agents/Plug-ins. In the left pane, click Agents/Plug-ins > Software > Patch Management >...
  • Page 26 Installing the Software Update Plug-in About the Software Update Plug-in user interface Items in the Software Update Plug-in user interface Table 4-1 Item Description Schedules This pane lists all scheduled activities for the Software Update Plug-in. Show Updates By checking or unchecking boxes, you can choose to show or hide software updates with the status listed next to each box.
  • Page 27 Installing the Software Update Plug-in About the Software Update Plug-in user interface Items in the Software Update Plug-in user interface (continued) Table 4-1 Item Description Text labels in the Failed to Install – The maximum application retries for a failed Status column software update has been exceeded.
  • Page 28 Installing the Software Update Plug-in About the Software Update Plug-in user interface...

  • Page 29: Configuring Patch Management Solution For Windows

    Chapter Configuring Patch Management Solution for Windows This chapter includes the following topics: Configuring patch management Core Services settings Customizing severity levels Configuring vendor settings Configuring software updates installation settings Configuring inventory and vulnerabilities checking interval Core Services page Patch management vendor settings page Default Software Update Plug-in Policy page Configuring patch management Core Services settings You can configure where the software updates should be downloaded.

  • Page 30: Customizing Severity Levels

    Configuring Patch Management Solution for Windows Customizing severity levels To configure patch management Core Services settings In the Symantec Management Console, on the Settings menu, click All Settings. In the left pane, click Settings > Software > Patch Management > Core Services.

  • Page 31: Configuring Vendor Settings

    “About software updates and software bulletins” on page 45. To configure vendor settings In the Symantec Management Console, on the Settings menu, click All Settings. In the left pane, click Settings > Software > Patch Management. Do one of the following: Click Microsoft Settings >...

  • Page 32: Configuring Inventory And Vulnerabilities Checking Interval

    You can configure how often do you want to check for vulnerabilities. To alter vulnerability analysis settings In the Symantec Management Console, on the Settings menu, click All Settings. In the left pane, click Settings > Software > Patch Management Click Microsoft Settings >...

  • Page 33: Core Services Page

    Configuring Patch Management Solution for Windows Core Services page Core Services page The Core Services page lets you configure where the software updates should be downloaded. You can also create custom severity levels to apply to software updates. (Patch Management Solution for Windows only) You can select any additional languages that you want to download with the Patch Management Import task.
  • Page 34 Default: 1 week. Use multicast when the Altiris Check if you want to use multicast when distributing Agent's multicast option is enabled software update packages. For more information on multicasting, see the Symantec Management Platform User Guide.

  • Page 35: Default Software Update Plug-In Policy Page

    Assign package to Lets you select the package distribution method. For more information on assigning packages to package servers, see the Symantec Management Platform User Guide. Use alternate download location on Lets you specify a different location on a package Package Server server to which to download packages.
  • Page 36 Configuring Patch Management Solution for Windows Default Software Update Plug-in Policy page By default, the settings specified on this page apply to all Windows computers that have the Software Update Plug-in installed. “About the Software Update Plug-in” on page 23. “Configuring software updates installation settings ”...
  • Page 37 Configuring Patch Management Solution for Windows Default Software Update Plug-in Policy page Options on the Installation Schedules tab of the Default Software Table 5-5 Update Plug-in Policy page (continued) Option Description Override maintenance Check if you want to use the install and restart options that windows settings you specified in this policy.
  • Page 38 Configuring Patch Management Solution for Windows Default Software Update Plug-in Policy page...

  • Page 39: Configuring Patch Management Server Tasks

    Chapter Configuring Patch Management server tasks This chapter includes the following topics: About Patch Management server tasks Downloading software updates catalog Downloading QChain Checking Software Update packages integrity Patch Management Import page Download QChain page About Patch Management server tasks You must configure server tasks (previously known as background actions) to run automatically at regular intervals.

  • Page 40: Downloading Software Updates Catalog

    To download software updates catalog immediately In the Symantec Management Console, on the Manage menu, click Jobs and Tasks. In the left pane, click Jobs and Tasks > System Jobs and Tasks > Software >...

  • Page 41: Downloading Qchain

    To download QChain In the Symantec Management Console, on the Manage menu, click Jobs and Tasks. In the left pane, click Jobs and Tasks > System Jobs and Tasks > Software >...

  • Page 42: Checking Software Update Packages Integrity

    “Configuring patch management Core Services settings” on page 29. To check Software Update package integrity In the Symantec Management Console, on the Manage menu, click Jobs and Tasks. In the left pane, click Jobs and Tasks > System Jobs and Tasks > Software >...

  • Page 43: Download Qchain Page

    Configuring Patch Management server tasks Download QChain page Options on the Patch Management Import page Table 6-1 Option Description Default Location The default location from which the Patch Management Import files are downloaded. Alternative Location Lets you specify a custom location to download Patch Management Import files from.
  • Page 44 Configuring Patch Management server tasks Download QChain page Options on the Download QChain page (continued) Table 6-2 Option Description Only download if modified Ensures that only updated files are downloaded, thus avoiding unnecessary downloads. Retry failed downloads The number of times to retry downloading QChain fails before the task fails.

  • Page 45: Staging And Distributing Software Bulletins And Software Updates

    Chapter Staging and distributing software bulletins and software updates This chapter includes the following topics: About software updates and software bulletins About staging and distributing software bulletins Staging software bulletins Distributing software updates Viewing the software update delivery summary report About Software Update policies and maintenance windows Patch Remediation Center page Software Update Policy Wizard pages...

  • Page 46: About Staging And Distributing Software Bulletins

    Staging and distributing software bulletins and software updates About staging and distributing software bulletins which is sent to Notification Server by the Software Update Plug-in. For example, Internet Explorer version and OS version. Software updates are then installed according to Microsoft specifications. For example, if Microsoft requires a restart, then the computer is restarted after the update is installed.

  • Page 47: Staging Software Bulletins

    48. To view the status of a software bulletin download In the Symantec Management Console, on the Manage menu, click Jobs and Tasks. In the left pane, click Jobs and Tasks > System Jobs and Tasks > Software >...

  • Page 48: Distributing Software Updates

    To distribute software updates In the Symantec Management Console, on the Actions menu, click Software > Patch Remediation Center. In the right pane, in the Show drop down box, click Microsoft Compliance by Bulletin or Adobe Compliance by Bulletin, and then click the Refresh symbol.

  • Page 49: Viewing The Software Update Delivery Summary Report

    “About Patch Management Solution for Windows reports” on page 53. To view the software update delivery summary report In the Symantec Management Console, on the Reports menu, click All Reports. In the left pane, click Reports > Software > Patch Management > Remediation Status >...
  • Page 50 Staging and distributing software bulletins and software updates Patch Remediation Center page “About software updates and software bulletins” on page 45. Items on the Patch Remediation Center page Table 7-1 Item Description Bulletin The bulletin's number, as supplied by the vendor. Severity The bulletin's vendor-specified severity level.

  • Page 51: Software Update Policy Wizard Pages

    Staging and distributing software bulletins and software updates Software Update Policy Wizard pages Software Update Policy Wizard pages The Software Update Policy Wizard creates Software Update policies that distribute software updates to managed computers. A Software Update policy that is created from a software bulletin includes every software update that is in the bulletin.
  • Page 52 Staging and distributing software bulletins and software updates Software Update Policy Wizard pages Options on the first page of the Software Update Policy Wizard Table 7-3 (continued) Option Description On schedule Runs the software updates installation on a schedule. Override Maintenance Overrides specified maintenance windows settings.

  • Page 53: Using Patch Management Reports

    Chapter Using Patch Management reports This chapter includes the following topics: About Patch Management Solution for Windows reports About compliance reports About diagnostic reports About remediation status reports About software bulletin reports About the Patch Management home page Viewing Patch Management reports About Patch Management Solution for Windows reports You can view and manage your Patch Management data through reports.

  • Page 54: About Compliance Reports

    “About staging and distributing software bulletins” on page 46. You can find the compliance reports in the Symantec Management Console under Reports > All Reports > Software > Patch Management > Compliance. Compliance reports are also featured in the Patch Management home page for easy access.

  • Page 55: About Diagnostic Reports

    The diagnostics reports display vulnerability summary and Software Update Plug-in installation information. You can find the diagnostics reports in the Symantec Management Console under Reports > All Reports > Software > Patch Management > Diagnostics. “About Patch Management Solution for Windows reports”...

  • Page 56: Viewing Patch Management Reports

    “About Patch Management Solution for Windows reports” on page 53. To view Patch Management reports In the Symantec Management Console, on the Reports menu, click All Reports. In the left pane, click Reports > Software > Patch Management. Click the report that you want to view.
  • Page 57 Using Patch Management reports Viewing Patch Management reports In the right pane, leave the default settings, and click Refresh. If you want to view more information about an update, right-click on any update, and click Resource Manager. Each type of compliance report opens a different Resource Manager , depending on the type of results.
  • Page 58 Using Patch Management reports Viewing Patch Management reports...

  • Page 59: Replicating Patch Management Data In Hierarchy

    Chapter Replicating Patch Management data in hierarchy This chapter includes the following topics: About replicating Patch Management data About Patch Management Language Alert rule Replicating Patch Management language alerts About Patch Management software update catalog replication Replicating Patch Management import data About Software Update policy replication Replicating Software Update policies About replicating Patch Management data...

  • Page 60: About Patch Management Language Alert Rule

    “About Patch Management Language Alert rule” on page 60. To replicate Patch Management language alerts In the Symantec Management Console, on the Settings menu, click Notification Server > Hierarchy. In the left pane, click Hierarchy > Hierarchy Management. In the right pane, click the Replication tab.

  • Page 61: About Patch Management Software Update Catalog Replication

    “About Patch Management Language Alert rule” on page 60. To replicate Patch Management software update catalog In the Symantec Management Console, on the Settings menu, click Notification Server > Hierarchy. In the left pane, select Hierarchy > Hierarchy Management. In the right pane, click the Replication tab.

  • Page 62: About Software Update Policy Replication

    Replicating Patch Management data in hierarchy About Software Update policy replication Under Schedule, create a custom schedule or select the standard replication schedule. Under Data Verification, specify a percentage of data to be verified during each replication, and check Verify data integrity if wanted. Turn on the rule.
  • Page 63 Replicating Patch Management data in hierarchy Replicating Software Update policies To replicate Software Update policies In the Symantec Management Console, on the Settings menu, click Notification Server > Hierarchy. In the left pane, click Hierarchy > Hierarchy Management. In the right pane, click the Replication tab.
  • Page 64 Replicating Patch Management data in hierarchy Replicating Software Update policies...

  • Page 65: Appendix A Technical Reference

    About hierarchy and data replication direction Patch Management Solution for Windows supports the hierarchy and replication features of the Symantec Management Platform. These features let you create settings, schedules, and other data at the top-level Notification Server computer and replicate them to child-level Notification Server computers.

  • Page 66: About Patch Management Security Roles

    Compliance summary replication rule is summary enabled. This The vulnerability analysis is replicated up as a information is summary. not available for Adobe. About Patch Management security roles You can assign the following security roles to Symantec Management Console users:...
  • Page 67 Patch Management Rollout Users with Patch Management Administrators role have full access to Patch Management Solution functionality, but no access to the rest of the Symantec Management Console. Users with Patch Management Rollout role have limited access to the following...
  • Page 68 Technical reference About Patch Management security roles...

  • Page 69: Index

    Index Download QChain task about 43 Adobe Patch Management Import task downloading about 42 QChain 41 Adobe vendor settings page software updates catalog 40 about 33 downloading software updates. See staging Adobe Vulnerability Analysis page about 32 analyzing vurnelabilities 32 help context-sensitive 13 hierarchy...
  • Page 70 Index pages (continued) reports (continued) Adobe settings page 33 software bulletin 55 Default Software Update Plug-in Policy 35 viewing 56 Download QChain 43 Microsoft Patch Management Import 42 Microsoft settings page 33 security roles 66 Patch Remediation Center 49 severity levels Software Update policy wizard 51 assigning 30 Patch Management Import Data Replication rule...

Table of Contents