Installing updates on devices manually

Expand all | Collapse all

If you have selected Find and install required updates on the Update management settings page of the Quick Start Wizard, the install required updates and fix vulnerabilities task is created automatically. You can run or stop the task in the Managed devices folder on the Tasks tab.

If you have selected Search for required updates in the Quick Start Wizard, you can install software updates on client devices through the Install required updates and fix vulnerabilities task.

You can do any of the following:

A user interaction may be required when you update a third-party application or fix a vulnerability in a third-party application on a managed device. For example, the user may be prompted to close the third-party application if it's currently open.

Installing updates by creating an installation task

You can do any of the following:

To install specific updates:

  1. In the AdvancedApplication management folder in the console tree, select the Software updates subfolder.
  2. In the workspace, select the updates that you want to install.
  3. Do any of the following:
    • Right-click one of the selected updates in the list, and then select Install updateNew task.
    • Click the Install update (create task) link in the information box for the selected updates.
  4. Make your choice in the displayed prompt about installing all previous application updates. Click Yes if you agree to the installation of successive application versions incrementally if this is required for installing the selected updates. Click No if you want to update applications in a straightforward fashion, without installing successive versions. If installing the selected updates is not possible without installing previous versions of applications, the updating of the application fails.

    The Updates Installation and Vulnerabilities Fix Task Creation Wizard starts. Proceed through the Wizard by using the Next button.

  5. On the Selecting an operating system restart option page of the Wizard, select the action to perform when the operating system on client devices must be restarted after the operation:
    • Do not restart the device
    • Restart the device
    • Prompt user for action
      • Repeat prompt every (min)
      • Restart after (min)
    • Force closure of applications in blocked sessions
  6. On the Configure task schedule page of the Wizard, you can create a schedule for task start. If necessary, specify the following settings:
    • Scheduled start:
      • Every N hours
      • Every N days
      • Every N weeks
      • Every N minutes
      • Daily (daylight saving is not supported)
      • Weekly
      • By days of week
      • Monthly
      • Manually (selected by default)
      • Every month on specified days of selected weeks
      • On virus outbreak
      • On completing another task
    • Run missed tasks
    • Use automatically randomized delay for task starts
    • Use randomized delay for task starts within an interval of (min)
  7. On the Define the task name page of the Wizard, specify the name for the task that you are creating. A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
  8. On the Finish task creation page of the Wizard, click the Finish button to close the Wizard.

    If you want the task to start as soon as the Wizard finishes, select the Run the task after the Wizard finishes check box.

After the Wizard completes its operation, Install required updates and fix vulnerabilities appears in the Tasks folder.

You can enable automatic installation of system components (prerequisites) prior to installation of an update in the Install required updates and fix vulnerabilities task properties. When this option is enabled, all required system components are installed before the update. A list of the required components can be found in properties of the update.

In the properties of Install required updates and fix vulnerabilities task, you can allow installation of updates that upgrade application to a new version.

If the task settings provide rules for installation of third-party updates, the Administration Server downloads all relevant updates from their vendors' websites. Updates are saved to the Administration Server repository and then distributed and installed on devices where they are applicable.

If the task settings provide rules for installation of Microsoft updates and the Administration Server acts as a WSUS server, the Administration Server downloads all relevant updates to the repository and then distributes them to managed devices. If the network does not use a WSUS server, each client device downloads Microsoft updates from external servers independently.

To install a certain update and similar ones:

  1. In the AdvancedApplication management folder in the console tree, select the Software updates subfolder.
  2. In the workspace, select the update that you want to install.
  3. Click the Run Update Installation Wizard button.

    The Update Installation Wizard starts.

    The Update Installation Wizard features are only available under the Vulnerability and Patch Management license.

    Proceed through the Wizard by using the Next button.

  4. On the Search for existing update installation tasks page, specify the following settings:
    • Search for tasks that install this update
    • Approve update installation
  5. If you choose to search for existing update installation tasks and if the search retrieves some tasks, you can view properties of these tasks or start them manually. No further actions are required.

    Otherwise, click the Create an update installation task button.

  6. Select the type of the installation rule to be added to the new task, and then click the Finish button.
  7. Make your choice in the displayed prompt about installing all previous application updates. Click Yes if you agree to the installation of successive application versions incrementally if this is required for installing the selected updates. Click No if you want to update applications in a straightforward fashion, without installing successive versions. If installing the selected updates is not possible without installing previous versions of applications, the updating of the application fails.

    The Updates Installation and Vulnerabilities Fix Task Creation Wizard starts. Proceed through the Wizard by using the Next button.

  8. On the Selecting an operating system restart option page of the Wizard, select the action to perform when the operating system on client devices must be restarted after the operation:
    • Do not restart the device
    • Restart the device
    • Prompt user for action
      • Repeat prompt every (min)
      • Restart after (min)
    • Force closure of applications in blocked sessions
  9. On the Select devices to which the task will be assigned page of the Wizard, select one of the following options:
    • Select networked devices detected by Administration Server
    • Specify device addresses manually or import addresses from list
    • Assign task to a device selection
    • Assign task to an administration group
  10. On the Configure task schedule page of the Wizard, you can create a schedule for task start. If necessary, specify the following settings:
    • Scheduled start:
      • Every N hours
      • Every N days
      • Every N weeks
      • Every N minutes
      • Daily (daylight saving is not supported)
      • Weekly
      • By days of week
      • Monthly
      • Manually (selected by default)
      • Every month on specified days of selected weeks
      • On virus outbreak
      • On completing another task
    • Run missed tasks
    • Use randomized delay for task starts within an interval of (min)
    • Use randomized delay for task starts within an interval of (min)
  11. On the Define the task name page of the Wizard, specify the name for the task that you are creating. A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
  12. On the Finish task creation page of the Wizard, click the Finish button to close the Wizard.

    If you want the task to start as soon as the Wizard finishes, select the Run the task after the Wizard finishes check box.

When the Wizard finishes, the Install required updates and fix vulnerabilities task is created and displayed in the Tasks folder.

In addition to the settings that you specify during task creation, you can change other properties of a created task.

Upgrading to a new version of the application may cause a malfunction of dependent applications on devices.

Installing an update by adding a rule to an existing installation task

To install an update by adding a rule to an existing installation task:

  1. In the AdvancedApplication management folder in the console tree, select the Software updates subfolder.
  2. In the workspace, select the update that you want to install.
  3. Click the Run Update Installation Wizard button.

    The Update Installation Wizard starts.

    The Update Installation Wizard features are only available under the Vulnerability and Patch Management license.

    Proceed through the Wizard by using the Next button.

  4. On the Search for existing update installation tasks page, specify the following settings:
    • Search for tasks that install this update
    • Approve update installation
  5. If you choose to search for existing update installation tasks and if the search retrieves some tasks, you can view properties of these tasks or start them manually. No further actions are required.

    Otherwise, click the Add an update installation rule button.

  6. Select the task to which you want to add a rule, and then click the Add rule button.

    Also, you can view properties of the existing tasks, start them manually, or create a new task.

  7. Select the type of the rule to be added to the selected task, and then click the Finish button.
  8. Make your choice in the displayed prompt about installing all previous application updates. Click Yes if you agree to the installation of successive application versions incrementally if this is required for installing the selected updates. Click No if you want to update applications in a straightforward fashion, without installing successive versions. If installing the selected updates is not possible without installing previous versions of applications, the updating of the application fails.

A new rule for installing the update is added to the existing Install required updates and fix vulnerabilities task.

Configuring a test installation of updates

To configure a test installation of updates:

  1. In the console tree, select the Install required updates and fix vulnerabilities task in the Managed devices folder on the Tasks tab.
  2. In the context menu of the task, select Properties.

    The properties window of the Install required updates and fix vulnerabilities task opens.

  3. In the properties window of the task, in the Test installation section select one of the available options for test installation:
    • Do not scan. Select this option if you do not want to perform a test installation of updates.
    • Run scan on selected devices. Select this option if you want to test updates installation on selected devices. Click the Add button and select devices on which you need to perform test installation of updates.
    • Run scan on devices in the specified group. Select this option if you want to test updates installation on a group of devices. In the Specify a test group field, specify a group of devices on which you want to perform a test installation.
    • Run scan on specified percentage of devices. Select this option if you want to test updates installation on some portion of devices. In the Percentage of test devices out of all target devices field, specify the percentage of devices on which you want to perform a test installation of updates.
  4. Upon selecting any option except Do not scan, in the Time to take the decision if the installation is to be continued (h) field specify the number of hours that must elapse from the test installation of updates until the start of installation of the updates on all devices.

See also:

Scenario: Updating third-party software

Page top