Patch Management Service

Introduction

The Patch Management service is responsible for synchronizing the WSUS server with the CMS database. This includes Products, Categories, and Updates collected from the WSUS server.

The service is also responsible for the communication between the CapaInstaller console and the WSUS server.

General 

This tab resembles the property page for the service found in the services of the control panel. Each of the settings available in each tab of this dialog is described below.

image-20241023-082606.png

Element

Description

Service status

Status of the Synchronization service. Equivalent to services in the control panel.

Service Name

The name of the service used by the operating system.

Display name

The name you will see in services in the control panel.

Description

Description of the service.

Startup type

The type of service. This can be either; automatic, manual, or disabled. The default value is automatic.

Last heartbeat

This is a timestamp for the last synchronization activity.

Path to executable

The full path to the program that is started by the service.

Dependencies

On the dependencies tab, you can define the service dependencies to other services

Database

On the database tab, you can change the authentication method to the SQL server.

Element

Description

SQL server

The SQL server that the CapaInstaller Synchronization Service connects to.

SQL database

The SQL database that holds the CapaInstaller Management Solution database.

Update

Clicking on this button the settings.xml is updated with the correct database information.

Use Windows authentication

Instructs the service to establish a database connection by identifying itself with the computer account.

Use SQL authentication

When this radio button is selected the service will connect to the database with the credentials in the user name and password fields.

User name

The user name used to connect to the database when SQL authentication is selected.

Password

The password that goes with the user name stated above.

Validate

If you are entering credentials for an SQL Authentication, then these credentials must be validated to ensure that the service can access

the SQL server correctly. This is done by clicking the 'Validate' button. A positive validation will (re) enable the OK button.

WSUS

On the WSUS tab, you can change the WSUS settings.

Element

Description

Internal URL

This URL is used to communicate with the service by the HTTP Agents inside the LAN.

Public URL

This URL is used to communicate with the service by the HTTP Agents when outside the organization

Ports

The default ports used by the WSUS server is 8530 for HTTP and 8531 for HTTPS

Moving the PM service

In earlier CI versions 5.x and earlier, it was possible to create a new PM service on another server, and then ‘move’ the configuration from the old PM instance to the new instance. A subsequent sync from the WSUS server would then fill in any possible ‘gaps’.

This approach has been discontinued. The way to ‘move the PM service is to delete the old service, and then to create a new one.

When deploying the new Patch Management Service, make sure that the checkbox: 'This server replaces another Patch Management Service' is checked. This will do a full synchronization of points, child points, and groups.

Therefore, the 'Move’ tab was removed.

Right-click on the patch management services brings the following possibilities:

Element

Description

Deploy Patch Management Service

Install a Patch Management Service.

Right-click on the patch management service brings the following possibilities:

Element

Description

Remove Patch Management Service

This will delete the Service with or without the log files.

 

Â