Patch Management Service
- Martin Gudme Søndergaard
- Torben Busk Sørensen
Introduction
The Patch Management service is responsible for synchronizing the WSUS server with the CMS database. This includes Products, Categories, and Updates collected from the WSUS server.
The service is also responsible for the communication between the CapaInstaller console and the WSUS server.
General
This tab resembles the property page for the service found in the services of the control panel. Each of the settings available in each tab of this dialog is described below.
Element | Description |
Service status | Status of the Synchronization service. Equivalent to services in the control panel. |
Service Name | The name of the service used by the operating system. |
Display name | The name you will see in services in the control panel. |
Description | Description of the service. |
Startup type | The type of service. This can be either; automatic, manual, or disabled. The default value is automatic. |
Last heartbeat | This is a timestamp for the last synchronization activity. |
Path to executable | The full path to the program that is started by the service. |
Dependencies
On the dependencies tab, you can define the service dependencies to other services
Database
On the database tab, you can change the authentication method to the SQL server.
Element | Description |
SQL server | The SQL server that the CapaInstaller Synchronization Service connects to. |
SQL database | The SQL database that holds the CapaInstaller Management Solution database. |
Update | Clicking on this button the settings.xml is updated with the correct database information. |
Use Windows authentication | Instructs the service to establish a database connection by identifying itself with the computer account. |
Use SQL authentication | When this radio button is selected the service will connect to the database with the credentials in the user name and password fields. |
User name | The user name used to connect to the database when SQL authentication is selected. |
Password | The password that goes with the user name stated above. |
Validate | If you are entering credentials for an SQL Authentication, then these credentials must be validated to ensure that the service can access the SQL server correctly. This is done by clicking the 'Validate' button. A positive validation will (re) enable the OK button. |
WSUS
On the WSUS tab, you can change the WSUS settings.
Element | Description |
Internal URL | This URL is used to communicate with the service by the HTTP Agents inside the LAN. |
Public URL | This URL is used to communicate with the service by the HTTP Agents when outside the organization |
Ports | The default ports used by the WSUS server is 8530 for HTTP and 8531 for HTTPS |
Moving the PM service
In earlier CI versions 5.x and earlier, it was possible to create a new PM service on another server, and then ‘move’ the configuration from the old PM instance to the new instance. A subsequent sync from the WSUS server would then fill in any possible ‘gaps’.
This approach has been discontinued. The way to ‘move the PM service is to delete the old service, and then to create a new one.
When deploying the new Patch Management Service, make sure that the checkbox: 'This server replaces another Patch Management Service' is checked. This will do a full synchronization of points, child points, and groups.
Therefore, the 'Move’ tab was removed.
Right-click on the patch management services brings the following possibilities:
Element | Description |
Install a Patch Management Service. |
Right-click on the patch management service brings the following possibilities:
Element | Description |
This will delete the Service with or without the log files. |