Installation guide

The Not Patched column displays machines that require a patch or a reboot for an applied patch.
From the Summary view, you can navigate to the affected managed machines.
What to do next
Deploy patches. See "Deploy Patches to Windows Machines" on page 155.
Deploy Patches to Windows Machines
You can deploy patches to Windows machines that are managed by VCM. These machines appear in the
Licensed Machines node in VCM Administration Machines Manager.
IMPORTANT If a failure occurs at any time during the patch deployment job, the System Administrator
must check the status of the system, resolve any issues, then reassess the managed machines. In a job
chain, a failure in any step of the job breaks the job chain, which causes all subsequent job steps to not run.
Prerequisites
n
Follow the patching guidelines. See "Prerequisite Tasks and Requirements" on page 138.
n
Before you patch Windows 2008 servers and Windows 7 machines, verify that the Windows Update
service is running, which means that it is set to something other than Disabled.
Procedure
1. Click Patching.
2. Select Windows > Assessment Templates and select the template used for the assessment.
3. Make sure that the data grid view is visible so that you can view the managed machines and bulletins.
4. Locate the rows that display the StatusNotPatched status.
To identify the managed machines that must be patched, drag a column header up to the Column
Grouping area to group the Patch Status column.
5. Highlight the row that contains the managed machine to be patched and click Deploy.
With VCM Service Desk Integration installed, the Service Desk Connector dialog box appears before
the VCM patching Deploy wizard. VCM Orchestrator must approve the deployment job before it can
run.
6. (Optional) Select additional machine and patch combinations to include.
7. Select the managed machines and patches to deploy and click Next.
To detect the patch, the Deploy wizard checks the Collector first, and uses the downloaded patch, if
found. If patches are not found, the Deploy wizard attempts to locate the patch on the Internet.
If the patch is found on the Internet, you can download the patch immediately or at run time.
If access to the Internet is denied, you must obtain the patches manually and store them in
\\collector_name\cmfiles$\SUM Downloads on the VCM Collector.
8. If you selected multiple patches to deploy, confirm the order in which to deploy the patches or reorder
them, and click Next.
9. On the Switches page, do not select any switches for the installation, and click Next.
10. On the Patch Staging and Deployment Schedule page, select to copy the patches to the VCM managed
machine during deployment, select to run the deployment immediately or schedule it to run later, and
click Next.
Patching Managed Machines
VMware, Inc.
155