5.6

Deploy Patches to Windows Machines
Deploy patches to Windows machines that are managed by VCM Patching. These machines appear in the
Licensed Machines node. Click Administration and select Machines Manager > Licensed Machines.
IMPORTANT If a failure occurs at any point in the patch deployment job, the System Administrator must
check the status of the system, resolve any issues, and then reassess the machines.
Prerequisites
n
Follow the guidelines. See "Prerequisites for Patch Deployment" on page 159.
n
Verify that the Windows Update service is running (set to something other than Disabled) before you
patch Windows 2008 servers and Windows 7 machines.
Procedure
1. Click Patching.
2. Select Windows > Assessment Templates and select the template used for the assessment.
3. Make sure the data grid view is visible so that you can view the machines and bulletins.
4. Locate the rows that display the StatusNotPatched status.
To identify the machines that must be patched, group the Patch Status column.
5. Highlight the row that contains the machine to be patched and select Deploy.
With VCM Service Desk Integration installed, the Service Desk Connector dialog box appears before
the VCM Patching Deploy wizard. VCM Orchestrator must approve the deployment job before it can
run.
6. (Optional) Select additional machine and patch combinations to include.
7. Select the machines and patches to deploy and click Next.
To detect the patch, the Deploy checks the Collector first, and uses the downloaded patch, if found. If
patches are not found, the Deploy wizard attempts to locate the patch on the Internet.
If the patch is found on the Internet, you can choose to download the patch immediately or at run
time.
If access to the Internet is denied, you must obtain the patches manually and store them in
\\collector_name\cmfiles$\SUM Downloads on the Collector.
8. If you selected multiple patches to deploy, confirm the order to deploy the patches or reorder them,
and click Next.
9. On the Switches page, do not select any switches for the installatio, and click Next.
10. On the Patch Staging and Deployment Schedule page, select to copy the patches to the VCM Patching
machine during deployment.
11. Select to run the deployment immediately or schedule it to run later, and click Next.
12. Click Next to either schedule the deploy job or to instruct VCM Patching to execute the job
immediately.
13. On the Reboot Options page, select to not reboot the machine and click Next.
14. On the confirmation page, click Finish to deploy the patch.
When the deployment completes, VCM Patching runs a delta collection of the VCM Patching Security
Bulletins filter set to update the assessment information.
Patching Managed Machines
VMware, Inc.
163