Patch Download Process

Patch Download Process

Overview

Desktop Central supports patch management of a wide range of applications that included both Microsoft and other third-party applications. The required patches are downloaded only once and are stored in the Desktop Central Server from where they are distributed to the agents and distribution servers for installation.

Updating the Local Patch Database

The Online vulnerability Database is a portal in the ManageEngine site, which hosts the latest vulnerability database that has been published after a thorough analysis. Whenever new patches are release by vendors, the patch assessment team will test these patches and update their online patch database. Desktop Central's patch engine will periodically synchronize this information and update its local database. This information is used to detect the missing patches in the computers in the network. Given below are the details of the files that are synchronized with their current sizes:

  • https://sync.patchquest.com/../../../mssecure.sql (3.1 MB)
  • https://sync.patchquest.com/../../../msnonsecure.sql (599.8 KB)
  • https://sync.patchquest.com/../../../tusecure.sql (62.7 KB)
  • https://sync.patchquest.com/../../../avsecure.sql (1.5 KB)
  • https://sync.patchquest.com/../../../product.sql (2.7 KB)

The file size will increase during every update, but may not be substantial. You should configure your proxy server to allow downloading the above files from "sync.patchquest.com" and "patchdb.manageengine.com"

Vendor Sites from where the Patches are Downloaded

Given below are the websites from where the patches gets downloaded. If you are using a proxy server, the proxy credentials specified in Desktop Central should have necessary privileges to download the EXE files from these sites.

  • http://download.microsoft.com - for Microsoft applications
  • http://hyperion.zih.tu-dresden.de - for Mozilla Firefox
  • http://ardownload.adobe.com  - for Adobe patches
  • http://mirror.switch.ch  - for Mozilla Thunderbird
  • http://fpdownload.macromedia.com  - for Adobe Shockwave Player
  • http://fpdownload.adobe.com  - for Adobe Flash Player
  • http://javadl.sun.com  - for Java updates

Local Patch Store

The patches are downloaded only once and they are stored in the Desktop Central Server. The default location where the patches gets stored is <Desktop_Central_Server_Home>/webapps/DesktopCentral/store and is configurable. However, you need to copy the previously downloaded patches to the new location manually, else the patches will get downloaded to the new location again.

You can change the local patch store to a different location using the "Change Patch Store Directory" link available in the Downloaded Patches view.

When the Patches are Downloaded

Patch download happens in the following cases:

  1. Whenever a Patch Configuration is deployed.
  2. If you have enabled Automated Patch Deployment.
  3. When you manually download a patch by clicking the Download Patches button.

In all the three cases above, the Patch Engine will first look for the availability of the patch in the local patch store. The download will happen only if a patch is not available in the local store.

Downloading a Patch Manually

If you experience any problem with the atomatic patch download in some specific cases, you can also download them manually and store it in the local patch store. The downloaded patches should be renamed to <PatchID>-<PatchName> format. Both the Patch ID and Patch Name can be seen from the Missing Patches view in Desktop Central. For example, if the Patch ID is 300088 and the Patch Name is "Thunderbird Setup 3.1.1.exe", you should download and save this file as 300088-Thunderbird Setup 3.1.1.exe in the local patch store.

Remote Desktop & Mobile Device Management Software for MSPs trusted by