Home > Success Center > Patch Manager > Patch Manager 2.1.4 Administrator Guide > Configuring Patch Manager > Configuring Clients from the Patch Manager Console

Configuring Clients from the Patch Manager Console

Created by Caroline Juszczak, last modified by MindTouch on Jun 23, 2016

Views: 258 Votes: 0 Revisions: 5

Provided you have already provisioned your managed clients with the SolarWinds WMI Providers, use the following tasks in the Patch Manager console to configure those clients to receive third-party updates from Patch Manager:

Client Certificate Management

Use the Client Certificate Management task, also known as the Client Publishing Setup Wizard, to distribute and install the WSUS self-signed publishing certificate to managed clients.

To complete the Client Certificate Management task:

  1. In the left pane of the Patch Manager console, select Administration and Reporting.
  2. In the center pane, click Client Certificate Management.
  3. On the Client Certificate Management window, specify the WSUS publishing certificate to distribute:
    1. Select Distribute and install Update Services Signing Certificate.
    2. If you want to distribute the certificate directly from the WSUS server, select Select certificate from WSUS server, and then select the WSUS server from the active menu.
    3. If you want to distribute the certificate from a .CER file, select Select certificate from file, and then click [...] to browse to the file location.​
  4. If the managed clients require SSL for remote connections:
    1. Select Distribute and install Update Services Server SSL Certificate.
    2. Next to the File Name field, click [...] to browse to the file location.
  5. Click Distribute.
  6. Complete the Task Options Wizard to specify the target systems and schedule and/or execute the task. For additional information, see "The Task Options Wizard".

After you complete this task, Patch Manager notifies you that you must configure Windows Update Group Policy on your managed clients to enable them to allow third-party updates from Patch Manager. The following section addresses this requirement using Local Policy. When possible, enable the requisite policy in Group Policy instead.

Windows Update Local Policy Management

Use the Windows Update Local Policy Management task to configure your managed clients to accept third-party updates from Patch Manager using Local Policy.

To complete the Windows Update Local Policy Management task:

  1. In the left pane of the Patch Manager console, select Administration and Reporting.
  2. In the center pane, click Windows Update Local Policy Management.
  3. On the Windows Update Local Policy Settings window, create a new local policy template for the managed clients:
    1. Click the check box next to Allow signed content from intranet Microsoft update service location twice so the value in the State column is Enabled.
    2. Modify any other policies you want to configure for the managed clients. Note: Changes made to Local Policy do not override any policies already enforced by Group Policy.
    3. Enter a name for the new template, and then click Save.
  4. Click OK.
  5. Complete the Task Options Wizard to specify the target systems and schedule and/or execute the task. For additional information, see "The Task Options Wizard".
You must to post a comment.
Last modified
07:08, 23 Jun 2016

Tags

Classifications

Public