Patch download status and settings:
- Go to Security | Patch Download Settings
- If the Organization component is enabled, it is necessary to be logged in at a System level and click on Settings > Patch Download Settings.
- At the top of the page, review the Downloaded and Last Download Attempt dates. Additionally, Signatures Status and Patch Files Status should be ‘Updated’.
- If the status indicates failure, please review the Patch Download Log located at Settings > Logs > Choose Patch Download Log from the drop-down.
NOTE: Common download issues can often be resolved by verifying the ports and URLs located in: Which network ports and URLs are required for the KACE SMA to function?
Patch subscription settings:
- Log in to the SMA Adminui, http://SMA_hostname/adminui. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information.
- On the left navigation bar, click Security.
- On the Patch Management panel, click Subscriptions.
- The Patch Status section provides several details about the latest patch download and appliance disk space. Here you can also determine if newly downloaded patches should be marked as active or inactive by default.
NOTE: Activate New Patches - If this option is not selected, new patches are marked as Inactive. All patches downloaded while this option is not selected will remain inactive unless manually changed to active via the patch catalog regardless of patch subscription settings. Changing the status of Activate New Patches to enabled will only apply to all newly released patches and does not activate the previously downloaded patches.
- In the “Subscription” section of this page, check to ensure that all desired operating systems are included in the subscriptions (including architecture and service pack). All Windows/Mac in Inventory can also be selected so new OS that are released can get added automatically when a device is detected with a different OS.
NOTE: The patch catalog will display all patches, inactive or active, but only if they are part of the subscription settings. If a patch does not show in the catalog at all, it may be related to subscription settings. Disabled patches are viewable only when Detect Disabled Patches is enabled.
- Are the subscriptions limited to smart labels in the Advanced Options section? If so, make sure those labels do not restrict the patch based on search criteria.
Reviewing the patch catalog:
When reviewing the patch catalog for clues, the following should be considered:
- Is the patch supported for the SMA? Supported applications and operating systems for SMA patching
- There are two view filters “Show” and “View By” in the patch catalog. When attempting to locate a particular patch, it is recommended to try Show: Individual Patches – View By: All Patches.
- If the patch is available in the catalog, is it Superseded? If so, settings may be inactivating superseded patches.
- If the patch is available in the catalog, is it Active? If not, subscription settings may not include the patch or it may need to be manually activated.
- For more clues on the reasons for an Inactive status, click on the hyperlink for the patch name and scroll to the bottom to see the relevant Subscription setting.
- Does the size column show a size for the patch? Was it recently marked as active? Has another patch download completed successfully since the change?
- It's possible the patch may just not be listed in our feed because it has not yet been released yet by our patch provider. See: How soon after release will patches be available via the SMA
When to contact KACE support:
If there are additional questions or concerns after reviewing this article, please contact KACE Technical Support for assistance: https://support.quest.com/my-support
To expedite the request, please include the following:
Answers to the questions:
- Has it ever worked?
- If so when and what may have changed?
- When exactly did the problem start?
NOTE: It just might not be listed in our feed. If this is the case, we can make a request to our provider to have the patch added to our feed for download to yours and all SMA. Ask your support technician to have a request made to have it added to the feed.