Skip to content

# Patch Management

## Operating System Requirements for the Patch Server

- Microsoft Windows 10 (64-bit) and above
- Microsoft Windows Server 2012 R2(64-bit) and above

> Note: The Patch Management Server or Client is not supported on Windows Home Edition.

## Patch Management Prerequisites

Hardware Recommendation for Patch Synchronization (All Product Filters)
A dedicated physical machine is recommended to host the patch synchronization process, possessing at least:

- 8â€¯GB RAM (to comfortably handle metadata processing, caching, and filter logic)
- Minimum 500â€¯GB disk space (to store downloaded patch binaries, metadata, and local caches)
- A stable, high-throughput network connection (to reliably sync large patch volumes)

Offline Patch Repository Recommendation

- Disk / Storage: 1â€¯TB : To host the full offline patch repository, with room for multiple product lines, version retention, rollback archives, and buffer space.

NETWORK PRE-REQUISITES â€“ COMMUNICATION PORTS FOR SEQRITE EPS CLOUD

Below ports need to be allowed on the Intranet for UEM client & server communication:

Ports to be whitelisted:

- Port No. 80

- Port No. 443

Seqrite EPS Cloud Links to be whitelisted:

- account.seqrite.com

- msspcloud.seqrite.com

- uemcloud.seqrite.com

- apiuemcloud.seqrite.com

For update and build download, the following links should be allowed:

- download.quickheal.com

- dlupdate.quickheal.com

For Cloud-based Security Features, the following URLs need to be allowed:

- http://prourl.itsecure.co.in:8080

- http://encurl.itsecure.co.in:8080

- http://prourl.itonlinesecure.in:8080

- http://encurl.itonlinesecure.in:8080

- http://ocsp.digicert.com

- http://cacerts.digicert.com

- http://crl3.digicert.com

- http://crl4.digicert.com

- http://klassify.itonlinesecure.in:8080/Seqrite Endpoint Security for Mac Platform-Index.dat

Additional URLs for Communication:

- Seqrite EPS Cloud Client-Server Communication Article

- Seqrite EPS Patch Management Documentation

Microsoft Update URLs:

- http://windowsupdate.microsoft.com

- http://download.windowsupdate.com

- https://download.microsoft.com

- http://wustat.windows.com

- http://ntservicepack.microsoft.com

- http://go.microsoft.com

- http://dl.delivery.mp.microsoft.com

Google Chrome updates:

https://patsrv.itonlinesecure.in

## Installing Patch Management Server

To begin installation of Patch Management server, follow these steps:

1. For 64-Bit Windows OS, download the setup from one of the following links:
   https://dlupdate.quickheal.com/builds/seqrite/uemcp/pms/en/pmsetup64.msi
   https://download.quickheal.com/builds/seqrite/uemcp/pms/en/pmsetup64.msi
2. Launch the setup on machine within the network where you want to install the Seqrite patch server.The Seqrite Patch Management Server Setup Wizard screen appears.
3. On the Patch Management Server Setup Wizard, click Next.The license agreement appears. Read the License Agreement carefully.
4. Select the I Agree check box to accept the license agreement and then click Next.
5. Click Browse if you want to install Patch Management server on a different location. To proceed with the installation default path, click Next.
6. The Patch Database Settings screen appears. The patch content storage folder path appears. Click Browse if you want to change the patch content storage path.
7. Select the Import Patch Server Data check box if you want to change the default location. Click Browse to locate the path.
8. Click Next.
9. The Proxy Settings screen appears. To enable and configure proxy settings, do the following:
   i. Select the Enable Proxy Settings check box.
   ii. In the Proxy Server text box, type the IP address of the proxy server or domain name (For example, proxy.yourcompany.com).
   iii. In Port text box, type the port number of the proxy server (For example: 80).
   iv. Select the Enable Authentication (If any) check box.
   v. In the User name and Password fields, type in your server credentials.
   vi. Click Next.
10. The Pre-requisite â€“ MySQL 8.3.0 Location screen appears.
    You need to provide a path for MySQL 8.3.0 setup (x64) file.
    If you do not have MySQL 8.3.0 setup file, download from the given link and provide the path.
11. Click Next. The file will be verified.
12. The MySQL Configuration Setting screen appears.

    1. Enter Communication Port number.
    2. Enter password for MySQL â€˜Rootâ€™ user. In the Confirm password text box, retype the password.
    3. Click Next.
13. In the Upstream Patch Server screen, select one of the following:

    - Microsoft: The upstream patch server used is Microsoft patch server. This option is selected by default.
    - Organization Patch Server (WSUS): The upstream patch server used is Organization Patch server (WSUS â€“ Windows Server Update Service). If you select this option, type in WSUS server URL.

    > Note:
    > In the case of an air-gapped network, users should opt for an offline repository setup.

14. Click Next.
15. On the Website Configuration screen:

    - Click the Public IP/FQDN radio button. Enter the valid Public IP/FQDN.
    - In the SSL Port text box, enter the SSL port number. This port number will serve as a listening port for the server.
16. Click Next.
17. On confirmation prompt, click Yes
18. The installation summary screen appears. You can change your settings if required by clicking Back. Click Install. The installation starts.
19. To complete the installation, click Finish.

    > Note: If installation/uninstallation is failed, then only the View installation log check box is displayed. To view the log, select the View installation log check box.

20. After the installation is complete, add Seqrite patch server through EPP console and then it becomes available to use.

    > Note: The Patch Management feature is applicable only for the clients with Microsoft Windows OS; does not support Mac, and Linux operating systems.

    > Note:Install Microsoft .NET Framework 4.8 on the patch server system if it is not available by default.

    > Note:Install KB5017398 and KB2919355 (Server 2012 R2 Update), along with .NET Framework 4.8 on the Windows Server 2012 OS. After installation, restart the machine and proceed with deploying the patch server.

### Back up the Patch Server Data

You can back up the patch database and patch content of the patch server.

To back up the patch Server data, follow these steps:

1. Manually back up all the files and folders present in the /Seqrite patch management/patch server/content folder.
2. Select Start > Programs > Seqrite Patch server Data Backup.
   The Backup wizard starts.
3. Click Browse to specify the path where you want to back up patch database.
4. Click Backup.

The database file, pmdb.exp is generated. This file can be used to restore patch server data base.

### Uninstalling Patch Server

If you need to uninstall the patch server, follow these steps:

1. Go to Start > Programs > Uninstall patch server.
   The uninstaller wizard starts.
2. Complete the wizard to uninstall the patch server.

### Adding a patch server

Prerequisite
If you are adding the patch server by Hostname, you need to add the hostname and IP address, manually in the ‘hosts’ file located in the operating systems ‘etc’ folder.

To add a patch server, follow these steps.

1. Go to Computer > Configurations > Patch management.
2. Click the Patch Server Installer button to download the setup file.
3. Follow the steps displayed on the UI to proceed.
4. Click Add Patch Server. The Add Patch Server dialog appears.
5. Enter the patch server name for the patch.
6. Enter the patch server IP/ Hostname.
7. Enter the port SSL Port number. By default 6201 appears.
8. Enter the Seqrite Endpoint Protection server IP/Hostname.
9. After entering these details, click Add.

The new patch server is added now and appears on the Patch Management page.

You can add multiple Patch Servers.
If multiple patch servers are added, you can sort the list as per Patch Server Name, Patch Server IP/Hostname, and Status.

### Editing the patch server

To edit a patch server, follow these steps.

1. Go to Computer > Configurations > Patch Management. Existing patch servers are listed.
2. Click the Edit icon of the patch server that you want to edit.
3. The patch server details appear. In Patch Synchronization and Configuration tab, you can view previous patch synchronization status with time stamp.
4. Here you can edit the SSL port number. Also, you can edit the Patch Synchronization details, as required.
5. By default, the Upstream Server is Microsoft Patch Server. You can change the Upstream Patch Server if required. If you select the option Local Seqrite Patch Server, select the server from the list.
6. In Internet Settings tab, change proxy settings if required.
7. Click Save.

### Schedule Patch Synchronization

1. Select the Enable Schedule Patch Synchronization check box.
2. Select the Frequency of patch synchronization, either Weekly or Monthly.
3. Select Weekday from the list to run patch synchronization.
4. Select the time to run patch synchronization by selecting hours and minutes in the Start At list.
5. Click Apply Filters to specify filters for patch synchronization.
6. Click Start sync to run patch synchronization instantly.
7. You can click Stop sync to stop patch synchronization if it is running. A notification is sent to the patch management server.

> Note:We provide support for WSUS Server version 2019 to ensure reliable patch synchronization.

### Applying filters

If you select the Parent patch server as Microsoft, then only these filters are applicable.

If you select the Parent patch server as WSUS, all metadata available on WSUS is synchronized. Microsoft filters are not applicable.

If you select the Upstream Patch Server as Local Seqrite Patch Server, then filters enabled on the selected server are applicable.

To apply filters, follow these steps.

1. If you want to apply filters for downloading and synchronizing the patches, click Apply Filters. The Filters dialog appears.
2. In Categories accordion, click + to expand. Either you can select the All Categories check box to select all categories to be synchronized for Microsoft applications or select the type of patches from the list, as required.
3. In Languages accordion, click + to expand. Here you can select the languages for the patches for Microsoft applications. Select one of the following options.

- Download patches in all languages
- Download patches in the following selected languages â€“ If you select this option, select the languages from the list.

4. In Products accordion, click + to expand.
   Here you can select the products for which you want to receive the patches. Either you select All products or select products as required from the list.
5. Click Apply.

The patch settings are updated.
Patch Management supports the following applications along with Microsoft applications,

- Adobe
- VideoLAN
- Adobe Systems, Inc.
- Microsoft
- PuTTY
- Notepad++, Inc.
- Oracle Corp.
- 7-Zip
- Mozilla Foundation
- Google Chrome

### Patch Synchronization

To start patch synchronization, follow these steps.

1. Go to Patch Server Task Scheduler>Task Scheduler Library.
2. Run Seqrite Schedule Patch Sync to trigger on demand Patch Sync.
   When the patch synchronization is complete as per applied filters, patch synchronization status is shown as Successful with timestamp.

When the patch synchronization is failed as per applied filters, patch synchronization status is shown as Failed with timestamp.

### Deleting the patch server

To delete a patch server, follow these steps.

1. Go to Computer > Configurations > Patch Management. Existing patch servers are listed.
2. Click the Trash icon of the patch server that you want to edit.
3. Click Yes on the confirmation dialog box. The patch server is deleted.

> Note:Patch Server logs are enabled to assist in troubleshooting issues related to patch scanning and patch installation.
> Log Location: Seqrite\Seqtite\Logs

Was this page helpful?
Yes No
Scroll back to top