2.6 Patch Management Policy Definition File

File Name

patch_management_policy.xml

Description

This file specifies the following information for patch management by Systemwalker Software Configuration Manager.

Classification levels for managing Windows patches
Classification levels for managing Fujitsu middleware patches

Windows patches

This file sets the classification levels for the updates provided by WSUS.

Classification levels classify the importance of a patch in terms of patch management by Systemwalker Software Configuration Manager, and can be specified as either "Required" or "Recommended" for each classification.

Required: A patch that must be applied uniformly to all servers according to the decision that the infrastructure administrator has made
Recommended: A patch that the infrastructure administrator recommends applying, but for which a tenant administrator or tenant user can cancel the application if they judge that it may affect business activities

The following table shows the different types of classifications for WSUS, and the default classification level for each type.

Classification of updates	Classification level
Security Updates	Required
Critical Updates	Required
Feature Packs	Recommended
Service Packs	Recommended
Tools	Recommended
Drivers	Recommended
Updates	Recommended
Update Rollups	Recommended
Definition Updates	Recommended

Fujitsu middleware patches

This file sets the classification levels for the update files downloaded from the UpdateSite.

Required: A patch that must be applied uniformly to the target servers according to the decision that the infrastructure administrator has made
Recommended: A patch that the infrastructure administrator recommends applying, but for which a tenant administrator or tenant user can cancel the application if they judge that it may affect business activities

The following table shows the different types of update files for Fujitsu middleware, and the default classification level for each type.

Importance of update files	Classification level
Important	Required
Security	Required
Recommended	Recommended

File Location

[Windows]

<Systemwalker Software Configuration Manager installation directory>\SWCFMGM\config

[Linux]

/etc/opt/FJSVcfmgm/config

File Format

<?xml version="1.0" encoding="UTF-8"?>
<policies>
  <RepositoryServer>
    <WSUS>
      <SecurityUpdate>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </SecurityUpdate>
      <CriticalUpdate>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </CriticalUpdate>
      <FeaturePack>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </FeaturePack>
      <ServicePack>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </ServicePack>
      <Tool>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </Tool>
      <Driver>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </Driver>
      <Update>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </Update>
      <UpdateRollup>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </UpdateRollup>
      <DefinitionUpdate>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </DefinitionUpdate>
    </WSUS>
    <CFMGServer/>
    <FJMW>
      <Security>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </Security>
      <Important>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </Important>
      < Recommended/>
        <entry key="applyLevel">[<Patch classification level>]</entry>
      </ Recommended>
    </FJMW>
  </CFMGServer></policies>

Parameters

The contents of each tag and key are as follows:

Tag		Meaning	Value	Remarks
Policies		This tag contains policy information.	-	This tag is required.
RepositoryServer		This tag contains repository server information.	-	This tag is required.
WSUS		This tag contains WSUS information.	-	This tag is required.
	SecurityUpdate	This tag contains information about Security Updates.	-	This tag is required.
	CriticalUpdate	This tag contains information about Critical Updates.	-	This tag is required.
	ServicePack	This tag contains information about Service Packs.	-	This tag is required.
	FeaturePack	This tag contains information about Feature packs.	-	This tag is required.
	Tool	This tag contains information about Tools.	-	This tag is required.
	Driver	This tag contains information about Drivers.	-	This tag is required.
	Update	This tag contains information about Updates.	-	This tag is required.
	UpdateRollup	This tag contains information about Update Rollups.	-	This tag is required.
	DefinitionUpdate	This tag contains information about Definition Updates.	-	This tag is required.
CFMGManager		This tag contains information about the Systemwalker Software Configuration Manager admin server.	-	This tag is required.
FJMW		This tag contains information about Fujitsu middleware.	-	This tag is required.
	Security	This tag contains information about a "security" patch.	-	This tag is required.
	Important	This tag contains information about an "important" patch.	-	This tag is required.
	Recommended	This tag contains information about a feature pack.	-	This tag is required.

Key	Meaning	Value	Default value	Remarks
applyLevel	This key specifies a classification level for a patch.	1: Required 2: Recommended	2

Key

Meaning

Value

Default value

Remarks

applyLevel

This key specifies a classification level for a patch.

1: Required

2: Recommended

Cautions

Use UTF-8 as the character encoding for the file.
Changes to the definition are applied next time Systemwalker Software Configuration Manager is started.

Example

<?xml version="1.0" encoding="UTF-8"?>
<policies>
  <RepositoryServer>
    <WSUS>
      <SecurityUpdate>
        <entry key="applyLevel">1</entry>
      </SecurityUpdate>
      <CriticalUpdate>
        <entry key="applyLevel">1</entry>
      </CriticalUpdate>
      <FeaturePack>
        <entry key="applyLevel">2</entry>
      </FeaturePack>
      <ServicePack>
        <entry key="applyLevel">2</entry>
      </ServicePack>
      <Tool>
        <entry key="applyLevel">2</entry>
      </Tool>
      <Driver>
        <entry key="applyLevel">2</entry>
      </Driver>
      <Update>
        <entry key="applyLevel">2</entry>
      </Update>
      <UpdateRollup>
        <entry key="applyLevel">2</entry>
      </UpdateRollup>
      <DefinitionUpdate>
        <entry key="applyLevel">2</entry>
      </DefinitionUpdate>
    </WSUS>
  </RepositoryServer>
  <CFMGManager/>
    <FJMW>
      <Security>
        <entry key="applyLevel">1</entry>
      </Security>
      <Important>
        <entry key="applyLevel">1</entry>
      </Important>
      <Recommended/>
        <entry key="applyLevel">2</entry>
      </Recommended>
    </FJMW>
  </CFMGManager>
</policies>