Top
Systemwalker Software Configuration Manager Operation Guide
FUJITSU Software

2.5.1 Setting up Patch Management Policies for Windows Operating Systems and Fujitsu Middleware

The patch management policies for Windows operating systems and Fujitsu middleware are set up when Systemwalker Software Configuration Manager is set up. To change this policy, edit the patch management policy definition file.

Refer to the Reference Guide for information on the patch management policy definition file.

[Windows]

<Systemwalker Software Configuration Manager installation directory>\SWCFMGM\config\patch_management_policy.xml

[Linux]

/opt/FJSVswcfmg/config/patch_management_policy.xml

Setting up the patch management policy for Windows operating systems

This section explains how to set up the patch management policy for Windows operating systems.

Setting up the patch management policy allows infrastructure administrators to set the patch types (the classification of updates, which represent the WSUS update program types) for application status monitoring, as well as the patch types to be applied to all servers without fail.

This enables tenant users to distinguish which patches are mandatory and which patches are optional when they apply patches.

Item

Description

Classification level specification for the updates for WSUS

Specify the classification level for the update programs acquired from WSUS.
Classification levels classify the importance of a patch in terms of patch management by Systemwalker Software Configuration Manager, and can be specified as either "Required" or "Recommended" for each classification of update.

The classification levels are as follows:

  • "Required": A patch that must be applied uniformly to all servers according to the decision that the infrastructure administrator has made

  • "Recommended": A patch recommended for application by the infrastructure administrator that can be canceled by a tenant user if they determine it will affect business activities.

"Required" or "Recommended" can be specified for each classification of update.

By default, the classification levels are as follows:

[Required]

  • Security Updates

  • Critical Updates

[Recommended]

  • Feature Packs

  • Service Packs

  • Tools

  • Drivers

  • Updates

  • Update Rollups

  • Definition Updates

Setting up the patch management policy for Fujitsu middleware

This section explains how to set up the patch management policy for Fujitsu middleware.

Setting up the patch management policy allows infrastructure administrators to set which types of patches they want to classify.

This enables tenant users to distinguish which patches should be applied based on their importance when they apply patches.

The infrastructure administrator sets up the following item in the property file during installation. This item can be changed even during operations.

Item

Description

Classification level specification based on the importance level of update files

Specify the classification level based on the importance level that has been set in the update file:

The classification levels are as follows:

  • "Required" (patches that must be applied)

  • "Recommended" (patches for which application is recommended)

Set either "Required" or "Recommended" for each individual importance level for update files.

By default, the classification levels are as follows:

[Required]

  • Security

  • Important

[Recommended]

  • Recommended