Documentation forPatch Manager

Install Patch Manager in a stand-alone deployment

SolarWinds strongly recommends that you install the SolarWinds Platform on a server that is neither public, nor internet-facing. To learn about best practices for configuring your SolarWinds Platform installation securely, see Secure Configuration for the SolarWinds Platform.

These instructions describe how to install Patch Manager on a dedicated server with Windows Server Update Services (WSUS) enabled on a separate server.

See the Patch Manager Administrator Guide for advanced deployment scenarios and instructions for integrating Patch Manager with System Center Configuration Manager (SCCM).

To complete the installation:

  • Use the Local Administrator account to install the software. The domain account is subject to your domain group policies, which can block the installation tasks.
  • If you are installing Patch Manager using a remote SQL Server instance, run the installation file as an existing, fully-qualified domain account with sysadmin rights on the SQL Server database server.

Before you begin

  1. Review the pre-flight checklist.

    This checklist helps you:

    • Verify that system requirements are met, all required software is installed, and required roles and features are enabled.
    • Gather the information required to complete the installation.
  2. Prepare the Patch Manager server to ensure it is set up and configured for a Patch Manager deployment.

  3. Install the WSUS server on a separate server in your deployment running a supported Windows Server operating system. Record the host server name for use in a later step.

    You can also install the WSUS server after you complete the installation.

    See the Microsoft technical documentation website for instructions.

    See Requirements for a list of supported Windows Server operating systems.

  4. Select and configure the SQL database that meets your deployment requirements.

  5. Set up and configure the managed systems to receive updates from the WSUS server.

Download the installation files and license from the Customer Portal

  1. Go to the SolarWinds Customer Portal.
  2. Log in using the SolarWinds customer ID (SWID) and password issued to your organization.
  3. Click Downloads > Download Product.
  4. On the Product Downloads page, click the drop-down menus and select Patch Manager and the corresponding license.

  5. Under Patch Manager MMC Downloads, download the Patch Manager software.

    For a new installation, download the Patch Manager full package.

    To update your existing installation, download Patch Manager server and console upgrade package.

  6. Follow the prompts on the screen to complete the download.

  7. Run the installer.

    1. Double-click the installation package.
    2. Extract the contents of the downloaded installation ZIP file to your server.

    3. Double-click the installer.

      You may need to verify if the installation file is blocked. To check, right-click the file and select Properties. If required, click Unblock, and then click OK.

      The installer verifies that the required Microsoft .NET Framework version is installed on your server. If required, the installer downloads the software for you.

    4. If prompted, click Install to install Microsoft .NET Framework. Otherwise, go to the next step.

      Downloading and installing Microsoft .NET Framework can take more than 20 minutes. If your system reboots, run the installation again.

    5. Select the following options, and click Next:

      • Install the Patch Manager server components
      • Install the Patch Manager administration console

    6. If prompted, enter your email address in the SolarWinds Registration window, and then click Continue.

      This registration is for receiving product information from SolarWinds and is required to continue the SolarWinds Patch Manager installation.

      The installer extracts the files and initiates the Patch Manager Setup wizard.

Complete the Patch Manager Setup Wizard

  1. In the Welcome window, click Next.

  2. If you accept the terms of the license agreement, select the checkbox and click Next.

  3. Accept the default destination (recommended) or select another location, and click Next.

  4. Click Next to copy the program files to your system.

    This process may require several minutes to complete.

  5. When prompted, click Finish to exit the Setup Wizard and open the Configuration Wizard.

Complete the Patch Manager Configuration Wizard

  1. In the Configuration Wizard Welcome window, click Next.

  2. Select Primary Application Server as the server role, and click Next.

  3. Accept the default server settings, and click Next.

  4. Enter a password with local admin rights to the Patch Manager server. Record the password and machine name (for example, AUS-CLD-DPT-011) and store them in a secure location. This password is used to log in to the Patch Manager Console.

    If the SQL server is remote, enter the user name and password for your domain account.

  5. Click Next.

  6. Click the drop-down menu and select the SQL Server instance of the Patch Manager database. Click More info about SQL Server Editions for information about all available SQL Server options.

    If you choose SQL Server Express as your database, click this option link to download and install the software from the Microsoft Download Center.

  7. Select Use Windows Authentication to log in to the database or select Use SQL Server Authentication and enter the login and password credentials.

  8. Click Next.

  9. Select the account used to run the Patch Manager Service. If you decide to use a custom account, select this option and enter your user name and password.

  10. Click Next.

  11. If your Patch Manager deployment is not integrated with the SolarWinds Platform, deselect the Enable Web API checkbox and go to the next step.

    If your Patch Manager deployment is integrated with the SolarWinds Platform, set up the Web API to connect the Patch Manager Service with the Patch Manager Web Module on the SolarWinds Platform server.

    To set up the Web API with an HTTP connection: 

    1. Select the Enable API checkbox to enable the connection.

    2. Click the IP Address drop-down menu and select the IP address of the Primary Application Server.

    3. Select the Skip HTTP bonding checkbox to prevent any changes within the Web API. The configuration wizard will disable the IP address, port, and SSL certificate options.

    To set up the Web API with an HTTPS connection: 

    1. Select the Enable API checkbox to enable the connection.

    2. Click the IP Address drop-down menu and select the IP address of the Primary Application Server.

    3. Deselect the HTTP bonding checkbox.

    4. Select the Enable HTTPS checkbox to create a secure HTTPS connection and generate a self-signed certificate. The Port field changes to 54093, which provides a secure connection. The Generate Self-Signed Certificate field is now active. When you click Next, the wizard generates a self-signed certificate for signing connection packages.

      You will install the self-signed certificate in a later section.

  12. Click Next.

    The Configuration Wizard lists all items that will be configured for your installation. For example:

  13. Click Next to continue.

    The wizard configures your selections in the deployment and synchronizes your Patch Manager third party catalog.

    This process may take several minutes to complete.

  14. In the Success screen, select the checkbox to run the Patch Manager administration console after the wizard is finished.

  15. Click Finish to exit the Configuration Wizard and set up the Patch Manager Console.

Set up the Patch Manager Console

  1. After the console opens, select WSUS Extension Pack. If you plan to run SCCM in your deployment, select System Center Configuration Manager Extension Pack.

  2. Click Continue.

  3. In the Welcome to Patch Manager screen, click Cancel. You can return to this screen at a later time.

  4. In the Actions column, click Connect to an Application Server.

  5. In the Connect to Application Server window, review the connection information and make any changes as needed. Click Resolve to refresh the credentials.

  6. Click File > Exit.

  7. Log in to the Patch Manager Console.

    By default, the installer adds a shortcut to the desktop. You can also log in by clicking the Windows menu and selecting SolarWinds > SolarWinds Patch Manager Console.

  8. In the Welcome to Patch Manager screen, click Cancel. You can return to this screen at a later time.

  9. In the left navigation menu, expand Enterprise, right-click Update Services, and select Add or Modify WSUS Server.

  10. In the Server Name field, enter the name of the WSUS server.

  11. Click Resolve. The remaining fields auto complete.

    The default port is 8530 (HTTP) or 8531 (HTTPS). In the following example, the selected port is 8531. Make sure the selected port is correct for your configuration.

  12. Click Save.

    The WSUS server credentials are saved, and the WSUS server name displays in the navigation menu under Update Services.

Locate the Patch Manager database

  1. In the navigation menu, select Patch Manager System Configuration.

  2. In the Patch Manager System Tasks pane, double-click Database Information.

    The Database Information dialog box displays without the machine, database, and database instance names.