Windows Patch Management is one of the most heavily used features of TrueSight Server Automation (TSSA) and involves the interaction between TSSA, Ivanti Technologies (previously known as Shavlik) and the underling Microsoft Windows Operating System and patch.
The most common TSSA Windows Patch Management support cases we receive tend to fall into the one of the following categories:
- A Windows Patch is believed to be installed on a target server but is reported as missing by the TSSA Patch Analysis job.
- A Windows Patch is not installed on a target server but is not reported as missing by the TSSA Patch Analysis job.
- How to add new products to the list of filters available in a TSSA Windows Patch Catalog.
- TSSA Windows Patch Analysis issues related to target server reboots.
- How Microsoft Servicing Stack Updates (SSUs) can affect TSSA Windows Patch Analysis results.
- In May 2019, Windows Catalog Updates began failing due to changes in how Oracle JAVA patches are distributed.
The TSSA Customer Support team has been working on enhancing our knowledge base articles and video content in these areas and, in this month’s blog, we wanted to highlight the most useful, and frequently used, knowledge articles and videos for each of the problem categories listed above.
All of these issues are also discussed in the Connect with TrueSight - TSSA: Troubleshooting Best Practices for Windows Patching Webinar which was presented on May 12 2020 by Rohit Sharma. If you have not already viewed this webinar, it is 86 minutes and discusses all the most common TSSA Windows Patching support cases we encounter from Catalog Updates to Analysis to Deployment/Remediation.
1) False Positives – Windows patch is believed to be installed but reported as Missing by TSSA Patch Analysis
2) False Negatives – Windows patch is believed to be missing but is not reported as Missing by TSSA Patch Analysis
3) How to add additional products to the list of available filters in a TSSA Windows Patch Catalog
(This topic can also surface as a “No mappings were found for the selected product" warning when running a Windows Patch Catalog)
4) TSSA Windows Patch Analysis issues related to target server reboots
See also Newton Nyante's April 2020 blog posting specifically about how Pending Reboots can affect TSSA Windows Patch Analysis and Remediation.
5) How Microsoft Servicing Stack Updates (SSUs) can affect TSSA Windows Patch Analysis results
6) In May 2019, Windows Catalog Updates began failing due to changes in how Oracle JAVA patches are distributed.
Troubleshooting TSSA Windows Patch Analysis cases will often require downloading and running the Ivanti DPD Trace tool in order to gather more detailed information. Please see the following video which demonstrates how to download and run the Ivanti DPD Trace tool:
And Knowledge Article 000096560 which describes how to analyze the Trace.txt and shavlik_results.xml files generated by a TSSA Patch Analysis Job.
Finally, please make sure to subscribe to the TrueSight Automation Video Channel to find more useful videos and to be notified of new video content as it is published. If you are particularly interested in TSSA Windows Patch Management videos, we have a playlist specifically for this feature.