Share This:

Hello Everyone,

 

Windows Patch Management is one of the most heavily used features of TrueSight Server Automation (TSSA) and involves the interaction between TSSA, Ivanti Technologies (previously known as Shavlik) and the underling Microsoft Windows Operating System and patch.

 

The most common TSSA Windows Patch Management support cases we receive tend to fall into the one of the following categories:

 

  1. A Windows Patch is believed to be installed on a target server but is reported as missing by the TSSA Patch Analysis job.
  2. A Windows Patch is not installed on a target server but is not reported as missing by the TSSA Patch Analysis job.
  3. How to add new products to the list of filters available in a TSSA Windows Patch Catalog.
  4. TSSA Windows Patch Analysis issues related to target server reboots.
  5. How Microsoft Servicing Stack Updates (SSUs) can affect TSSA Windows Patch Analysis results.
  6. In May 2019, Windows Catalog Updates began failing due to changes in how Oracle JAVA patches are distributed.

 

The TSSA Customer Support team has been working on enhancing our knowledge base articles and video content in these areas and, in this month’s blog, we wanted to highlight the most useful, and frequently used, knowledge articles and videos for each of the problem categories listed above.

 

All of these issues are also discussed in the  Connect with TrueSight - TSSA: Troubleshooting Best Practices for Windows Patching Webinar which was presented on May 12 2020 by Rohit Sharma. If you have not already viewed this webinar, it is 86 minutes and discusses all the most common TSSA Windows Patching support cases we encounter from Catalog Updates to Analysis to Deployment/Remediation.

 

 

1) False Positives – Windows patch is believed to be installed but reported as Missing by TSSA Patch Analysis

 

 

Knowledge Articles:

 

000099904: TSSA/BSA: Windows Patch Troubleshooting - A Windows Hotfix is reported as missing by TSSA Patch Analysis but is believed to be installed

 

000090870 TSSA/BSA: Windows Patch Troubleshooting - Patch Deploy Job appears to have succeeded but TSSA Patch Analysis still reports the patch as missing

 

Video:

 

 

 

 

2) False Negatives – Windows patch is believed to be missing but is not reported as Missing by TSSA Patch Analysis

 

Knowledge Article:

 

000095840 TSSA/BSA: Windows Patch Troubleshooting - A Windows Hotfix is not installed on a target server but is not reported as missing by TSSA Patch Analysis

 

 

3) How to add additional products to the list of available filters in a TSSA Windows Patch Catalog

(This topic can also surface as a “No mappings were found for the selected product" warning when running a Windows Patch Catalog)

 

Knowledge Articles:

 

000166476 BSA/TSSA: How to add a new product to the list of available filters available in a TSSA Windows Patch Catalog?

000130493 BSA/TSSA: Windows Catalog update job displays "No mappings were found for the selected product" warning in Job Run Log

 

Video:

 

 

 

 

4)     TSSA Windows Patch Analysis issues related to target server reboots

 

Knowledge Articles:

 

000081738 TSSA/BSA: Windows Deploy Job fails to reboot, reports "Reboot required but did not occur. Manual reboot needed to complete operation, exitCode = -4003"

 

000145107 TSSA/BSA: Reboot is pending on this machine, analysis results may be incorrect

 

See also Newton Nyante's April 2020 blog posting specifically about how Pending Reboots can affect TSSA Windows Patch Analysis and Remediation.

 

 

5) How Microsoft Servicing Stack Updates (SSUs) can affect TSSA Windows Patch Analysis results

 

 

Knowledge Article:

 

000167748 TSSA/BSA: How can Microsoft Servicing Stack Updates (SSUs) affect TSSA Windows Patch Analysis results?

 

 

6) In May 2019, Windows Catalog Updates began failing due to changes in how Oracle JAVA patches are distributed.

 

Knowledge Article:

 

000168397 TSSA/BSA: Beginning May 2019 - Windows Catalog Updates failing due to problems downloading Oracle Java patches

 

 

 

Troubleshooting TSSA Windows Patch Analysis cases will often require downloading and running the Ivanti DPD Trace tool in order to gather more detailed information. Please see the following video which demonstrates how to download and run the Ivanti DPD Trace tool:

 

 

 

And Knowledge Article 000096560 which describes how to analyze the Trace.txt and shavlik_results.xml files generated by a TSSA Patch Analysis Job.

 

 

Finally, please make sure to subscribe to the TrueSight Automation Video Channel to find more useful videos and to be notified of new video content as it is published. If you are particularly interested in TSSA Windows Patch Management videos, we have a playlist specifically for this feature.