# How to Install Patches from the Patches Tab The **Patches** tab in Hexnode UEM includes a native repository of available OS and third-party patches for Windows, macOS devices and Linux devices. The **Install** action in the Patches tab enables IT admins to install patches directly from this repository, bypassing manual automation profile creation. Clicking **Install** for one or more patches creates a pre-populated automation profile and routes you directly to the **Assignments** step to define target devices or groups. This bypasses the patch-selection step in the standard automation workflow because the required updates were already selected in the **Patches** tab. Note: The **Install** action is currently available only for Windows and macOS devices. **Key capabilities** -------------------- - **Direct deployment from patch data** – Patches can be selected from the *Scanned, Missing, Critical*, or *Unscheduled* sections for the corresponding platforms under Patches and deployed without configuring a new automation from scratch. - **Pre-filled automation profile** – The patches selected in the **Patches** tab automatically populate a new automation profile, eliminating the need to reselect them during setup. - **Reduces time between detection and deployment** – Particularly relevant for critical or zero-day patches identified through scans, where speed of rollout matters. The **Install** action is best suited for one-off or urgent patch deployments — for instance, pushing a critical patch flagged in a scan without delay. For patch rollouts that need to be defined in advance or repeated on a schedule, [building the automation profile manually](https://www.hexnode.com/mobile-device-management/help/manual-patch-deployment-windows/) is the better fit. **How it works** ---------------- 1. Admin selects patches in the **Patches** tab of the Hexnode UEM console. 2. Admin triggers **Install** from the **Actions** dropdown. 3. Hexnode generates an automation profile with the selected patches and opens it at the **Assignments** step in the automation profile. 4. Admin configures targeting (included/excluded groups, filters). 5. Admin reviews and saves the automation triggering the installation in the target devices. **Steps to deploy patches via the Patches tab** ----------------------------------------------- 1. Log in to the **Hexnode UEM portal** and navigate to **Patches > Patches**. 2. Select the device platform (Windows or macOS), then choose **OS Patches** or **Third Party Patches**. 3. Browse the relevant sub-tab (*Scanned, Missing, Critical*, or *Unscheduled Patches*) and check the boxes next to the patches to deploy. 4. Open the **Action** dropdown and select **Install**. [![Screenshot of Hexnode UEM portal displaying the Install action in the Patches tab](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2026/09/Install-action-in-Patches-tab.png)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2026/09/Install-action-in-Patches-tab.png "Install action in Patches tab") 6. You are redirected to the **Assignments** section of the generated automation profile. **Configuring target assignments** ---------------------------------- Use the **Assignments** section to determine the exact devices and users that will receive the patches. Options are available for **Included groups, Excluded groups**, and **custom filters**. [![Screenshot of Hexnode UEM portal displaying Assignments section in the automation configuration for patch deployment.](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2026/09/Assignments-section-in-automation-configuration-scaled.png)](https://cdn.hexnode.com/mobile-device-management/help/wp-content/uploads/2026/09/Assignments-section-in-automation-configuration-scaled.png "Assignments section in automation configuration") ### **Included groups** Select device or user groups to apply the automation. Click **Add Groups** to view and choose from the available device and user groups in your Hexnode UEM portal. ### **Excluded groups** Select device or user groups to exclude from the automation. Click **Add Groups** to display the available groups for exclusion. ### **Filters** Create [custom filters](https://www.hexnode.com/mobile-device-management/help/manual-patch-deployment-windows/#choose-update-categories-to-target) based on the following categories: - **Device** – Attributes specific to the device (e.g., OS version, model, encryption status, enrolled time, serial number). - **User** – Attributes related to users assigned to the devices (e.g., department, email, username, user type). - **Network** – Attributes related to the device’s network (e.g., Wi-Fi SSID, IP address, carrier network, roaming status). - **Device Status** – Attributes concerning compliance and operational status (e.g., compliance status, enrollment status, jailbroken/rooted, kiosk mode). ### **Configuring Filters** Set the following fields to define filter conditions: - **Select Column** – Choose a category for filtering. Relevant sub-categories appear based on your selection. - **Select Comparator** – Define the comparison method (e.g., equals, contains, greater than). - **Select Value** – Specify the filtering criteria. Filters can be nested using the **+ icon** along with the **AND** operator; a filter can be removed using the trash icon next to it. When using multiple filters, two operators are available: - **AND** – The device must meet all the conditions set by the filters. - **OR** – The automation applies to devices that meet at least one of the filter conditions. After setting the filters, click **Next**. Review the configured automation settings — use **Edit** to modify any section if needed — then click **Save**. Saving the automation executes it immediately, and the automation profile installs the selected patches on the targeted devices. Note:While the **Install** action routes the administrator directly to the Assignments step (in the automation profile) with the selected patches pre-populated, the **Choose Actions** section of the automation profile remains accessible. This section provides the following configuration options: - **Pre-install and post-install scripts** – Enables execution of scripts before and after patch installation for Windows devices. - **Automation rules** – Defines platform-specific automation rules applicable to Windows or macOS patch deployments. You can refer to the comprehensive **Manual Patch Deployment** documentation for your respective platform ([Windows](https://www.hexnode.com/mobile-device-management/help/manual-patch-deployment-windows/) or [macOS](https://www.hexnode.com/mobile-device-management/help/deploy-patches-manually-macos/)) for step-by-step instructions on setting up these specific rules. Note that the configuration of these settings is optional and does not affect the pre-filled patch selection carried over from the Patches tab.