How to Configure Manual Patch Deployment for Linux

What is Manual Patching?

Manual patching is an update deployment model where IT administrators individually select, approve, and execute software or operating system updates across managed endpoints, rather than relying on automated policy engines.

In a Unified Endpoint Management (UEM) framework, manual patch deployment allows administrators to review missing updates directly from a centralized console, manually select specific OS updates or application patches, and force immediate installations onto targeted device groups.

How Hexnode Handles Manual Patch Deployment for Linux

In Hexnode UEM, manual patch deployment is configured as a Manual Patch action within an automation. The automation determines when the deployment runs and which Linux devices are targeted, while the Manual Patch action determines which updates are installed and how the installation is handled.

The deployment process consists of selecting the required updates, configuring the installation behavior, assigning the target Linux devices, and saving the automation. When the configured trigger occurs, Hexnode UEM executes the Manual Patch action on the assigned devices. Administrators can then review the automation reports to track execution and deployment results.

When to Use Manual Patching

While automated patching is recommended for recurring update cycles across a large fleet, manual patching is critical for:

• Pilot Testing: Validating patch stability in controlled test environments to avoid system crashes or software conflicts on business-critical systems.
• Urgent Out-of-Band Patches: Forcing immediate, high-priority hotfixes onto specific vulnerable devices.
• Legacy or Custom Environments: Managing complex environments where cumulative or automatic updates risk breaking proprietary enterprise applications.