Category filter
View scanned patches and patch details
The Patches tab in Hexnode UEM displays all patches and updates for operating systems and applications across enrolled devices. It provides detailed information about each patch, including severity, classification, and more details. IT admins can assess the stability of these updates and approve them for automation if deemed suitable. By viewing scanned patches, admins can easily track, prioritize, and manage updates based on their importance.
How to view scanned patches in Hexnode UEM
The Scanned Patches section displays all patches synced to the Hexnode portal. To view the scanned patches, follow these steps:
- Log in to the Hexnode UEM portal and navigate to Patches > Patches.
- Select the device platform (Windows, macOS, or Linux), then choose OS Patches or Third Party Patches.
- By default, you will be taken to the Scanned Patches sub-tab. If not, click the Scanned Patches sub-tab to view the list of scanned patches.
The Patches section provides IT admins with detailed information about patches and updates for enrolled devices. Each entry includes key details such as the update name, missing and installed devices, severity level, release date, and classification. To better organize the information, admins can customize the table by clicking the icon on the left side of the search bar and selecting additional columns from the available options. The table below outlines the details provided for each patch and update.
| Detail | Description |
|---|---|
| Name | Specifies the name of the update or patch, such as the version and identifier of the update. |
| Missing Devices | Lists all the devices that need to have the particular patch or update installed. |
| Installed Devices | Shows the devices where the patch or update has already been successfully installed. |
| Description | Provides a summary of the patch or update, including its purpose, the issues it resolves, and any improvements it brings. |
| Product | Specifies the software, application, or OS component that the patch or update applies to. For example, it could refer to Windows OS, macOS, Linux, Microsoft Office, Adobe applications, or third-party software. |
| Platform | Indicates the operating system to which the update is applicable. This could include Windows, macOS, Linux, or other supported platforms. |
| Severity | Highlights the criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low. |
| Release Date | Displays the date when the patch or update was officially released by the vendor. |
| KB Number | Displays the Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes. |
| CVE | Lists the Common Vulnerabilities and Exposures (CVE) identifier if the update addresses security vulnerabilities. |
| Update Classification | Indicates the type of update, such as Firmware Updates, Major Updates, Minor Updates, Rapid Security Responses, Tools, Service Packs, Feature Packs, Upgrades, Update Rollups, Security Updates, Critical Updates, Updates, Definition Updates, Drivers, and Configuration Data Updates. |
| Approval Status | Indicates whether the update has been approved for installation (Pending Approval or Approved). |
| Identifier | Provides a unique identifier for the update, which can be used for tracking or reference purposes. |
| Type | Indicates whether the update is for the OS or an application. |
| Vendor | Specifies the vendor that released the update, such as Microsoft, Apple, or a third-party application developer. |
| Max Download Size | Shows the maximum size of the update or patch, helping admins prepare for network bandwidth considerations. |
| More Information | Provides a URL linking to a webpage with additional details or documentation related to the patch or update, if available. |
| Support URL | Links to the vendor’s support page for troubleshooting, FAQs, or assistance regarding the update. |
| Max Install Size | Shows the maximum disk space required to install an update on a device. |
| Beta Update | Indicates whether the update is a pre-release (beta) version, allowing admins to distinguish it from stable, generally available updates. |
| Last Update Date | Displays the date on which the patch or update record was last modified or revised by the vendor. |
| Reboot | Indicates whether installing the update requires the device to restart to complete the installation. |
| Uninstallation | Indicates whether the update can be uninstalled from a device after installation. |
| Impact | Describes the effect the update has on the device or system, such as the specific issue it fixes or the risk it mitigates. |
| Requires Network Connectivity | Indicates whether an active network connection is required on the device to download or install the update. |
| Requires User Input | Indicates whether the update needs user interaction on the device, such as confirmation or restart, to complete the installation. |
| CVSS v3.1 | Displays the Common Vulnerability Scoring System (v3.1) score, indicating the severity of the vulnerability addressed by the update on a standardized scale. |
| Applicable Devices | Lists all the devices to which the patch or update is applicable, regardless of installation status. |
You can filter the patches using the following options:
Filter By:
- Product: Search by product.
Note:
macOS versions below 11 are collectively categorized as macOS. Versions 11 and above are classified by their respective OS names: macOS 11 – Big Sur, macOS 12 – Monterey, macOS 13 – Ventura, macOS 14 – Sonoma, and macOS 15 – Sequoia. This allows you to search for products using their corresponding OS names.
- Severity: Select from Moderate, NA, Critical, Important, or Low.
- Update Classification: Filter by the type of update based on the platform.
- Approval Status: Use this filter to view updates based on their status – either Approved or Pending.
- Release Date:
- All
- Today
- Yesterday
- Last 7 days
- Last 30 days
- KB Number: Search by KB number.
- Vendor: Search by vendor.
- Requires Device Restart: Filters updates based on whether a device restart is required – either Yes or No.
- Beta Update: Filters updates based on whether they are beta releases – either True or False.
- Reboot: Filters updates based on their reboot requirement – Requires restart, May require restart, or Never restarts.
- Uninstallation: Filters updates based on whether the update supports uninstallation – either Yes or No.
- Requires Network Connectivity: Filters updates based on whether network connectivity is required – either Yes or No.
- Requires User Input: Filters updates based on whether user input is required – either Yes or No.
- Missing Devices: Filters patches by the number of devices on which they are missing, based on the specified condition and device count.
- Applicable Devices: Filters patches by the number of devices to which they are applicable, based on the specified condition and device count.
- Installed Devices: Filters patches by the number of devices on which they are installed, based on the specified condition and device count.
- CVSS v3.1 Score: Filters patches by their CVSS score, based on the specified condition and score.
Details of a patch or update
When you click on a particular update, Hexnode UEM provides complete details about that patch or update. These include a summary of the update, whether it has been included in any automation, details of devices that have been patched or updated, devices that remain unpatched, and devices that are awaiting a reboot for the update to be fully applied. To check the details or summary of the update, follow these steps:
- Go to the Patches tab in Hexnode UEM.
- Navigate to Patches.
- Select the device platform (Windows, macOS, or Linux), then choose OS Patches or Third Party Patches.
- Click on the patch or update.
Below are the details available for the patch or update:
| Category | Description |
|---|---|
| Summary | Displays detailed information about the selected patch and the list of all vulnerabilities addressed by this patch. |
| Automations | Provides details about the automation action associated with the patch or update. |
| Patched Devices | Lists devices that have successfully installed the patch or update. |
| Unpatched Devices | Lists devices that have not yet installed the patch or update. |
| Devices Waiting for Reboot | Displays devices that need to restart to complete the installation of the update. |
Authorizing patches and updates
The process of authorizing patches and updates begins when the IT admin reviews all the patches and updates listed under the Patches section for the selected device platform in the Patches tab in Hexnode UEM. If the admin deems a patch or update suitable, they can approve it for patch automation on the enrolled devices. However, if the Require update approval option is enabled during the configuration of patch automation, the IT admin must approve updates after the configuration is deployed on the device. If this option is not enabled, all available updates are installed automatically as configured in the patch automation.
To approve all the updates in bulk or individually:
- Log in to the Hexnode UEM portal.
- Go to the Patches tab.
- Navigate to Patches.
- Select the device platform (Windows, macOS, or Linux), then choose OS Patches or Third Party Patches.
- Select all the updates that need to be approved. Click Actions and select Approve.
OR
- Click on the patch or update to open its summary page. From the summary page, click Approve.
- Click Proceed to approve.
Revoking approval for a patch or update prevents it from being deployed to devices in the future. If the Require update approval option is enabled in patch automation, the update will no longer be deployed to devices that have not received it yet after approval is revoked. However, this action does not affect devices that have already installed the patch.
To revoke a patch or update:
- Navigate to the Patches tab in Hexnode UEM.
- Go to the Patches section.
- Select the device platform (Windows, macOS, or Linux), then choose OS Patches or Third Party Patches.
- Select or click on the patch or update you want to revoke.
- Click the Actions button and select Revoke Approval.
- Click Proceed to revoke the approval.
