INSTALLATION GUIDE Patch Manager Version 2.1.5 Last Updated: September 25, 2017 Retrieve the latest version from: https://support.solarwinds.com/success_center/patch_manager/patch_manager_documentation
Copyright 2017 SolarWinds Worldwide, LLC. All rights reserved. This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software and documentation are and shall remain the exclusive property of SolarWinds and its respective licensors. SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON SOFTWARE AND DOCUMENTATION FURNISHED HEREUNDER INCLUDING WITHOUT LIMITATION THE WARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. The SolarWinds and other SolarWinds marks, identified on the SolarWinds website, as updated from SolarWinds from time to time and incorporated herein, are registered with the U.S. Patent and Trademark Office and may be registered or pending registration in other countries. All other SolarWinds trademarks may be common law marks or registered or pending registration in the United States or in other countries. All other trademarks or registered trademarks contained and/or mentioned herein are used for identification purposes only and may be trademarks or registered trademarks of their respective companies. September 25, 2017 page 2
Table of Contents SolarWinds Patch Manager Installation Guide 5 Stand-alone installation 5 Integrated with the Orion Platform 6 Evaluation installation 7 Product licensing 7 Terminology 8 Plan for a production deployment 10 Pre-flight checklist 10 Requirements 11 Server requirements 11 Windows Server Update Services (WSUS) requirements 13 SQL Server requirements 13 Managed systems requirements 14 Orion Platform (Orion integration only) 14 Orion server requirements 15 Additional Web Server requirements 15 Web browser 15 Port requirements 16 Prepare the Patch Manager server 17 Determine and set up the database 18 Prepare the managed systems 19 Install Patch Manager 21 Install SolarWinds Patch Manager in a stand-alone deployment 21 Complete the SQL Server installation 23 Complete the SQL Server Express installation 27 page 3
INSTALLATION GUIDE: PATCH MANAGER Install Patch Manager in an Orion deployment 28 Install the Patch Manager Orion web interface 35 Evaluation installation 36 Activate the Patch Manager license 37 Configure devices and next steps 39 Uninstall Patch Manager 40 Get help 41 page 4
SolarWinds Patch Manager Installation Guide Supported Version: SolarWinds Patch Manager (SPM) 2.1.5 SolarWinds Patch Manager helps you install and manage Microsoft Windows and third-party updates (or patches) on Windows-based systems. Use System administrators and security information engineers can deploy SolarWinds Patch Manager to: Protect servers and client systems against known vulnerabilities Improve application performance Generate reports for compliance audits Use the information in this guide to prepare your environment and install SolarWinds Patch Manager. This guide supports the following installation scenarios: Stand-alone installation Integrated with the Orion Platform Evaluation installation If you are installing SolarWinds Patch Manager on a system running Microsoft System Center Configuration Manager (SCCM), see the SolarWindsPatch Manager Administrator Guide for installation instructions. Stand-alone installation For a stand-alone installation of SolarWinds Patch Manager, install the software on a dedicated server. This installation assumes that: Windows Server Update Services (WSUS) is enabled on the target server You have not installed any other SolarWinds Orion Platform products on the dedicated server. You are only running SolarWinds Patch Manager on this server with no additional SolarWinds or third-party applications page 5
INSTALLATION GUIDE: PATCH MANAGER Integrated with the Orion Platform SolarWinds Patch Manager supports an integrated installation into an existing Orion Platform. For this installation, install the software on a dedicated server. To view SolarWinds Patch Manager on the Orion Web Console, install the SolarWinds Patch Manager Orion web interface on the following Orion servers: Orion server (main polling engine) Additional Web Server This installation assumes that: Windows Server Update Services (WSUS) is enabled on the target server You have not installed any other SolarWinds Orion Platform products on the dedicated server. You are only running SolarWinds Patch Manager on this server with no additional SolarWinds or third-party applications page 6
Evaluation installation SolarWinds Patch Manager supports an evaluation installation with a trial period. This installation is a full product version with a 30-day license. To continue with a full product license, contact SolarWinds Sales. Product licensing SolarWinds licenses Patch Manager according to its number of managed systems. These systems include all WSUS, SCCM (or ConfigMgr), and SolarWinds Patch Manager servers, as well as all managed client systems. The Primary Application Server (PAS) installed on the SolarWinds Patch Manager server calculates the number of managed computers using two sources: Enterprise > Managed Computers node Administration and Reporting: > Task History node You can access these nodes from the SolarWinds Patch Manager Admin Console. The following table lists the available license tiers. page 7
INSTALLATION GUIDE: PATCH MANAGER LICENSE SUPPORTED NODES PM250 250 PM500 500 PM1000 1,000 PM2000 2,000 PM4000 4,000 PM8000 8,000 PM14000 14,000 PM20000 20,000 PM30000 30,000 PM40000 40,000 PM60000 60,000 For example, your Windows domain has one server running Microsoft Windows Server 2012 with WSUS and SolarWinds Patch Manager. There are 1,500 Windows-based nodes in the domain. In this example, the PM2000 license meets your needs. You can purchase a SolarWinds Patch Manager license in the Customer Portal. After you complete the purchase, activate the SolarWinds Patch Manager license. See Patch Manager Console: Exceeding Allowed LIcense Count for steps to upgrade your SolarWinds Patch Manager license to the next tier level. Terminology The following terms provide context for SolarWinds product architecture and components. Agent: a software component installed on a managed system that provides a communications link to SolarWinds Patch Manager when the system cannot be managed with WMI. Agents are usually installed on systems that cannot access SolarWinds Patch Manager from the physical location of the corporate network for example, systems that access the network using an Internet connection. Application Program Interface (API): specifies how software programs communicate with each other. SolarWinds Patch Manager uses the WSUS API to communicate with the WSUS server. Managed systems: client systems and servers in an enterprise that are configured to receive Microsoft Windows and third-party updates from the WSUS server. page 8
Microsoft Internet Information Services (IIS): a Microsoft web server that integrates with SolarWinds Patch Manager and the Orion Platform. Orion Platform: the common back-end platform used by the SolarWinds Orion suite of products, including SolarWinds Network Performance Monitor (NPM), Server & Application Monitor (SAM), Network Configuration Monitor (NCM), Network Traffic Analyzer (NTA), and more. The Orion Platform provides the backbone for navigation, settings, and common features like alerts and reports. It also provides a consistent look-and-feel across products, giving you a single pane of glass for your Orion monitoring tools. Orion Web Console: the web interface you see when you log in to Orion that is used to view, configure, and manage all of your monitored objects. Patch Manager Admin Console: a Microsoft Management Console (MMC) 3.0-based snap-in that connects to the Primary Application Server. You can install the administration console directly on the SolarWinds Patch Manager server or on one or more remote administration workstations. Patch Manager Orion Web Interface: a read-only interface that displays graphics and detailed information about your managed systems. You can install the Patch Manager web interface on an Orion Platform server to integrate with the Orion Web Console or any server than can connect to the Primary Application Server system. Primary Application Server: a SolarWinds Patch Manager server role that provides the default management group, certificate configuration authority, and communications hub for your Patch Manager deployment. This server role is installed on a host system with the Patch Manager Administration Console. See the Patch Manager Getting Started Guide for information about adding additional server roles to your deployment. Windows Management Instrumentation (WMI): specifies how software components communicate with each other. WMI Providers: an optional feature that enables you to interface with both WSUS and managed clients in the SolarWinds Patch Manager Admin Console. With WMI Providers enabled in Patch Manager System Configuration, you can perform several functions not included with WSUS, such as deploying updates on demand, creating a managed systems inventory, and performing configuration management tasks, such as shutdown or reboot. Windows Server Update Services (WSUS): an optional component you install in supported Windows Server operating systems to distribute and manage updates and hotfixes released by Microsoft in a corporate enterprise. WSUS replaces Windows Update and allows system administrators to distribute Windows updates and hotfixes released by Microsoft to systems in a corporate environment. SolarWinds Patch Manager integrates with WSUS to distribute Windows updates, third-party updates, and custom packages to managed systems in your deployment. page 9
INSTALLATION GUIDE: PATCH MANAGER Plan for a production deployment This section provides the following information: Pre-flight checklist Requirements Prepare the Patch Manager server Determine and set up the database Prepare the managed systems Pre-flight checklist Before installing, complete the pre-installation checklist below. This checklist helps you: Verify that system requirements are met, all required software is installed, and required roles and features are enabled. Gather the information required to complete the installation. Review the release notes Review the system requirements Run all Windows updates Prepare the product license Review the SolarWinds Patch Manager release notes and available documentation in the Success Center. Make sure your environment has all of the required hardware, software, and database requirements for your installation. Before the installation, check for and run all Microsoft Windows Updates on all servers. As you install, if a Windows update runs, your system may reboot as needed by Windows. The installation cannot complete if your system is waiting to reboot. Review your current product licenses and determine if you need to make any changes. You can download any updated license keys through the Customer Portal. If you need to modify your licenses, contact your SolarWinds account manager or SolarWinds. Gather credentials Make sure you have all account credentials, SQL database credentials, your SolarWinds account, and local admin server credentials. Use the Local Administrator Account for installation. page 10
The Local Administrator Account is not the same as a domain account with local admin rights. A domain account is subject to your domain group policies. To download SolarWinds products and licenses, you need a SolarWinds Customer Portal account. To create your SolarWinds account, see Access the Customer Portal. Gather Orion Platform (Orion deployment only) Schedule the installation If you are integrating SolarWinds Patch Manager with the Orion Platform, obtain sysadmin rights to the Orion server and Additional Web Server. Also, ensure that you have database credentials to the Orion SQL database to install and configure the Patch Manager Orion web interface. Set up the maintenance window, preferably during off-peak hours. Depending on the size of databases and the environment, you may need hours to complete the installation. Installations in an existing Orion Platform environment require polling engines and SolarWinds services to be offline for a length of time, causing you to lose a portion of polling data. Notify your company Send a message to your company about the installation schedule and maintenance window. If you need additional help with the installation process, contact and allocate staff to be available. Requirements This section describes the requirements for setting up a SolarWinds Patch Manager deployment. SERVER REQUIREMENTS Set up your dedicated SolarWinds Patch Manager server using the following requirements. HARDWARE OR SOFTWARE CPU RAM REQUIREMENTS 32- or 64-bit 2.0 GHz Dual Core (minimum) 4 GB (minimum) 10 GB or higher (recommended) Hard drive space 20 GB or higher page 11
INSTALLATION GUIDE: PATCH MANAGER HARDWARE OR SOFTWARE REQUIREMENTS SolarWinds recommends 20 GB or higher of hard drive space to accommodate fluctuations in space requirements in a production environment. Operating system (Production environment) Windows Server 2008 R2 SP1 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Operating system (Evaluation) Windows 7 Windows 7 SP1 Windows 8 Windows 8.1 Windows 10.NET Framework Version 3.5 for the SolarWinds Patch Manager server Version 4.5 for the Orion Additional Web Server (Orion deployments only) Visual C++ Runtime Visual C++ Secure Runtime 9.0 SP1 Visual C++ 2008 Redistributable (32- and 64-bit) Visual C++ 2010 Redistributable (32- and 64-bit) Visual C++ 2012 Redistributable (32- and 64-bit) Visual C++ 2013 Redistributable (32- and 64-bit) SolarWinds Patch Manager installs this software if required. System Center Configuration Manager (SCCM or ConfigMgr) (if applicable) SCCM 2007 SP2 or later SCCM 2012 SCCM 2012 SP1 SCCM 2012 R2 SCCM 1511 SCCM 1606 page 12
HARDWARE OR SOFTWARE REQUIREMENTS SCCM 1610 SCCM 1702 SCCM 1706 WINDOWS SERVER UPDATE SERVICES (WSUS) REQUIREMENTS See the Microsoft TechNet website for details about activating WSUS on your SolarWinds Patch Manager server. OPERATING SYSTEM Windows Server 2012 SUPPORTED VERSIONS WSUS 3.0 SP2 with Microsoft KB2734608 WSUS 6.0 WSUS 6.2 Windows Server 2012 R2 WSUS 6.3 Windows Server 2016 WSUS 10 SQL SERVER REQUIREMENTS If you are using a remote SQL database server for the SolarWinds Patch Manager database, ensure that the server meets the following requirements. HARDWARE OR SOFTWARE CPU REQUIREMENTS Dual processor, 3 GHz Quad-processor, 2.67 GHz, 64-bit (for large networks) RAM 4 GB (minimum) 10 GB (recommended) Hard drive space Database 20 GB (minimum) Compatible with Microsoft SQL Server instances running the following versions: page 13
INSTALLATION GUIDE: PATCH MANAGER HARDWARE OR SOFTWARE REQUIREMENTS SQL Server 2008, 2008 R2, 2008 SP2, or 2008 SP3 SQL Server 2012, 2012 SP1, 2012, SP2, or 2012 SP3 SQL Server 2014 or 2014 SP1 SQL Server 2016 MANAGED SYSTEMS REQUIREMENTS Ensure that all client systems managed by SolarWinds Patch Manager meets the following minimum requirements. HARDWARE OR SOFTWARE CPU SUPPORTED VERSIONS 1.5 GHz (minimum) Dual or Quad Core (recommended) RAM Operating system 1 GB (minimum) Windows XP Professional SP3 or later Windows Vista Business, Enterprise, or Ultimate SP2 or later Windows 8 Windows 8.1 Windows 10 Windows Server 2008 R2 or 2008 SP2 Windows Server 2012 or 2012 R2 Windows Server 2016 ORION PLATFORM (ORION INTEGRATION ONLY) When you integrate SolarWinds Patch Manager with the Orion Platform, do not install SolarWinds Patch Manager, WSUS, and the SolarWinds Patch Manager Admin Console on the Orion server, This configuration will impact the performance of your Orion-based applications. page 14
ORION SERVER REQUIREMENTS HARDWARE OR SOFTWARE Operating system (Production environment) SUPPORTED VERSIONS Windows Server 2008 SP1 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016.NET Framework.NET 3.5.NET 4.5 IIS Patch Manager Orion web user interface Latest version Latest version ADDITIONAL WEB SERVER REQUIREMENTS SOFTWARE Patch Manager Orion web user interface SUPPORTED VERSIONS Latest version WEB BROWSER The following supported Web browsers are used to access the Web Console on the Orion Platform. TYPE Apple Safari Google Chrome Microsoft Edge Microsoft Internet Explorer SUPPORTED VERSIONS Latest version Latest version Latest version IE9 IE10 IE11 page 15
INSTALLATION GUIDE: PATCH MANAGER TYPE SUPPORTED VERSIONS SolarWinds recommends adding the URL of your Orion website (http://fullorionservername/), the URL of SolarWinds support (http://solarwinds.com/support), and about:blank to the list of trusted sites. Mozilla Firefox Latest version PORT REQUIREMENTS The following table lists the port requirements for the SolarWinds Patch Manager server. To review all SolarWinds product port requirements, see Port requirements for all SolarWinds products. PORT TYPE DESCRIPTION 135 TCP (RPC Endpoint Mapper) The SolarWinds Patch Manager server uses this port to establish WMI connections to remote computers. It also uses this port to connect to the Service Control Manager (SCM) when it provisions the WMI providers dynamically on the remote computer. 389 TCP (Lightweight Directory Access Protocol) SolarWinds Patch Manager servers use this port for Active Directory authentication. 445 TCP (SMB over TCP) The SolarWinds Patch Manager server uses this port when it provisions the WMI providers to a remote computer. 4092 TCP (Console-to-Server Communication) The SolarWinds Patch Manager Admin Console uses this port to communicate to an independent Application Server role. This is a one-way communication channel that only requires inbound TCP traffic on the application server. In a distributed environment, SolarWinds Patch Manager servers use this port in the same manner for "downstream" communication. For example, the SolarWinds Patch Manager Primary Application Server (PAS) uses port 4092 to communicate with remote SolarWinds Patch Manager servers in secondary server roles. 8787 TCP (Web Console Connections) By default, users connect to the SolarWinds Patch Manager web console server on port 8787. 17777 TCP (SolarWinds Information Service) The SolarWinds Information Service (SWIS) facilities data exchange for the SolarWinds Patch Manager Web Console, along with the web console API. Ensure this port is not blocked page 16
PORT TYPE DESCRIPTION on servers running the SolarWinds Patch Manager Web Console server. 1024-65536 Dynamic Ports (DCOM or RPC) WMI technology is based on Distributed Component Object Model (DCOM)/RPC communication. DCOM/RPC allocates the ports used by the server within a dynamic port range. This range is typically between 1024 and 65536. To configure these ports using Windows Firewall on your managed computers, enable the Inbound Rules in the WMI group. Prepare the Patch Manager server Complete the following checklist on the SolarWinds Patch Manager server. This checklist helps you: Verify that the server is set up and configured for a SolarWinds Patch Manager deployment. Gather the information required to complete the installation. To prevent a single point of failure, SolarWinds recommends installing Windows Server Update Services (WSUS) on a separate server. This server must meet the same system and preparation requirements as a SolarWinds Patch Manager server. 1. Verify that the server is not in use Ensure that: The server is a dedicated server. The server is not a domain controller. SolarWinds does not support this option. No other Enterprise-class software products (such as Microsoft Exchange Server) are installed on the server. 2. Install WSUS Install WSUS on the SolarWinds Patch Manager server. WSUS is an operating system feature that you install and enable on the SolarWinds Patch Manager server. SolarWinds Patch Manager uses WSUS to distribute Windows and third-party updates to the managed systems. Install WSUS 6.0 for servers running Microsoft Windows 2012. Install WSUS 6.3 for servers running Microsoft Windows 2012 R2 systems. See the Microsoft Technet website for details about installing and enabling WSUS. page 17
INSTALLATION GUIDE: PATCH MANAGER 3. Check for Windows updates 4. Set the server to the correct time Verify that all Windows updates are installed on the server. See the Microsoft Technet website for details. See the Microsoft Technet website for details. If the time is off by five minutes in either direction from Greenwich Mean Time (GMT), you must contact SolarWinds Customer Service to reset your license. 5. Set the Region and Language setting to English (United States) 6. Open ports according to the requirements 7. Check for antivirus software See the Microsoft Technet website for details. For your server ports and firewall, open ports according to the requirements. Orion uses these ports to send and receive data. Determine if any antivirus software is installed on the server or servers where you plan to install. To ensure the installation goes smoothly, exclude the SolarWinds directory. For example, on Windows Server 2012 R2, exclude C:\ProgramData\SolarWinds\. See Files and directories to exclude from antivirus scanning for a complete list of antivirus exclusions. 8. Verify Internet access through the corporate firewall Verify that the server can access the following secure websites through the corporate firewall: https://www.microsoft.com to access the WSUS installer https://3pupcontent.solarwinds.com to evaluate the third party update functionality https://catalog.update.microsoft.com to download Windows updates, patches, and hotfixes Contact our IT department to ensure you can access these sites through the firewall. Determine and set up the database Complete the following checklist for the SolarWinds Patch Manager database. This checklist helps you: Determine the SQL database that meets your deployment requirements Gather the information required to set up and configure the database 1. Choose a database option SolarWinds Patch Manager supports the following SQL databases: page 18
Microsoft SQL Server Express Microsoft SQL Server Standard or Enterprise Edition If you choose SQL Server Express, the database is installed on the SolarWinds Patch Manager server during the installation. No additional configuration is required. SQL Server Express has a 10 GB storage limit. If you exceed this limit, you must migrate your database to a remote SQL server. If you choose SQL Server Standard or Enterprise Edition, you must install the database on a separate server prior to installing SolarWinds Patch Manager. SolarWinds recommends this option to prevent a single point of failure. 2. Set up the database server (Standard and Enterprise Edition only) 3. Gather the database credentials (Standard and Enterprise Edition only) 1. Ensure that the server meets the SQL server requirements. 2. Install and configure the SQL Server database software. See the Microsoft TechNet website for details. Make sure you have all account credentials, SQL database credentials, your SolarWinds account, and local admin server credentials. This includes: Network path to the database instance SQL Server database server hosting the Orion database (for an Orion Platform integration) The local administrator account is not the same as a domain account with local admin rights. A domain account is subject to your domain group policies. Prepare the managed systems Complete the following checklist on the managed systems. This checklist helps you verify that all managed systems are set up to receive updates from the WSUS server. 1. Verify system credentials Ensure that you have sysadmin rights to all managed systems to populate the default credential ring. 2. Enable File and Print Sharing See the Microsoft TechNet website or the operating system documentation for details. page 19
INSTALLATION GUIDE: PATCH MANAGER 3. Enable WMI and Remote Administration Inbound Rules (Windows Server 2008 R2 SP1 servers only) 4. Enable the Computer Browser Service and Network Discovery (Windows Server 2008 R2 SP1 servers only) Enable the Windows Management Instrumentation (WMI) and Remote Administration Inbound rules on all managed servers running Windows Firewall. The operating system blocks these firewall rules by default. See the Microsoft TechNet website or the operating system documentation for details. If your workgroups are managed by a WSUS server running Windows Server 2008 or Windows Server 2008 R2, enable and start the Computer Browser service and enable Network Discovery on at least one system in the workgroup. This system provides a Master Browser for the Managed Resource Enterprise Configuration Wizard. See the Microsoft TechNet website or the operating system documentation for details. page 20
Install Patch Manager This section describes how to: Install Patch Manager in a standalone deployment Install Patch Manager in an Orion deployment Install an evaluation Configure devices and next steps Install SolarWinds Patch Manager in a stand-alone deployment These instructions provide stand-alone installation steps for installing SolarWinds Patch Manager on a dedicated server with Windows Server Update Services (WSUS) enabled in the operating system. See the SolarWinds Patch Manager Administrator Guide for advanced deployment scenarios and instructions for integrating SolarWinds Patch Manager with System Center Configuration Manager (SCCM). To complete the installation: Use the Local Administrator account to install the software. The domain account is subject to your domain group policies, which can block the installation tasks. If you are installing SolarWindsPatch Manager using a remote SQL Server instance, run the installation file as an existing, fully-qualified domain account with SysAdmin rights on the SQL Server database server. 1. Review the pre-flight checklist 2. Prepare the Patch Manager server The pre-flight checklist helps you: Verify that system requirements are met, all required software is installed, and required roles and features are enabled. Gather the information required to complete the installation. Prepare the Patch Manager server to ensure it is set up and configured for a SolarWinds Patch Manager deployment. 3. Determine and set up the database 4. Prepare the managed systems Select and configure the SQL database that meets your deployment requirements. Set up and configure the managed systems to receive updates from the WSUS server. page 21
INSTALLATION GUIDE: PATCH MANAGER 5. Locate the database information If you installed a full version of SQL Server on another system, locate the following: Network path to the database instance SQL Server computer name hosting the Orion database 6. Download installation files and license from Customer Portal 7. Run the installation file See Access the Customer Portal if you need to create a SolarWinds account. 1. Go to customerportal.solarwinds.com. 2. Log in using your SWID and password. 3. In the Latest Downloads table, locate Patch Manager and click Choose Download. 4. Download the installation files. 5. Follow the prompts on the screen to complete the download. 1. Extract the contents of the downloaded installation ZIP file to the SolarWinds Patch Manager server. 2. Run SolarWinds-Patch-Manager-<version>-Full.exe. You may need to verify if the installation file is blocked. To check, right-click the file and select Properties. If required, click Unblock, and then click OK. 3. If prompted, click Install to install Microsoft.NET Framework. Downloading and installing Microsoft.NET Framework can take more than 20 minutes. If your system reboots, run the installation again. 4. Select the following options, and click Next: Install the Patch Manager server components Install the Patch Manager administration console Do not select Install the Patch Manager Orion web interface. This option is used to integrate SolarWinds Patch Manager with the Orion Platform. page 22
5. If prompted, enter your email address in the SolarWinds Registration window, and click Continue. This registration is for receiving product information from SolarWinds and is required to continue the SolarWinds Patch Manager installation. The installer extracts the files and initiates the Patch Manager Setup wizard. This process will take some time to complete. 8. Complete the Patch Manager Setup wizard 1. Click Next on the Welcome window. 2. If you accept the terms of the license agreement, click Next. 3. Accept the default destination (recommended) or select another location, and then click Next. The wizard installs the SolarWinds Patch Manager software in the selected location. This process may take several minutes to complete. 4. Select a database option, and click Next: Express Install (installs SQL Server Express on your SolarWinds Patch Manager server) Advanced Install (requires an external SQL Server database) 5. Click Next to copy the program files to your system. After the setup completes, the SolarWinds Configuration wizard automatically runs. 9. Run the SolarWinds Configuration wizard Complete the Configuration Wizard based on your database selection: SQL Server SQL Server Express COMPLETE THE SQL SERVER INSTALLATION Run the SolarWinds Configuration wizard for the remote SQL database server. 1. Run the SolarWinds Configuration wizard 1. In the Welcome dialog box, click Next. page 23
INSTALLATION GUIDE: PATCH MANAGER 2. Enter the SQL Server database settings, and then click Next. a. Click the SQL Server drop-down menu and select the SQL Server server hosting the SolarWinds Patch Manager database instance. b. Select SQL Server Authentication and complete the fields. 3. Enter the SQL Server database settings, and click Next. a. Select Use an existing database. b. Click the drop-down arrow and select the external database. 4. Select the SQL Server database account, and click Next. If you are creating a new account, select Create a new account and enter your password. If you are using an existing account, the accounts are pulled from the database. page 24
5. Verify your website settings, and click Next. 6. If the SolarWinds directory does not exist, you are prompted to create the directory. Click Yes to continue. 7. For the Server Role, select Primary Application Server, and click Next. 8. Accept the default server settings, and click Next. 9. Select I'll supply my own WSUS server, and click Next. page 25
INSTALLATION GUIDE: PATCH MANAGER 10. Select the WSUS setup options, and click Next. 11. Enter a user account and password with local admin rights to the SolarWinds Patch Manager server, and click Next. If the SQL server is remote, enter the user name and password for your domain account. page 26
12. Select the location of the SolarWinds Patch Manager database, and click Next. 13. Select the service account to run the SolarWinds Patch Manager Service, and click Next. The installer checks the proxy server settings, and verifies the Internet connection. 14. In the Success screen, click Launch Patch Manager. The SolarWinds Patch Manager Admin Console appears. 15. Re-enable the anti-virus software on your server. 2. Re-enable the anti-virus software on the server See the anti-virus software documentation for details. COMPLETE THE SQL SERVER EXPRESS INSTALLATION Complete the checklist to finish the SQL Server Express installation. page 27
INSTALLATION GUIDE: PATCH MANAGER 1. Run the SolarWinds Configuration wizard 1. Click Finish. 2. In the Product Features Select window, select WSUS Extension Pack, and click Continue. 3. Enter the local administrator credentials, and click Save. 2. Re-enable the anti-virus software on the server. See the anti-virus software documentation for details. Install Patch Manager in an Orion deployment These instructions provide stand-alone installation steps for installing SolarWinds Patch Manager on a dedicated server with Microsoft Windows Server Update Services (WSUS) enabled in the operating system. page 28
See the SolarWinds Patch Manager Administrator Guide for advanced deployment scenarios and instructions for integrating SolarWinds Patch Manager with System Center Configuration Manager (SCCM). SolarWinds recommends that you avoid installing SolarWinds Patch Manager, WSUS, and the SolarWinds Patch Manager Admin Console on the Orion server. This configuration impacts the performance of the Orion-based applications. To complete the installation: Use the Local Administrator account to install the software. The domain account is subject to your domain group policies, which can block the installation tasks. If you are installing SolarWinds Patch Manager using a remote SQL Server instance, run the installation file as an existing, fully-qualified domain account with sysadmin rights on the SQL Server database server. 1. Review the pre-flight checklist 2. Prepare the Patch Manager server 3. Determine and set up the database 4. Prepare the managed systems 5. Locate the database information The pre-flight checklist helps you: Verify that system requirements are met, all required software is installed, and required roles and features are enabled. Gather the information required to complete the installation. Prepare the Patch Manager server to ensure it is set up and configured for a SolarWinds Patch Manager deployment. Select and configure the SQL database that meets your deployment requirements. Set up and configure the managed systems to receive updates from the WSUS server. If you installed a full version of Microsoft SQL Server on another system, locate the following: Network path to the database instance SQL Server computer name hosting the Orion database 6. Record the Orion website information Record the IP address, port, and location of the Orion website. 7. Download See Access the Customer Portal if you need to create an account. page 29
INSTALLATION GUIDE: PATCH MANAGER the installation file 8. Run the installation file 1. Go to customerportal.solarwinds.com. 2. Log in using your SWID and password. 3. In the Latest Downloads table, locate Patch Manager and click Choose Download. 4. Download the installation files. 5. Follow the prompts on the screen to complete the download. 1. Extract the contents of the downloaded installation ZIP file to the SolarWinds Patch Manager server. 2. Run SolarWinds-Patch-Manager-<version>-Full.exe. You may need to verify if the installation file is blocked. To check, rightclick the file and select Properties. If required, click Unblock, and then click OK. 3. If prompted click Install to install.net Framework. Downloading and installing Microsoft.NET Framework can take more than 20 minutes. If your system reboots, run the installation again. 4. Select the following options, and click Next: Install the Patch Manager server components Install the Patch Manager administration console Install the Patch Manager Orion web interface 5. If prompted, enter your email address in the SolarWinds Registration window, and click Continue. This registration is for receiving product information from SolarWinds and is required to continue the SolarWinds Patch Manager installation. The installer extracts the files and initiates the Patch Manager Setup wizard. This process will take some time to complete. 9. Complete the Patch Manager Setup wizard 1. Click Next on the Welcome window. The installer checks your environment to verify the system requirements. 2. If you accept the terms of the license agreement, click Next. 3. Accept the default destination (recommended) or click Browse and select a directory, and then click Next. The wizard installs the SolarWinds Patch Manager software. This process may take several minutes to complete. 4. Select Advanced Install, and click Next. The program files are copied to the system. After the setup completes, the SolarWinds Configuration wizard automatically runs. page 30
10. Run the SolarWinds Configuration wizard 1. In the Welcome dialog box, click Next. 2. Enter the SQL Server database settings, and then click Next. a. Click the SQL Server drop-down menu and select the SQL Server server hosting the SolarWinds Patch Manager database instance. b. Select an authentication method and complete the fields (if required). 3. Enter the SQL Server database settings, and click Next. a. Select Use an existing database. b. Click the drop-down arrow and select the external database. page 31
INSTALLATION GUIDE: PATCH MANAGER 4. Select the SQL Server database account, and click Next. If you are creating a new account, select Create a new account and enter your password. If you are using an existing account, verify that Use an existing account is selected and accept the default information. 5. Verify the settings for the Orion website, and click Next. 6. If the SolarWinds directory does not exist, you are prompted to create the directory. Click Yes to continue. 7. If prompted, select the services to install, and click Next. 8. Select Primary Application Server, and click Next. page 32
9. Accept the default server settings, and click Next. 10. Select I'll supply my own WSUS server, and click Next. 11. Select the WSUS setup options, and click Next. 12. Enter a user account and password with local admin rights to the SolarWinds Patch Manager server, and click Next. If the SQL server is remote, the user account should be a domain account. page 33
INSTALLATION GUIDE: PATCH MANAGER 13. Select the location of the SolarWinds Patch Manager database, and click Next. 14. Select the service account to run the SolarWinds Patch Manager Service, and click Next. The installer checks the proxy server settings, and verifies the Internet connection. After the SolarWinds Configuration wizard completes, the Completing Orion Installation wizard automatically runs. 11. Run the Completing Orion Installation Wizard 12. Configure the Patch Manager Web 1. Click Next. The wizard configures the Orion installation. This process may take several minutes to complete. 2. Select the Launch Orion Web Console check box to open the web console. 3. Click Finish. The Orion Web Console appears. 4. In the Product Features Select window, select WSUS Extension Pack, and click Continue. The SolarWinds Patch Manager Admin Console appears. 1. On the Discovery Central web page, click Go to Orion Home. page 34
Console 2. Click the hyperlink in any of the resources to add your SolarWinds Patch Manager server. a. In the Server name or IP address field, enter the host name or IP address of your SolarWinds Patch Manager server. b. In the Port field, specify a port or accept the default. c. In the Windows Credentials section, specify the user name and password to use to access the SolarWinds Patch Manager server. d. Click Test. e. Click Submit. 3. Click the Patches tab to view the SolarWinds Patch Manager resources. 13. Re-enable the antivirus software See the antivirus software documentation for details. INSTALL THE PATCH MANAGER ORION WEB INTERFACE These instructions provide steps for installing the SolarWinds Patch Manager Orion web interface on an Orion server, Orion Additional Web Server, or a stand-alone server. For additional information, see the SolarWinds Patch Manager Administrator Guide. To complete the installation: Use the Local Administrator account to install the software. The domain account is subject to your domain group policies, which can block the installation tasks. If you are installing SolarWinds Patch Manager using a remote SQL Server instance, run the installation file as an existing, fully-qualified domain account with SysAdmin rights on the SQL Server database server. 1. Log in to the Orion server 2. Disable any antivirus software 1. Verify that the server meets the operating system requirements for the Patch Manager Orion web user interface. 2. Log in as an administrator to the server. See the antivirus documentation for details. 3. Run the installation file 1. Locate the executable file you downloaded from the Customer Portal. 2. Extract the contents of the downloaded installation ZIP file to the server. 3. Run SolarWinds-Patch-Manager-<version>-full.exe. page 35
INSTALLATION GUIDE: PATCH MANAGER 4. Select Install the Patch Manager Orion web interface, and click Next. 5. If prompted, enter your email address in the SolarWinds Registration window, and click Continue. After the installation completes, the Setup wizard automatically runs. 4. Complete the Patch Manager Setup wizard 1. Click Next on the Welcome window. 2. If you accept the terms of the license agreement, click Next. 3. Accept the default destination (recommended) or select another location, and then click Next. The wizard installs the SolarWinds Patch Manager software. This process may take several minutes to complete. 4. Select Advanced Install, and click Next. The wizard copies the program files to the system. 5. If prompted, click Yes to install the missing IIS components. After the setup completes, the SolarWinds Configuration wizard automatically runs. 5. Run the SolarWinds Configuration wizard 1. In the Welcome dialog box, click Next. 2. Complete the wizard, and then click Finish. Evaluation installation The evaluation version is a full version of the product, functional for 30 days. After the evaluation period, you can convert your evaluation license to a production license by obtaining and applying a license key. To update the license, contact SolarWinds Sales to purchase a full license of the product. For Orion products, access the License Manager to update the license with the purchased key. For details, see Activate licenses. For evaluation installations only, you can install the Orion server and the Microsoft SQL Server database on the same server. The installer automatically installs SQL Server Express 2014. You can use that database, or configure the server to use another Microsoft SQL database. To use a separate Microsoft SQL Server database, or if you are installing this product into the production deployment of an existing Orion Platform, see Plan for a production deployment. For evaluation installations only, installation on a desktop operating system is possible, but not supported. This product is intended for use in a production environment that meets the system requirements. page 36
EVALUATION AND PRODUCTION ENVIRONMENTS EVALUATION ENVIRONMENTS ONLY Windows Server 2012 Windows 7 Windows Server 2012 R2 Windows 7 SP1 Windows 8 Windows 8.1 Windows 10 To install an evaluation copy of your product: 1. Download the evaluation file Download the SolarWinds Patch Manager evaluation file from www.solarwinds.com/patch-manager. 2. Install the evaluation Follow the standalone installation instructions, including the installation, setup, and configuration wizard. To use the Microsoft SQL Server Express database that installs with the product, click Express Install. To use your own Microsoft SQL Server database, click Advanced Install. 3. Open the SolarWinds Patch Manager Admin Console If the console does not open automatically, launch the SolarWinds Patch Manager Admin Console in your SolarWinds Patch Manager program folder. For security purposes, SolarWinds recommends that you change the password used for the Patch Manager service. Activate the Patch Manager license After you purchase a license from SolarWinds, activate the SolarWinds Patch Manager license using the SolarWinds Licensing application located in the Windows App Panel. If you need to purchase a license, click the Customer Portal link in the Activate Patch Manager window. The Primary Application Server (PAS) stores the SolarWinds Patch Manager license for the deployment. If you add new SolarWinds Patch Manager servers (such as an Automation Server), these servers do not require a license. 1. Get the activation for your product from the 1. Open a web browser and navigate to customer.solarwinds.com. 2. Enter your SWID (customer ID) and password. page 37
INSTALLATION GUIDE: PATCH MANAGER Customer Portal 2. Access the SolarWinds Licensing application 3. Click Licenses > Manage Licenses. 4. Click the View drop-down menu and select Patch Manager. 5. Click + next to Patch Manager. 6. Copy the activation key to a text file. 1. Log in to the Primary Application server as an administrator. 2. Verify that the server has Internet access. If you access the Internet through a proxy server, locate the following: Proxy address and port Proxy user name and password 3. Click the Windows icon > down-arrow to access Apps. 4. In the SolarWinds group, click SolarWinds Licensing. 5. Click Enter Licensing Information. The Activate Patch Manager window displays. 3. Activate the license To activate the license online: 1. Select I have internet access and an activation key from my customer portal license management page in the window. 2. If you have Internet access through a proxy server, select I access the Internet through a proxy server and complete the fields in the window. 3. Paste the activation key in the Activation Key field, and click Next. 4. Complete the remaining fields, and click Activate. To activate the license offline: page 38
1. Select This sever does not have Internet access. Guide me through offline, manual activation. 2. Click Next. 3. Review the instructions in the window, and click Next. 4. Complete the remaining fields, and click Activate. 4. View the license 1. Log in to the SolarWinds Patch Manager Admin Console as an administrator. 2. Click Patch Manager System Configuration in the Patch Manager menu. 3. Click View Product Licensing in the Patch manager System Tasks window. 4. Verify the license information in the window. When the license expires, a banner displays in the Administration and Reporting > Software Publishing window. Configure devices and next steps See the SolarWinds Patch Manager Getting Started Guide to configure and set up SolarWinds Patch Manager. This guide describes the required steps to perform after you install the Patch Manager on a host computer running Windows Server and WSUS. page 39
INSTALLATION GUIDE: PATCH MANAGER Uninstall Patch Manager To remove SolarWinds Patch Manager from a server, remove the product through the Control Panel. 1. Open Programs and Features in the Windows Control Panel. 2. Right-click SolarWinds Patch Manager v2.1 (x64) and select Uninstall. 3. Complete the steps on your screen. 4. Reboot the server. For further information and assistance uninstalling your product, contact Support. page 40
Get help After SolarWinds Patch Manager is installed, access the following resources to get started using the product: Getting Started Guide: read the SolarWinds Patch Manager Getting Started Guide first to learn how to use the product. This guide explains how to configure your environment, generate an inventory, update your systems, download and publish updates, and generate reports. Administrator Guide: see the SolarWinds Patch Manager Administrator Guide for details about the SolarWinds Patch Manager Admin Console, inventory and reporting, WSUS, and advanced configuration options. SolarWinds Success Center: access the SolarWinds Success Center for additional product documentation and knowledge base articles. SolarWinds THWACK: access the latest third party patches and interact with professionals who can answer your questions. page 41