Shavlik Prtect Upgrade Guide
Cpyright and Trademarks Cpyright Cpyright 2009 2015 LANDESK Sftware, Inc. All rights reserved. This prduct is prtected by cpyright and intellectual prperty laws in the United States and ther cuntries as well as by internatinal treaties. N part f this dcument may be reprduced r retransmitted in any frm r by any means electrnic, mechanical, r therwise, including phtcpying and recrding fr any purpse ther than the purchaser s persnal use withut written permissin f LANDESK Sftware, Inc. Trademarks LANDESK and Shavlik are registered trademarks r trademarks f LANDESK Sftware, Inc. in the United States and ther jurisdictins. All ther marks and names mentined herein may be trademarks f their respective cmpanies. All ther trademarks, tradenames, r images mentined herein belng t their respective wners. Dcument Infrmatin and Print Histry Dcument number: N/A Date Versin Descriptin June 2009 NetChk Prtect 7.0 Initial release f the Shavlik NetChk Prtect 7.x Upgrade Guide. August 2009 NetChk Prtect 7.1 Dcument Rev A Add SQL Server 2000 and C++ prereq inf fr 7.1 users, and inf abut the asset management feature. Add data rllup functinal difference. Add Windws 7 inf t system requirements sectin. Nvember 2009 NetChk Prtect 7.2 Dcument Rev B April 2010 NetChk Prtect 7.5 Add inf abut Scan View, the new pwer management feature, imprvements t sftware asset scan and virtual machine capabilities. May 2010 NetChk Prtect 7.5, Dcument Rev A Clarify licensing infrmatin, sme additinal feature descriptins. September 2010 NetChk Prtect 7.6 Update prduct branding, add infrmatin abut new 7.6 features and imprvements. March 2011 NetChk Prtect 7.8 Add infrmatin abut new 7.8 features and imprvements. Octber 2011 VMware vcenter Prtect 8.0 Update prduct branding, add inf abut 8.0 upgrade tasks. Remve all inf abut versins prir t 7.5. Add step explaining hw t cmpress the database befre beginning the upgrade prcess. Update prduct name and versin, update cver graphics. December 2011 Vmware vcenter Prtect 8.0, Dcument Rev A September 2012 Vmware vcenter Prtect 8.0.1 May 2013 Shavlik Prtect 9.0 Update the system requirements. Add infrmatin abut the new v9.0 features and imprvements. April 2014 Shavlik Prtect 9.1 Update the system requirements. Add infrmatin abut the new v9.1 features and imprvements. September 2015 Shavlik Prtect 9.2 Update the system requirements. Add infrmatin abut the new v9.2 features and imprvements. 2 Shavlik Prtect 9.2 Upgrade Guide
Welcme WELCOME Purpse f this Guide New System Requirements and Prerequisites User Accunt Requirements fr Perfrming an Upgrade Welcme t Shavlik Prtect 9.2. This dcument describes hw t upgrade frm Shavlik Prtect 9.0 r Shavlik Prtect 9.1 t Shavlik Prtect 9.2. In additin t describing the upgrade prcedure, this dcument lists a number f functinal differences yu shuld be aware f when upgrading t Shavlik Prtect 9.2. It als highlights the areas in the user interface that have changed significantly. Please nte the fllwing new requirements and prerequisites fr Shavlik Prtect 9.2. Windws 2000 is n lnger a supprted perating system n client machines. Windws 10 (Pr r Enterprise Editins) is nw supprted n client machines. All missing sftware prerequisites will be autmatically installed during the upgrade prcess. See the Shavlik Prtect Installatin Guide fr the cmplete list f system requirements. In rder t perfrm an upgrade yur user accunt must meet the fllwing requirements: The user perfrming the database upgrade must be a member f the db_wner rle. If yu have multiple cnsles that share a database and are linking an additinal cnsle t a database that is already upgraded, the user accunt yu use must be a member f the fllwing database rles: db_datareader, db_datawriter, STExec, and STCatalgupdate. In additin, the service accunt used fr backgrund peratins must be a member the db_wner rle. If yur accunt is a member f the db_securityadmin and db_accessadmin rles, the database upgrade tl will autmatically attempt t map and cnfigure the required rles fr yu. Shavlik Prtect 9.2 Upgrade Guide 3
Upgrade Prcedure UPGRADE PROCEDURE Overview This sectin describes hw t upgrade frm Shavlik Prtect 9.0 r Shavlik Prtect 9.1 t Shavlik Prtect 9.2. If yu are taking this pprtunity t mve the cnsle t a new machine and yu want t perfrm the migratin using the Migratin Tl, see the Shavlik Prtect Migratin Tl User s Guide befre perfrming the upgrade. Befre perfrming the upgrade, be sure t read the Significant Changes and Enhancements sectin n page 16 s yu are aware f hw the upgrade will affect yur system. Yu als may want t make a nte f all yur current custm user settings as sme are nt preserved during the upgrade (see page 15). Perfrming the Upgrade 1. Cmpress the database used t stre scan results, patch deplyment results, and threat remediatin results. Yu can d this in SQL Server Management Studi by right-clicking the ShavlikScans database and selecting Tasks > Shrink > Database. 2. Create a backup f yur current database using SQL Server Management Studi. 3. Clse all prgrams running n the cnsle machine, including Shavlik Prtect. 4. Dwnlad the Shavlik Prtect 9.2 executable file t yur cnsle machine using the fllwing link: http://www.shavlik.cm/dwnlads/ 5. Begin the installatin prcess using ne f the fllwing methds: Duble-click the file named ShavlikPrtect.exe. Type the file name at a cmmand prmpt. Ding s enables yu t use ne r mre cmmand-line ptins. Yu shuld cnsider this methd if yu are upgrading a very large database. The DBCOMMANDTIMEOUT ptin is used t specify the SQL cmmand timeut value during installatin. The default value is 15 minutes per GB. The minimum timeut value is the greater f 15 minutes per GB r 1800 secnds (30 minutes). If yu have a 4 GB database yu shuld increase the timeut value t 3600 secnds (60 minutes). Fr example: ShavlikPrtect /wi:"dbcommandtimeout =3600" Nte: If yu receive a prmpt indicating that a restart is required, click OK and the installatin prcess will autmatically resume after the restart. 4 Shavlik Prtect 9.2 Upgrade Guide
Upgrade Prcedure 6. Respnd t the dialg that asks if yu want t cntinue with the upgrade. If yu click Yes and yur cnsle machine is missing ne r mre prerequisites, a dialg similar t the fllwing is displayed. If yu are nt missing any prerequisites, skip the fllwing step and prceed with the Welcme dialg. 7. Click Install t install any missing prerequisites. The Setup Wizard may need t perfrm a rebt during this prtin f the installatin prcess. If a rebt is required, when the machine is restarted the Setup dialg will reappear. Simply click Install again t prceed with the upgrade. The Welcme dialg is displayed. 8. Read the infrmatin n the Welcme dialg and then click Next. The license agreement is displayed. Yu must accept the terms f the license agreement in rder t install the prgram. 9. Enable the I accept the terms in the License Agreement check bx and then click Next. The Destinatin Flder dialg is displayed. Shavlik Prtect 9.2 Upgrade Guide 5
Upgrade Prcedure 10. If yu want t change the default lcatin f the prgram, click the brwse buttn and chse a new lcatin. Yu als have the ptin here t install a shrtcut icn n yur desktp. When yu are dne, click Next. The Prduct Imprvement Prgram dialg is displayed. Read the descriptin and decide if yu agree t participate in the prgram. The prgram enables Shavlik t cllect prduct usage infrmatin that will help imprve future versins f the prduct. 11. Click Next. The Ready t Install dialg is displayed. 12. T begin the installatin, click Install. Near the end f the installatin prcess the Database Setup Tl dialg is displayed. 6 Shavlik Prtect 9.2 Upgrade Guide
Upgrade Prcedure Imprtant! In the next step DO NOT select Create a new database. If yu d a new database will be created and yur existing data will nt be used. 13. Make sure Use an existing database is selected and then click Next. A dialg similar t the fllwing is displayed: Shavlik Prtect 9.2 Upgrade Guide 7
Upgrade Prcedure 14. Use the bxes prvided t define hw users and services will access the SQL Server database. Chse a database server and instance Server name: Yu can specify a machine r yu can specify a machine and the SQL Server instance running n that machine. Database name: Specify the database name yu want t use. The default database name is Prtect. 8 Shavlik Prtect 9.2 Upgrade Guide
Upgrade Prcedure Chse hw interactive users will cnnect t the database Specify the credentials yu want the prgram t use when a user perfrms an actin that requires access t the database. Integrated Windws Authenticatin: This is the recmmended and default ptin. Shavlik Prtect will use the credentials f the currently lgged n user t cnnect t the SQL Server database. The User name and Passwrd bxes will be unavailable. Specific Windws User: Select this ptin nly if the SQL Server database is n a remte machine. This ptin will have n effect if the database is n the lcal (cnsle) machine. (See Supplying Credentials in the Shavlik Prtect Administratin Guide fr mre infrmatin abut lcal machine credentials.) All Shavlik Prtect users will use the supplied credentials when perfrming actins that require interactin with the remte SQL Server database. SQL Authenticatin: Select this ptin t enter a specific user name and passwrd cmbinatin when lgging n t the specified SQL Server. Cautin! If yu supply SQL authenticatin credentials and have nt implemented SSL encryptin fr SQL cnnectins, the credentials will be passed ver the netwrk in clear text. Test database cnnectin: T verify that the prgram can use the supplied interactive user credentials t cnnect t the database, click this buttn. Chse hw services will cnnect t the database Specify the credentials yu want the backgrund services t use when making the cnnectin t the database. These are the credentials that the results imprter, varius agent peratins, and ther services will use t lg n t SQL Server and prvide status. Use alternate credentials fr cnsle services: If the SQL Server database is installed n the lcal machine yu will typically ignre this ptin by nt enabling this check bx. In this case the same credentials and mde f authenticatin that yu specified abve fr interactive users will be used. Yu will typically nly enable this check bx if the SQL Server database is n a remte machine. When the database is n a remte machine yu need an accunt that can authenticate t the database n the remte database server. Authenticatin methd: Available nly if Use alternate credentials fr cnsle services is enabled. Integrated Windws Authenticatin: Selecting this ptin means that the machine accunt will be used t cnnect t the remte SQL Server. The Kerbers netwrk authenticatin prtcl must be available in rder t securely transmit the credentials. The User name and Passwrd bxes will be unavailable. Nte: If yu chse Integrated Windws Authenticatin the installatin prgram will attempt t create a SQL Server lgin fr the machine accunt. If the accunt creatin prcess fails, see SQL Server Pst-Installatin Ntes in the Shavlik Prtect 9.2 Installatin Guide fr instructins n manually cnfiguring a remte SQL Server t accept machine accunt credentials. D this after yu cmplete the Shavlik Prtect upgrade prcess but befre yu start the prgram. Shavlik Prtect 9.2 Upgrade Guide 9
Upgrade Prcedure Specific Windws User: Select this ptin t enter a specific user name and passwrd cmbinatin. Shavlik Prtect s backgrund services will use these credentials t cnnect t the SQL Server database. This is a gd fallback ptin if fr sme reasn yu have difficulties implementing integrated Windws authenticatin. SQL Authenticatin: Select this ptin t prvide a specific user name and passwrd cmbinatin fr the services t use when lgging n t SQL Server. 15. After prviding all the required infrmatin, click Next. Nte: If the installatin prgram detects a prblem with any f the specified credentials, an errr message will be displayed. This typically indicates that a user accunt yu specified des nt exist. Make a crrectin and try again. The cnsle is linked t yur existing database. When the link prcess is cmplete the fllwing dialg is displayed: 16. Click Next. 17. On the Installatin Cmplete dialg click Finish. 18. On the Cmpleted the Shavlik Prtect Setup Wizard dialg, enable the Launch Shavlik Prtect check bx and then click Finish. 10 Shavlik Prtect 9.2 Upgrade Guide
Upgrade Tasks Perfrmed n the Cnsle UPGRADE TASKS PERFORMED ON THE CONSOLE In rder t cmplete the upgrade, the fllwing tasks must be perfrmed n the Shavlik Prtect cnsle. Assign Scheduler Credentials Review Yur Patch Scan Templates Review Yur Patch Grups Review Yur Scheduled Tasks Refresh Yur License (Offline Cnsles Only) A scheduler credential that matches yur current user accunt is nw required t run scheduled cnsle tasks. If there are scheduled tasks n the cnsle and the scheduler credential has nt been set, yu will receive a prmpt at startup time t set the credential. This check ccurs every time Shavlik Prtect is started t ensure that scheduled tasks cntinue t run. The Filtering tab n the Patch Scan Template dialg has been updated t allw fr mre precisin when scanning. While the upgrade prcess will autmatically cnvert yur existing patch scan templates t the new style, yu shuld duble-check yur templates t verify the changes. Patch grups are n lnger defined using a separate dialg; rather, they are nw created and managed frm within Patch View. While the upgrade prcess will autmatically cnvert yur existing patch grups t the new cnventin, yu shuld duble-check yur grups t verify the changes. Yur patch grups may be smaller after the upgrade as Shavlik has deprecated supprt fr many ld patches. Scheduled tasks are nw mnitred and managed frm tw separate areas. Yu shuld review bth scheduled tasks managers t verify that yur existing tasks were prperly prted. The Scheduled Cnsle Tasks Manager prvides ne lcatin t view tasks currently scheduled n the cnsle such as patch scans, asset scans, patch deplyments t the cnsle machine, script executin and scheduled reprts. The Scheduled Remte Tasks Manager prvides ne lcatin frm which t view pwer tasks and patch deplyments tasks currently scheduled n yur remte target machines. If yur cnsle is ffline (it des nt have an Internet cnnectin), in rder t view and use the new features in Shavlik Prtect 9.2 yu must manually refresh yur license. Fr infrmatin n activating a discnnected cnsle, in the Help system see Installatin and Setup > Getting Started > Activating the Prgram. If the cnsle is nline the license will be autmatically refreshed during the upgrade prcess. Shavlik Prtect 9.2 Upgrade Guide 11
Upgrade Tasks Perfrmed n the Cnsle Assign Aliases t the Cnsle This task is necessary if ne r mre f the fllwing cnditins apply: Yu have assigned the cnsle machine t a new dmain Yu have given the cnsle a new cmmn name r IP address Yu manually installed agents and they use an IP address t cmmunicate with the cnsle Under these cnditins yu must use the Cnsle Alias Editr tl t identify the ld cnsle names r addresses as trusted aliases. If yu dn t, when an agent checks in with the Shavlik Prtect cnsle r when an agentless machine attempts t send patch deplyment status messages t the cnsle, they will nt be able t verify that the machine they cntacted is a trusted machine. 1. Select Tls > Cnsle alias editr. The Cnsle Alias Editr dialg is displayed. It will cntain the names and IP addresses currently used t identify the cnsle machine. Fr example: 2. Type the names and/r IP addresses that yu want t use as an alias fr the cnsle machine. Yu can specify IP addresses using either an IPv4 r IPv6 frmat. 3. Click Update. The fllwing dialg is displayed: 12 Shavlik Prtect 9.2 Upgrade Guide
Upgrade Tasks Perfrmed n the Cnsle In rder t update the cnsle aliases the cnsle service must be restarted and Shavlik Prtect must be clsed and then manually restarted. IMPORTANT! The agents will nt recgnize a new alias until after they check-in with the restarted cnsle. The check-in must be initiated by an agent either manually using the agent client prgram r via a scheduled check-in; a check-in cmmand issued frm the cnsle t an agent will nt update the cnsle certificate. Synchrnize Yur Distributin Servers Yu must update yur distributin servers with the latest patches and/r scan engines and XML definitin files cntained n the cnsle. This is particularly imprtant if yur agents use distributin servers t dwnlad these files. The distributin servers must be synchrnized with the updated cnsle files prir t the agents perfrming their checkin. T synchrnize yur distributin servers: 1. Select Help > Refresh files t make sure the cnsle cntains all the latest files. 2. Select Tls > Operatins > Distributin Servers. 3. In the Add scheduled sync bx in the tp pane, select the cmpnent yu want t synchrnize. 4. In the tp pane, select which distributin server yu want t synchrnize with the cnsle. 5. Click Add scheduled sync. 6. Specify when yu want the synchrnizatin t ccur and then click Save. 7. In the Schedule autmatic synchrnizatin pane, select the scheduled synchrnizatin entry. 8. Click Run nw. Dn t wrry if the agents happen t check in befre yu have finished synchrnizing the distributin servers. The agents will be updated the next time a scheduled task is run r the agent updates its binaries. Shavlik Prtect 9.2 Upgrade Guide 13
Upgrade Tasks Perfrmed n the Cnsle Cnsider Enabling the Predictive Patch Feature Re-establish Security Between Yur Data Rllup Cnsles Scan Yur Virtual Machines This new feature enables Shavlik Prtect t autmatically dwnlad patches that are likely t be deplyed in the near future. If yu use distributin servers, yu can synchrnize Predictive Patch with yur distributin servers s that they receive cpies f the dwnladed patches. The Predictive Patch ptin is enabled n the Tls > Operatins > Dwnlads tab and it is synchrnized with yur distributin servers by enabling the Synchrnize with Predictive Patch ptin n the Distributin Server dialg. See the Help system fr cmplete details. If yu use multiple cnsles and have a data rllup cnfiguratin in place, yu must reestablish the security assciatin between the central cnsle and each remte cnsle. IMPORTANT! Once yu begin the upgrade prcess, n data rllup activity will take place until bth the central cnsle and the remte cnsle have been upgraded and the security assciatin between the tw cnsles has been re-established. Fr this reasn it is strngly recmmended that yu upgrade yur cnsles in tandem and at a time when yu expect very little data rllup activity. On the Central Cnsle 1. Upgrade the central cnsle. 2. Select Tls Operatins > Data Rllup and verify that the Accept and imprt results frm a rllup sender check bx is enabled. On Each Remte Cnsle 1. Upgrade each remte cnsle. 2. Select Tls Operatins > Data Rllup. 3. Verify the IP Address/Hstname and prt values f the rllup cnsle. 4. Click Register. Fr mre infrmatin n data rllup, in the Help system see Managing Multiple Cnsles > Data Rllup Cnfiguratin. If yu have virtual machines defined in a machine grup n either the Hsted Virtual Machines tab r the Wrkstatin Virtual Machines tab, after perfrming the upgrade yu must initiate a scan f these machines frm either the hme page r frm within the machine grup. Yu need t d this in rder t re-establish the machine identities with Prtect. If yu d nt perfrm the scan, the Virtual Server and Path fields may nt be displayed in Machine View and deplyments t these machines may fail. 14 Shavlik Prtect 9.2 Upgrade Guide
Upgrade Tasks Perfrmed n the Cnsle Check Yur Custm User Settings The fllwing custm user settings are nt preserved during the upgrade. Tls > Optins > Display tab: Recent item (days) Archive items Shw nly items created by me Shw main newsfeed Shw infrmatinal items in patch scan results Shw service packs in View -> Patches Tls > Optins > Ntificatins and Warnings tab: Warn befre scheduling deplyments Clse Refresh Files when finished Warn if Prtect Clud sync is nt enabled n this cnsle Warn befre pening 7 r mre bulletins Tls > Optins > Lgging tab: Diagnstic patch scanning Deplyment Tracker: Update speed Days t shw Shw failures Shw in prgress Shw successfully cmpleted Reprts dialg Srt by IAVA ID ESXi Hypervisr Bulletins tab: Only shw latest Event Histry Limit results t previus (days) ITScripts Results View Results since Knw That Prtect 9.2 Uses a SHA-2 Rt Certificate Shavlik is intrducing the use f SHA-2 rt and cnsle certificates in Prtect 9.2. There are tw primary reasns fr this: the 2048-bit SHA-2 certificates are mre secure than their 1024-bit SHA-1 predecessrs, and SHA-1 rt certificates are being deprecated and will stp being accepted by Windws beginning n January 1, 2017. After yu have cmpleted the upgrade prcess, Shavlik Prtect 9.2 will begin its wn prcess behind the scenes fr issuing a new SHA-2 rt certificate and a new SHA-2 cnsle certificate. If yu are nt using agents then this prcess will be invisible t yu and can be ignred. If yu are using agents, part f the prcess invlves waiting fr yur agents t check in s they will receive the new pending rt certificate. This prcess may take a few days r weeks, depending n a number f factrs, but it will all play ut in the backgrund. Yur nly invlvement may be t mnitr the Event Histry lg t see if any prblems ccur that require yur attentin. Shavlik Prtect 9.2 Upgrade Guide 15
Significant Changes and Enhancements SIGNIFICANT CHANGES AND ENHANCEMENTS IN SHAVLIK PROTECT 9.2 Cmplete details abut each f the fllwing tpics can be fund in the Help system: http://help.shavlik.cm/prtect/nlinehelp/92/enu/prt.htm Patch Deplyments Patch Cntent Patch Scan Template Filtering Patch View / Patch Grup Scheduled Tasks Reprts Predictive Patch Patch Tuesday + X (days) Scheduling The engine fr packaging and deplying patches t machines has been cmpletely rewritten. Perfrmance and reliability have been imprved. The patch assessment and deplyment data that Shavlik Prtect cnsumes has been repackaged and imprved in many ways. Mre metadata has been added t the patch cntent. In additin, the Filtering tab n the Patch Scan Template dialg has been updated t allw fr mre precisin when scanning. Patch View has been cmpletely redesigned and updated. It leverages the new cntent frmat, enabling yu t view patch infrmatin in a mre cncise way. In additin, patch grups are nw created and managed frm within Patch View. This allws yu t research patches and create patch grups in a mre unified manner. Scheduled tasks n the cnsle nw use the Micrsft Task Scheduler. A new dialg, available via the Manage > Scheduled Cnsle Tasks menu, enables yu t view and manage these tasks. A new End-f-Life by Prduct reprt is nw available. In additin, a new Schedule Reprt dialg, available via the Tls > Schedule Reprt menu, enables yu t autmatically generate a reprt at sme time in the future. The reprt can be autmatically generated nce r n a recurring basis. This new ptin enables Shavlik Prtect t autmatically dwnlad patches that are likely t be deplyed in the near future. Dwnlading patches in advance f their anticipated deplyment will help speed the deplyment prcess. When scheduling cnsle scans, yu nw have the ability t delay a recurring scan by a number f days t cincide with a regular event. Fr example, yu might schedule a mnthly patch scan t ccur the day after Patch Tuesday by using the new Add delay (days) ptin. 16 Shavlik Prtect 9.2 Upgrade Guide
Significant Changes and Enhancements End f Life Ntificatin Prtect Clud Integratin User Interface Changes Ging frward, if the versin f Shavlik Prtect that yu are using is nearing its end f life (EOL) date, a ntificatin will be displayed when yu start Shavlik Prtect. Patch scan and deplyment results can be peridically sent t Prtect Clud. If yu are a Shavlik Empwer user, the patch data will be peridically retrieved by Empwer frm Prtect Clud and the data can then be viewed using the brwser-based Shavlik Empwer user interface. The fllwing user interface items have been changed: Patch View has been cmpletely redesigned. Patch grups are nw created and managed frm within Patch View. In Machine View: The tp pane cntains three new clumns: Virtual Server, VM Name, and Path The Virtual Assets tab has been remved frm the middle pane In the bttm pane, the Machines Missing and Machines Installed tabs have been cmbined int ne new tab named Affected Machines. On the patch deplyment template: Office Install Pints and Original Media supprt has been remved The Backup files fr uninstall and Quiet Mde ptins have been remved; they are nw always enabled The Distributin Servers tab has been redesigned t help identify the rder in which dwnlad surces will be used On the patch scan template: The Filtering tab has been cmpletely redesigned User criticality has been remved The Sftware Distributin tab nly shws prducts that have nt been superseded In an agent plicy, all tasks are nw able t be created withut a recurring schedule. This allws yu t define tasks that will run nly via the agent user interface r by remte task initiatin frm the cnsle. In a machine grup, the Test Existence and the Test Credentials ptins have been cmbined and are implemented by perfrming a pwer status scan. Virtual asset summaries are n lnger available frm within Machine View. All virtual asset infrmatin is nw available using the Virtual Inventry feature. Remved the Virtual Machine Hardware Detail, Virtual Machine Memry Usage, and Virtual Machine Disk Usage reprts. In Scan View, the Scan Summary sub-pane is n lnger cllapsible Scheduled tasks are nw separated int tw separate dialgs: Manage > Scheduled Remte Tasks and Manage > Scheduled Cnsle Tasks Shavlik Prtect 9.2 Upgrade Guide 17
Significant Changes and Enhancements In Tls > Optins: Display: Cntains a new check bx named Shw service packs in View > Patches Ntificatins & Warnings: Cntains a new check bx named Warn befre pening 7 r mre bulletins and remved the Warn befre scheduling peratins when the Default Credentials d nt match the current user check bx Patch Languages: This tab has been remved. The prgram nw autmatically detects the perating system languages used n yur managed machines and dwnlads nly thse language versins f the patch file that are needed. Scans: Cntains a new check bx named Always enfrce machine grup exclusins Deplyment: Remved the Deplyment Tracker address ptin. The address is nw defined using the Cnsle Alias Editr. Lgging: Cntains a new check bx named Diagnstic patch scanning 18 Shavlik Prtect 9.2 Upgrade Guide