From time to time, LANDESK Software will release a patch for LANDESK Endpoint Security.
Typically LANDESK Endpoint Security patches are included in the BASE patch for a product. This patch is considered to be for the "Base" functionality of the product. Due to this, these patches make take a long time to install as the also will likely include changes to the database schema, etc.
A recent example would be the patches that add Windows 10 support for LANDESK Endpoint Security.
If it is the latest release of a component patch, it has typically undergone less testing than those in a service pack or service update. So it is recommended to install the very latest patch only to fix specific issues.
The following are the necessary steps to patch your LANDESK Endpoint Security Clients:
Back up your core server and database prior to all patch installations
Please be sure to back up your core server and database prior to any patch installation or version upgrade.
Download and prepare the patch for installation
- Download the patch.
- Execute the patch.
The patch will be a self-extracting executable in most cases.
- Select a preferred drive and directory location for the patch. By default it will be installed in "C:\LANDESK_Patches".
- Extract into the selected folder from Step 3.
- Navigate to the extracted location. At this point you will notice a new directory with the name of the patch as the directory name. Go to that directory.
- Once in the directory you will notice two .ZIP files, the patch to be installed on the core server, and the patch to be installed on the client.
For now we will ignore the client patch.
- Unzip the top .ZIP file (the one without -client) on the end either to the current location or to the desired location. This will create a new directory with the name of the patch and then subdirectories containing the setup executable and other files.
Install the patch on the core server
- Make sure to close any open Consoles.
- Navigate to the directory containing setup.exe from the steps for downloading and preparing the patch for installation.
- Run setup.exe.
- Click "Continue"
- Click "Accept" for the End-User License Agreement.
- Click "Install".
As mentioned the BASE patch also contains updates for all of the base functionality on the product and is also cumulative. This means that the BASE patch contains all fixes since the last service pack.
As such it can exceed 1GB and makes changes to the database among other changes. Due to this, be good to yourself, go grab your favorite beverage, come back and relax for a bit.
Install the patch on the clients
There are several methods for installing the patch on clients.
Using Patch Manager
The latest version of a patch typically will include a definition that can be imported into Patch Manager. If it is not provided to you ask that the support agent provide it. It is recommended typically to wait until the patch is already part of the patch download content prior to installing the patch throughout the environment.
Patches that are not the latest update will typically be released into content when the very latest request-only patch is released.
These updates will show up under the category "LANDESK Updates" in Patch Manager.
Using "Install/Update Security Components"
The client patch simply runs "Vulscan /installeps" in order to reinstall LANDESK Endpoint Security using the very latest files. Therefore, running an "Install/Update Security Components" task accomplishes the exact same thing.
- Within the "Configuration" tool group go to "Agent Settings"
- Within the "Agent Settings" tool select the Calendar dropdown (2nd icon) and choose "Install/Update Security Components"
- Select "LANDESK Endpoint Security" and/or "LANDESK Endpoint Security/Mac". Continue to select the other desired options and save the task.
- The scheduled tasks tool will open and you will now be able to target your devices.
After the fix has been deployed to and tested on a sufficient number of devices, auto-fix can be set to ensure that the environment is up to date with the latest patch.
When new agents are installed or reinstalled this will also include the latest updates. If using a self-contained executable, those will need to be re-created in order to include the latest bits.