SolarWinds Patch Manager Installation Guide

INSTALLATION GUIDE
Patch Manager
Version 2.1.5
Last Updated: September 25, 2017
Retrieve the latest version from: https://support.solarwinds.com/Success_Center/Patch_Manager/Patch_Manager_Documentation
Copyright
© 2017 SolarWinds Worldwide, LLC. All rights reserved.
This document may not be reproduced by any means nor modified, decompiled, disassembled, published
or distributed, in whole or in part, or translated to any electronic medium or other means without the prior
written consent of SolarWinds. All right, title, and interest in and to the software and documentation are
and shall remain the exclusive property of SolarWinds and its respective licensors.
SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHER TERMS, EXPRESS OR IMPLIED,
STATUTORY OR OTHERWISE, ON SOFTWARE AND DOCUMENTATION FURNISHED HEREUNDER INCLUDING
WITHOUT LIMITATION THE WARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULAR
PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS
BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN
IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
The SolarWinds and other SolarWinds marks, identified on the SolarWinds website, as updated from
SolarWinds from time to time and incorporated herein, are registered with the U.S. Patent and Trademark
Office and may be registered or pending registration in other countries. All other SolarWinds trademarks
may be common law marks or registered or pending registration in the United States or in other countries.
All other trademarks or registered trademarks contained and/or mentioned herein are used for
identification purposes only and may be trademarks or registered trademarks of their respective
companies.
September 25, 2017
page 2
Table of Contents
SolarWinds Patch Manager Installation Guide
5
Stand-alone installation
5
Integrated with the Orion Platform
6
Evaluation installation
7
Product licensing
7
Terminology
8
Plan for a production deployment
10
Pre-flight checklist
10
Requirements
11
Server requirements
11
Windows Server Update Services (WSUS) requirements
13
SQL Server requirements
13
Managed systems requirements
14
Orion Platform (Orion integration only)
14
Orion server requirements
15
Additional Web Server requirements
15
Web browser
15
Port requirements
16
Prepare the Patch Manager server
17
Determine and set up the database
18
Prepare the managed systems
19
Install Patch Manager
Install SolarWinds Patch Manager in a stand-alone deployment
page 3
21
21
Complete the SQL Server installation
23
Complete the SQL Server Express installation
27
INSTALLATION GUIDE: PATCH MANAGER
Install Patch Manager in an Orion deployment
Install the Patch Manager Orion web interface
28
35
Evaluation installation
36
Activate the Patch Manager license
37
Configure devices and next steps
39
Uninstall Patch Manager
40
Get help
41
page 4
SolarWinds Patch Manager Installation Guide
Supported Version: SolarWinds® Patch Manager (SPM) 2.1.5
SolarWinds Patch Manager helps you install and manage Microsoft® Windows® and third-party updates
(or patches) on Windows-based systems. Use System administrators and security information engineers
can deploy SolarWinds Patch Manager to:
l
Protect servers and client systems against known vulnerabilities
l
Improve application performance
l
Generate reports for compliance audits
Use the information in this guide to prepare your environment and install SolarWinds Patch Manager.
This guide supports the following installation scenarios:
l
Stand-alone installation
l
Integrated with the Orion® Platform
l
Evaluation installation
If you are installing SolarWinds Patch Manager on a system running Microsoft System Center
Configuration Manager (SCCM), see the SolarWindsPatch Manager Administrator Guide for
installation instructions.
Stand-alone installation
For a stand-alone installation of SolarWinds Patch Manager, install the software on a dedicated server.
This installation assumes that:
l
Windows Server Update Services (WSUS) is enabled on the target server
l
You have not installed any other SolarWinds Orion Platform products on the dedicated server.
l
You are only running SolarWinds Patch Manager on this server with no additional SolarWinds or
third-party applications
page 5
INSTALLATION GUIDE: PATCH MANAGER
Integrated with the Orion Platform
SolarWinds Patch Manager supports an integrated installation into an existing Orion Platform. For this
installation, install the software on a dedicated server. To view SolarWinds Patch Manager on the Orion
Web Console, install the SolarWinds Patch Manager Orion web interface on the following Orion servers:
l
Orion server (main polling engine)
l
Additional Web Server
This installation assumes that:
l
Windows Server Update Services (WSUS) is enabled on the target server
l
You have not installed any other SolarWinds Orion Platform products on the dedicated server.
l
You are only running SolarWinds Patch Manager on this server with no additional SolarWinds or
third-party applications
page 6
Evaluation installation
SolarWinds Patch Manager supports an evaluation installation with a trial period. This installation is a full
product version with a 30-day license. To continue with a full product license, contact SolarWinds Sales.
Product licensing
SolarWinds licenses Patch Manager according to its number of managed systems. These systems include
all WSUS, SCCM (or ConfigMgr), and SolarWinds Patch Manager servers, as well as all managed client
systems.
The Primary Application Server (PAS) installed on the SolarWinds Patch Manager server calculates the
number of managed computers using two sources:
l
Enterprise > Managed Computers node
l
Administration and Reporting: > Task History node
You can access these nodes from the SolarWinds Patch Manager Admin Console.
The following table lists the available license tiers.
page 7
INSTALLATION GUIDE: PATCH MANAGER
LICENSE
SUPPORTED NODES
PM250
250
PM500
500
PM1000
1,000
PM2000
2,000
PM4000
4,000
PM8000
8,000
PM14000
14,000
PM20000
20,000
PM30000
30,000
PM40000
40,000
PM60000
60,000
For example, your Windows domain has one server running Microsoft® Windows Server® 2012 with WSUS
and SolarWinds Patch Manager. There are 1,500 Windows-based nodes in the domain. In this example, the
PM2000 license meets your needs.
You can purchase a SolarWinds Patch Manager license in the Customer Portal. After you complete the
purchase, activate the SolarWinds Patch Manager license.
See Patch Manager Console: Exceeding Allowed LIcense Count for steps to upgrade your SolarWinds Patch
Manager license to the next tier level.
Terminology
The following terms provide context for SolarWinds product architecture and components.
Agent: a software component installed on a managed system that provides a communications link to
SolarWinds Patch Manager when the system cannot be managed with WMI. Agents are usually installed on
systems that cannot access SolarWinds Patch Manager from the physical location of the corporate
network—for example, systems that access the network using an Internet connection.
Application Program Interface (API): specifies how software programs communicate with each other.
SolarWinds Patch Manager uses the WSUS API to communicate with the WSUS server.
Managed systems: client systems and servers in an enterprise that are configured to receive Microsoft®
Windows® and third-party updates from the WSUS server.
page 8
Microsoft Internet Information Services (IIS): a Microsoft web server that integrates with SolarWinds
Patch Manager and the Orion® Platform.
Orion Platform: the common back-end platform used by the SolarWinds Orion suite of products,
including SolarWinds Network Performance Monitor (NPM), Server & Application Monitor (SAM), Network
Configuration Monitor (NCM), Network Traffic Analyzer (NTA), and more. The Orion Platform provides the
backbone for navigation, settings, and common features like alerts and reports. It also provides a
consistent look-and-feel across products, giving you a “single pane of glass” for your Orion monitoring
tools.
Orion Web Console: the web interface you see when you log in to Orion that is used to view, configure,
and manage all of your monitored objects.
Patch Manager Admin Console: a Microsoft Management Console (MMC) 3.0-based snap-in that
connects to the Primary Application Server. You can install the administration console directly on the
SolarWinds Patch Manager server or on one or more remote administration workstations.
Patch Manager Orion Web Interface: a read-only interface that displays graphics and detailed
information about your managed systems. You can install the Patch Manager web interface on an Orion
Platform server to integrate with the Orion Web Console or any server than can connect to the Primary
Application Server system.
Primary Application Server: a SolarWinds Patch Manager server role that provides the default
management group, certificate configuration authority, and communications hub for your Patch Manager
deployment. This server role is installed on a host system with the Patch Manager Administration Console.
See the Patch Manager Getting Started Guide for information about adding additional server roles to your
deployment.
Windows Management Instrumentation (WMI): specifies how software components communicate with
each other.
WMI Providers: an optional feature that enables you to interface with both WSUS and managed clients in
the SolarWinds Patch Manager Admin Console. With WMI Providers enabled in Patch Manager System
Configuration, you can perform several functions not included with WSUS, such as deploying updates on
demand, creating a managed systems inventory, and performing configuration management tasks, such as
shutdown or reboot.
Windows Server Update Services (WSUS): an optional component you install in supported Windows
Server operating systems to distribute and manage updates and hotfixes released by Microsoft in a
corporate enterprise. WSUS replaces Windows Update and allows system administrators to distribute
Windows updates and hotfixes released by Microsoft to systems in a corporate environment. SolarWinds
Patch Manager integrates with WSUS to distribute Windows updates, third-party updates, and custom
packages to managed systems in your deployment.
page 9
INSTALLATION GUIDE: PATCH MANAGER
Plan for a production deployment
This section provides the following information:
l
Pre-flight checklist
l
Requirements
l
Prepare the Patch Manager server
l
Determine and set up the database
l
Prepare the managed systems
Pre-flight checklist
Before installing, complete the pre-installation checklist below. This checklist helps you:
l
l
Verify that system requirements are met, all required software is installed, and required roles and
features are enabled.
Gather the information required to complete the installation.
Review the release notes
Review the SolarWinds Patch Manager release notes and available
documentation in the Success Center.
Review the system
requirements
Make sure your environment has all of the required hardware, software,
and database requirements for your installation.
Run all Windows updates Before the installation, check for and run all Microsoft Windows
Updates on all servers. As you install, if a Windows update runs, your
system may reboot as needed by Windows. The installation cannot
complete if your system is waiting to reboot.
Prepare the product
license
Review your current product licenses and determine if you need to make
any changes. You can download any updated license keys through the
Customer Portal.
If you need to modify your licenses, contact your SolarWinds account
manager or SolarWinds.
Gather credentials
Make sure you have all account credentials, SQL database credentials,
your SolarWinds account, and local admin server credentials.
Use the Local Administrator Account for installation.
page 10
The Local Administrator Account is not the same as a domain
account with local admin rights. A domain account is subject to
your domain group policies.
To download SolarWinds products and licenses, you need a SolarWinds
Customer Portal account. To create your SolarWinds account, see Access
the Customer Portal.
Gather Orion Platform
(Orion deployment only)
If you are integrating SolarWinds Patch Manager with the Orion Platform,
obtain sysadmin rights to the Orion server and Additional Web Server.
Also, ensure that you have database credentials to the Orion SQL
database to install and configure the Patch Manager Orion web interface.
Schedule the installation
Set up the maintenance window, preferably during off-peak hours.
Depending on the size of databases and the environment, you may need
hours to complete the installation.
Installations in an existing Orion Platform environment require
polling engines and SolarWinds services to be offline for a length
of time, causing you to lose a portion of polling data.
Notify your company
Send a message to your company about the installation schedule and
maintenance window. If you need additional help with the installation
process, contact and allocate staff to be available.
Requirements
This section describes the requirements for setting up a SolarWinds Patch Manager deployment.
SERVER REQUIREMENTS
Set up your dedicated SolarWinds Patch Manager server using the following requirements.
HARDWARE
OR SOFTWARE
REQUIREMENTS
CPU
32- or 64-bit 2.0 GHz Dual Core (minimum)
RAM
4 GB (minimum)
10 GB or higher (recommended)
Hard drive space
page 11
20 GB or higher
INSTALLATION GUIDE: PATCH MANAGER
HARDWARE
OR SOFTWARE
REQUIREMENTS
SolarWinds recommends 20 GB or higher of hard drive space to
accommodate fluctuations in space requirements in a production
environment.
Operating system
Windows Server 2008 R2 SP1
(Production environment) Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Operating system
Windows 7
(Evaluation)
Windows 7 SP1
Windows 8
Windows 8.1
Windows 10
.NET Framework
Version 3.5 for the SolarWinds Patch Manager server
Version 4.5 for the Orion Additional Web Server (Orion deployments only)
Visual C++ Runtime
Visual C++ Secure Runtime 9.0 SP1
Visual C++ 2008 Redistributable (32- and 64-bit)
Visual C++ 2010 Redistributable (32- and 64-bit)
Visual C++ 2012 Redistributable (32- and 64-bit)
Visual C++ 2013 Redistributable (32- and 64-bit)
SolarWinds Patch Manager installs this software if required.
System Center
SCCM 2007 SP2 or later
Configuration Manager
(SCCM or ConfigMgr)
SCCM 2012
(if applicable)
SCCM 2012 SP1
SCCM 2012 R2
SCCM 1511
SCCM 1606
page 12
HARDWARE
OR SOFTWARE
REQUIREMENTS
SCCM 1610
SCCM 1702
SCCM 1706
WINDOWS SERVER UPDATE SERVICES (WSUS) REQUIREMENTS
See the Microsoft TechNet website for details about activating WSUS on your SolarWinds Patch Manager
server.
OPERATING
SYSTEM
SUPPORTED VERSIONS
Windows Server 2012
WSUS 3.0 SP2 with Microsoft KB2734608
WSUS 6.0
WSUS 6.2
Windows Server 2012 R2
WSUS 6.3
Windows Server 2016
WSUS 10
SQL SERVER REQUIREMENTS
If you are using a remote SQL database server for the SolarWinds Patch Manager database, ensure that
the server meets the following requirements.
HARDWARE
OR SOFTWARE
REQUIREMENTS
CPU
Dual processor, 3 GHz
Quad-processor, 2.67 GHz, 64-bit (for large networks)
RAM
4 GB (minimum)
10 GB (recommended)
Hard drive space
20 GB (minimum)
Database
Compatible with Microsoft SQL Server instances running the following
versions:
page 13
INSTALLATION GUIDE: PATCH MANAGER
HARDWARE
OR SOFTWARE
REQUIREMENTS
SQL Server 2008, 2008 R2, 2008 SP2, or 2008 SP3
SQL Server 2012, 2012 SP1, 2012, SP2, or 2012 SP3
SQL Server 2014 or 2014 SP1
SQL Server 2016
MANAGED SYSTEMS REQUIREMENTS
Ensure that all client systems managed by SolarWinds Patch Manager meets the following minimum
requirements.
HARDWARE
OR SOFTWARE
SUPPORTED VERSIONS
CPU
1.5 GHz (minimum)
Dual or Quad Core (recommended)
RAM
1 GB (minimum)
Operating system
Windows XP Professional SP3 or later
Windows Vista Business, Enterprise, or Ultimate SP2 or later
Windows 8
Windows 8.1
Windows 10
Windows Server 2008 R2 or 2008 SP2
Windows Server 2012 or 2012 R2
Windows Server 2016
ORION PLATFORM (ORION INTEGRATION ONLY)
When you integrate SolarWinds Patch Manager with the Orion Platform, do not install SolarWinds
Patch Manager, WSUS, and the SolarWinds Patch Manager Admin Console on the Orion server, This
configuration will impact the performance of your Orion-based applications.
page 14
ORION SERVER REQUIREMENTS
HARDWARE
OR SOFTWARE
SUPPORTED VERSIONS
Operating system
Windows Server 2008 SP1
(Production environment)
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
.NET Framework
.NET 3.5
.NET 4.5
IIS
Latest version
Patch Manager Orion web user interface Latest version
ADDITIONAL WEB SERVER REQUIREMENTS
SOFTWARE
SUPPORTED VERSIONS
Patch Manager Orion web user
interface
Latest version
WEB BROWSER
The following supported Web browsers are used to access the Web Console on the Orion Platform.
TYPE
SUPPORTED VERSIONS
Apple® Safari ®
Latest version
Google Chrome™
Latest version
Microsoft Edge
Latest version
Microsoft Internet Explorer
IE9
IE10
IE11
page 15
INSTALLATION GUIDE: PATCH MANAGER
TYPE
SUPPORTED VERSIONS
SolarWinds recommends adding the URL of your Orion
website (http://FullOrionServerName/), the URL of
SolarWinds support
(http://solarwinds.com/support), and
about:blank to the list of trusted sites.
Mozilla® Firefox®
Latest version
PORT REQUIREMENTS
The following table lists the port requirements for the SolarWinds Patch Manager server. To review all
SolarWinds product port requirements, see Port requirements for all SolarWinds products.
PORT
TYPE
DESCRIPTION
135
TCP
(RPC Endpoint Mapper) The SolarWinds Patch Manager server uses this
port to establish WMI connections to remote computers. It also uses
this port to connect to the Service Control Manager (SCM) when it
provisions the WMI providers dynamically on the remote computer.
389
TCP
(Lightweight Directory Access Protocol) SolarWinds Patch Manager
servers use this port for Active Directory authentication.
445
TCP
(SMB over TCP) The SolarWinds Patch Manager server uses this port
when it provisions the WMI providers to a remote computer.
4092
TCP
(Console-to-Server Communication) The SolarWinds Patch Manager
Admin Console uses this port to communicate to an independent
Application Server role. This is a one-way communication channel that
only requires inbound TCP traffic on the application server.
In a distributed environment, SolarWinds Patch Manager servers use
this port in the same manner for "downstream" communication. For
example, the SolarWinds Patch Manager Primary Application Server
(PAS) uses port 4092 to communicate with remote SolarWinds Patch
Manager servers in secondary server roles.
8787
TCP
(Web Console Connections) By default, users connect to the SolarWinds
Patch Manager web console server on port 8787.
17777
TCP
(SolarWinds Information Service) The SolarWinds Information Service
(SWIS) facilities data exchange for the SolarWinds Patch Manager Web
Console, along with the web console API. Ensure this port is not blocked
page 16
PORT
TYPE
DESCRIPTION
on servers running the SolarWinds Patch Manager Web Console server.
1024-65536
Dynamic Ports
(DCOM or RPC) WMI technology is based on Distributed Component
Object Model (DCOM)/RPC communication. DCOM/RPC allocates the
ports used by the server within a dynamic port range. This range is
typically between 1024 and 65536. To configure these ports using
Windows Firewall on your managed computers, enable the Inbound
Rules in the WMI group.
Prepare the Patch Manager server
Complete the following checklist on the SolarWinds Patch Manager server. This checklist helps you:
l
Verify that the server is set up and configured for a SolarWinds Patch Manager deployment.
l
Gather the information required to complete the installation.
To prevent a single point of failure, SolarWinds recommends installing Windows Server Update
Services (WSUS) on a separate server. This server must meet the same system and preparation
requirements as a SolarWinds Patch Manager server.
1. Verify that the server
is not in use
Ensure that:
l
The server is a dedicated server.
l
The server is not a domain controller.
SolarWinds does not support this option.
l
2. Install WSUS
No other Enterprise-class software products (such as Microsoft®
Exchange Server) are installed on the server.
Install WSUS on the SolarWinds Patch Manager server.
WSUS is an operating system feature that you install and enable on the
SolarWinds Patch Manager server. SolarWinds Patch Manager uses
WSUS to distribute Windows and third-party updates to the managed
systems.
Install WSUS 6.0 for servers running Microsoft® Windows® 2012.
Install WSUS 6.3 for servers running Microsoft Windows 2012 R2
systems.
See the Microsoft Technet website for details about installing and
enabling WSUS.
page 17
INSTALLATION GUIDE: PATCH MANAGER
3. Check for Windows
updates
Verify that all Windows updates are installed on the server. See the
Microsoft Technet website for details.
4. Set the server to the
correct time
See the Microsoft Technet website for details.
If the time is off by five minutes in either direction from
Greenwich Mean Time (GMT), you must contact SolarWinds
Customer Service to reset your license.
5. Set the Region and
Language setting to
English (United States)
See the Microsoft Technet website for details.
6. Open ports according
to the requirements
For your server ports and firewall, open ports according to the
requirements. Orion uses these ports to send and receive data.
7. Check for antivirus
software
Determine if any antivirus software is installed on the server or servers
where you plan to install. To ensure the installation goes smoothly,
exclude the SolarWinds directory. For example, on Windows Server 2012
R2, exclude C:\ProgramData\SolarWinds\.
See Files and directories to exclude from antivirus scanning for a
complete list of antivirus exclusions.
8. Verify Internet access
through the corporate
firewall
Verify that the server can access the following secure websites through
the corporate firewall:
n
https://www.microsoft.com to access the WSUS installer
n
https://3pupcontent.solarwinds.com to evaluate the third party
update functionality
n
https://catalog.update.microsoft.com to download Windows
updates, patches, and hotfixes
Contact our IT department to ensure you can access these sites
through the firewall.
Determine and set up the database
Complete the following checklist for the SolarWinds Patch Manager database. This checklist helps you:
l
Determine the SQL database that meets your deployment requirements
l
Gather the information required to set up and configure the database
1. Choose a database
option
page 18
SolarWinds Patch Manager supports the following SQL databases:
l
Microsoft® SQL Server® Express
l
Microsoft SQL Server Standard or Enterprise Edition
If you choose SQL Server Express, the database is installed on the
SolarWinds Patch Manager server during the installation. No
additional configuration is required.
SQL Server Express has a 10 GB storage limit. If you exceed this
limit, you must migrate your database to a remote SQL server.
If you choose SQL Server Standard or Enterprise Edition, you must
install the database on a separate server prior to installing SolarWinds
Patch Manager.
SolarWinds recommends this option to prevent a single point of
failure.
2. Set up the database
server
(Standard and Enterprise
Edition only)
3. Gather the database
credentials
(Standard and Enterprise
Edition only)
1. Ensure that the server meets the SQL server requirements.
2. Install and configure the SQL Server database software.
See the Microsoft TechNet website for details.
Make sure you have all account credentials, SQL database credentials,
your SolarWinds account, and local admin server credentials. This
includes:
l
l
Network path to the database instance
SQL Server database server hosting the Orion database (for an
Orion Platform integration)
The local administrator account is not the same as a domain
account with local admin rights. A domain account is subject to
your domain group policies.
Prepare the managed systems
Complete the following checklist on the managed systems. This checklist helps you verify that all managed
systems are set up to receive updates from the WSUS server.
1. Verify system credentials Ensure that you have sysadmin rights to all managed systems to
populate the default credential ring.
2. Enable File and Print
Sharing
page 19
See the Microsoft TechNet website or the operating system
documentation for details.
INSTALLATION GUIDE: PATCH MANAGER
3. Enable WMI and Remote
Administration Inbound
Rules
(Windows Server 2008 R2
SP1 servers only)
4. Enable the Computer
Browser Service and
Network Discovery
(Windows Server 2008 R2
SP1 servers only)
Enable the Windows Management Instrumentation (WMI) and Remote
Administration Inbound rules on all managed servers running
Windows Firewall. The operating system blocks these firewall rules by
default.
See the Microsoft TechNet website or the operating system
documentation for details.
If your workgroups are managed by a WSUS server running Windows
Server 2008 or Windows Server 2008 R2, enable and start the
Computer Browser service and enable Network Discovery on at least
one system in the workgroup. This system provides a Master Browser
for the Managed Resource Enterprise Configuration Wizard.
See the Microsoft TechNet website or the operating system
documentation for details.
page 20
Install Patch Manager
This section describes how to:
l
Install Patch Manager in a standalone deployment
l
Install Patch Manager in an Orion deployment
l
Install an evaluation
l
Configure devices and next steps
Install SolarWinds Patch Manager in a stand-alone
deployment
These instructions provide stand-alone installation steps for installing SolarWinds Patch Manager on a
dedicated server with Windows Server Update Services (WSUS) enabled in the operating system.
See the SolarWinds Patch Manager Administrator Guide for advanced deployment scenarios and
instructions for integrating SolarWinds Patch Manager with System Center Configuration Manager
(SCCM).
To complete the installation:
l
l
Use the Local Administrator account to install the software. The domain account is subject to your
domain group policies, which can block the installation tasks.
If you are installing SolarWindsPatch Manager using a remote SQL Server instance, run the
installation file as an existing, fully-qualified domain account with SysAdmin rights on the
SQL Server database server.
1. Review the pre-flight
checklist
The pre-flight checklist helps you:
l
l
Verify that system requirements are met, all required software is
installed, and required roles and features are enabled.
Gather the information required to complete the installation.
2. Prepare the Patch
Manager server
Prepare the Patch Manager server to ensure it is set up and configured
for a SolarWinds Patch Manager deployment.
3. Determine and set up
the database
Select and configure the SQL database that meets your deployment
requirements.
4. Prepare the managed
systems
Set up and configure the managed systems to receive updates from
the WSUS server.
page 21
INSTALLATION GUIDE: PATCH MANAGER
5. Locate the database
information
6. Download installation
files and license from
Customer Portal
If you installed a full version of SQL Server on another system, locate
the following:
l
Network path to the database instance
l
SQL Server computer name hosting the Orion database
See Access the Customer Portal if you need to create a SolarWinds
account.
1. Go to customerportal.solarwinds.com.
2. Log in using your SWID and password.
3. In the Latest Downloads table, locate Patch Manager and click
Choose Download.
4. Download the installation files.
5. Follow the prompts on the screen to complete the download.
7. Run the installation
file
1. Extract the contents of the downloaded installation ZIP file to the
SolarWinds Patch Manager server.
2. Run SolarWinds-Patch-Manager-<version>-Full.exe.
You may need to verify if the installation file is blocked. To
check, right-click the file and select Properties. If required,
click Unblock, and then click OK.
3. If prompted, click Install to install Microsoft .NET Framework.
Downloading and installing Microsoft .NET Framework can
take more than 20 minutes. If your system reboots, run the
installation again.
4. Select the following options, and click Next:
l
Install the Patch Manager server components
l
Install the Patch Manager administration console
Do not select Install the Patch Manager Orion web
interface. This option is used to integrate SolarWinds
Patch Manager with the Orion Platform.
page 22
5. If prompted, enter your email address in the SolarWinds
Registration window, and click Continue.
This registration is for receiving product information from
SolarWinds and is required to continue the SolarWinds
Patch Manager installation.
The installer extracts the files and initiates the Patch Manager
Setup wizard.
This process will take some time to complete.
8. Complete the Patch
Manager Setup wizard
1. Click Next on the Welcome window.
2. If you accept the terms of the license agreement, click Next.
3. Accept the default destination (recommended) or select another
location, and then click Next.
The wizard installs the SolarWinds Patch Manager software in the
selected location.
This process may take several minutes to complete.
4. Select a database option, and click Next:
l
l
Express Install (installs SQL Server Express on your
SolarWinds Patch Manager server)
Advanced Install (requires an external SQL Server
database)
5. Click Next to copy the program files to your system.
After the setup completes, the SolarWinds Configuration wizard
automatically runs.
9. Run the SolarWinds
Complete the Configuration Wizard based on your database selection:
Configuration wizard
l
SQL Server
l
SQL Server Express
COMPLETE THE SQL SERVER INSTALLATION
Run the SolarWinds Configuration wizard for the remote SQL database server.
1. Run the
SolarWinds
Configuration
wizard
page 23
1. In the Welcome dialog box, click Next.
INSTALLATION GUIDE: PATCH MANAGER
2. Enter the SQL Server database settings, and then click Next.
a. Click the SQL Server drop-down menu and select the SQL Server
server hosting the SolarWinds Patch Manager database instance.
b. Select SQL Server Authentication and complete the fields.
3. Enter the SQL Server database settings, and click Next.
a. Select Use an existing database.
b. Click the drop-down arrow and select the external database.
4. Select the SQL Server database account, and click Next.
If you are creating a new account, select Create a new account and enter
your password.
If you are using an existing account, the accounts are pulled from the
database.
page 24
5. Verify your website settings, and click Next.
6. If the SolarWinds directory does not exist, you are prompted to create the
directory. Click Yes to continue.
7. For the Server Role, select Primary Application Server, and click Next.
8. Accept the default server settings, and click Next.
9. Select I'll supply my own WSUS server, and click Next.
page 25
INSTALLATION GUIDE: PATCH MANAGER
10. Select the WSUS setup options, and click Next.
11. Enter a user account and password with local admin rights to the SolarWinds
Patch Manager server, and click Next.
If the SQL server is remote, enter the user name and password for
your domain account.
page 26
12. Select the location of the SolarWinds Patch Manager database, and click
Next.
13. Select the service account to run the SolarWinds Patch Manager Service, and
click Next.
The installer checks the proxy server settings, and verifies the Internet
connection.
14. In the Success screen, click Launch Patch Manager.
The SolarWinds Patch Manager Admin Console appears.
15. Re-enable the anti-virus software on your server.
2. Re-enable
the anti-virus
software on the
server
See the anti-virus software documentation for details.
COMPLETE THE SQL SERVER EXPRESS INSTALLATION
Complete the checklist to finish the SQL Server Express installation.
page 27
INSTALLATION GUIDE: PATCH MANAGER
1. Run the
SolarWinds
Configuration
wizard
1. Click Finish.
2. In the Product Features Select window, select WSUS Extension Pack, and click
Continue.
3. Enter the local administrator credentials, and click Save.
2. Re-enable the
anti-virus
software on the
server.
See the anti-virus software documentation for details.
Install Patch Manager in an Orion deployment
These instructions provide stand-alone installation steps for installing SolarWinds Patch Manager on a
dedicated server with Microsoft® Windows Server® Update Services (WSUS) enabled in the operating
system.
page 28
See the SolarWinds Patch Manager Administrator Guide for advanced deployment scenarios and
instructions for integrating SolarWinds Patch Manager with System Center Configuration Manager
(SCCM).
SolarWinds recommends that you avoid installing SolarWinds Patch Manager, WSUS, and the
SolarWinds Patch Manager Admin Console on the Orion server. This configuration impacts the
performance of the Orion-based applications.
To complete the installation:
l
l
Use the Local Administrator account to install the software. The domain account is subject to your
domain group policies, which can block the installation tasks.
If you are installing SolarWinds Patch Manager using a remote SQL Server instance, run the
installation file as an existing, fully-qualified domain account with sysadmin rights on the
SQL Server database server.
1. Review the
pre-flight
checklist
The pre-flight checklist helps you:
l
l
Verify that system requirements are met, all required software is installed,
and required roles and features are enabled.
Gather the information required to complete the installation.
2. Prepare the
Patch
Manager
server
Prepare the Patch Manager server to ensure it is set up and configured for a
SolarWinds Patch Manager deployment.
3. Determine
and set up the
database
Select and configure the SQL database that meets your deployment requirements.
4. Prepare the
managed
systems
Set up and configure the managed systems to receive updates from the
WSUS server.
5. Locate the
database
If you installed a full version of Microsoft® SQL Server® on another system, locate
the following:
information
l
Network path to the database instance
l
SQL Server computer name hosting the Orion database
6. Record the
Orion website
information
Record the IP address, port, and location of the Orion website.
7. Download
See Access the Customer Portal if you need to create an account.
page 29
INSTALLATION GUIDE: PATCH MANAGER
the
installation
file
1. Go to customerportal.solarwinds.com.
2. Log in using your SWID and password.
3. In the Latest Downloads table, locate Patch Manager and click Choose
Download.
4. Download the installation files.
5. Follow the prompts on the screen to complete the download.
8. Run the
installation
file
1. Extract the contents of the downloaded installation ZIP file to the SolarWinds
Patch Manager server.
2. Run SolarWinds-Patch-Manager-<version>-Full.exe.
You may need to verify if the installation file is blocked. To check, rightclick the file and select Properties. If required, click Unblock, and then
click OK.
3. If prompted click Install to install .NET Framework.
Downloading and installing Microsoft .NET Framework can take more
than 20 minutes. If your system reboots, run the installation again.
4. Select the following options, and click Next:
l
Install the Patch Manager server components
l
Install the Patch Manager administration console
l
Install the Patch Manager Orion web interface
5. If prompted, enter your email address in the SolarWinds Registration window,
and click Continue.
This registration is for receiving product information from SolarWinds
and is required to continue the SolarWinds Patch Manager installation.
The installer extracts the files and initiates the Patch Manager Setup wizard.
This process will take some time to complete.
9. Complete
the Patch
Manager
Setup wizard
1. Click Next on the Welcome window.
The installer checks your environment to verify the system requirements.
2. If you accept the terms of the license agreement, click Next.
3. Accept the default destination (recommended) or click Browse and select a
directory, and then click Next.
The wizard installs the SolarWinds Patch Manager software.
This process may take several minutes to complete.
4. Select Advanced Install, and click Next.
The program files are copied to the system.
After the setup completes, the SolarWinds Configuration wizard automatically
runs.
page 30
10. Run the
SolarWinds
Configuration
wizard
1. In the Welcome dialog box, click Next.
2. Enter the SQL Server database settings, and then click Next.
a. Click the SQL Server drop-down menu and select the SQL Server server
hosting the SolarWinds Patch Manager database instance.
b. Select an authentication method and complete the fields (if required).
3. Enter the SQL Server database settings, and click Next.
a. Select Use an existing database.
b. Click the drop-down arrow and select the external database.
page 31
INSTALLATION GUIDE: PATCH MANAGER
4. Select the SQL Server database account, and click Next.
If you are creating a new account, select Create a new account and enter your
password.
If you are using an existing account, verify that Use an existing account is
selected and accept the default information.
5. Verify the settings for the Orion website, and click Next.
6. If the SolarWinds directory does not exist, you are prompted to create the
directory. Click Yes to continue.
7. If prompted, select the services to install, and click Next.
8. Select Primary Application Server, and click Next.
page 32
9. Accept the default server settings, and click Next.
10. Select I'll supply my own WSUS server, and click Next.
11. Select the WSUS setup options, and click Next.
12. Enter a user account and password with local admin rights to the SolarWinds
Patch Manager server, and click Next.
If the SQL server is remote, the user account should be a domain
account.
page 33
INSTALLATION GUIDE: PATCH MANAGER
13. Select the location of the SolarWinds Patch Manager database, and click Next.
14. Select the service account to run the SolarWinds Patch Manager Service, and
click Next.
The installer checks the proxy server settings, and verifies the Internet
connection.
After the SolarWinds Configuration wizard completes, the Completing Orion
Installation wizard automatically runs.
11. Run the
Completing
Orion
Installation
Wizard
1. Click Next.
The wizard configures the Orion installation.
This process may take several minutes to complete.
2. Select the Launch Orion Web Console check box to open the web console.
3. Click Finish.
The Orion Web Console appears.
4. In the Product Features Select window, select WSUS Extension Pack, and click
Continue.
The SolarWinds Patch Manager Admin Console appears.
12. Configure
the Patch
Manager Web
page 34
1. On the Discovery Central web page, click Go to Orion Home.
Console
2. Click the hyperlink in any of the resources to add your SolarWinds Patch
Manager server.
a. In the Server name or IP address field, enter the host name or IP
address of your SolarWinds Patch Manager server.
b. In the Port field, specify a port or accept the default.
c. In the Windows Credentials section, specify the user name and
password to use to access the SolarWinds Patch Manager server.
d. Click Test.
e. Click Submit.
3. Click the Patches tab to view the SolarWinds Patch Manager resources.
13. Re-enable
the antivirus
See the antivirus software documentation for details.
software
INSTALL THE PATCH MANAGER ORION WEB INTERFACE
These instructions provide steps for installing the SolarWinds Patch Manager Orion web interface on an
Orion server, Orion Additional Web Server, or a stand-alone server.
For additional information, see the SolarWinds Patch Manager Administrator Guide.
To complete the installation:
l
l
Use the Local Administrator account to install the software. The domain account is subject to your
domain group policies, which can block the installation tasks.
If you are installing SolarWinds Patch Manager using a remote SQL Server instance, run the
installation file as an existing, fully-qualified domain account with SysAdmin rights on the
SQL Server database server.
1. Log in to the Orion
server
1. Verify that the server meets the operating system requirements
for the Patch Manager Orion web user interface.
2. Log in as an administrator to the server.
2. Disable any antivirus
See the antivirus documentation for details.
software
3. Run the installation file
1. Locate the executable file you downloaded from the Customer
Portal.
2. Extract the contents of the downloaded installation ZIP file to
the server.
3. Run SolarWinds-Patch-Manager-<version>-full.exe.
page 35
INSTALLATION GUIDE: PATCH MANAGER
4. Select Install the Patch Manager Orion web interface, and click
Next.
5. If prompted, enter your email address in the SolarWinds
Registration window, and click Continue.
After the installation completes, the Setup wizard automatically
runs.
4. Complete the Patch
Manager Setup wizard
1. Click Next on the Welcome window.
2. If you accept the terms of the license agreement, click Next.
3. Accept the default destination (recommended) or select another
location, and then click Next.
The wizard installs the SolarWinds Patch Manager software.
This process may take several minutes to complete.
4. Select Advanced Install, and click Next.
The wizard copies the program files to the system.
5. If prompted, click Yes to install the missing IIS components.
After the setup completes, the SolarWinds Configuration wizard
automatically runs.
5. Run the SolarWinds
Configuration wizard
1. In the Welcome dialog box, click Next.
2. Complete the wizard, and then click Finish.
Evaluation installation
The evaluation version is a full version of the product, functional for 30 days. After the evaluation period,
you can convert your evaluation license to a production license by obtaining and applying a license key.
To update the license, contact SolarWinds Sales to purchase a full license of the product. For Orion
products, access the License Manager to update the license with the purchased key. For details, see
Activate licenses.
For evaluation installations only, you can install the Orion server and the Microsoft® SQL Server® database
on the same server. The installer automatically installs SQL Server Express 2014. You can use that
database, or configure the server to use another Microsoft SQL database.
To use a separate Microsoft SQL Server database, or if you are installing this product into the production
deployment of an existing Orion Platform, see Plan for a production deployment.
For evaluation installations only, installation on a desktop operating system is possible, but not supported.
This product is intended for use in a production environment that meets the system requirements.
page 36
EVALUATION AND PRODUCTION
ENVIRONMENTS
EVALUATION
ENVIRONMENTS
ONLY
Windows Server 2012
Windows 7
Windows Server 2012 R2
Windows 7 SP1
Windows 8
Windows 8.1
Windows 10
To install an evaluation copy of your product:
1. Download the
evaluation file
Download the SolarWinds Patch Manager evaluation file from
www.solarwinds.com/patch-manager.
2. Install the evaluation
Follow the standalone installation instructions, including the
installation, setup, and configuration wizard.
To use the Microsoft SQL Server Express database that installs with the
product, click Express Install. To use your own Microsoft SQL Server
database, click Advanced Install.
3. Open the SolarWinds
Patch Manager Admin
Console
If the console does not open automatically, launch the
SolarWinds Patch Manager Admin Console in your SolarWinds Patch
Manager program folder.
For security purposes, SolarWinds recommends that you change the
password used for the Patch Manager service.
Activate the Patch Manager license
After you purchase a license from SolarWinds, activate the SolarWinds Patch Manager license using the
SolarWinds Licensing application located in the Windows App Panel. If you need to purchase a license,
click the Customer Portal link in the Activate Patch Manager window.
The Primary Application Server (PAS) stores the SolarWinds Patch Manager license for the
deployment. If you add new SolarWinds Patch Manager servers (such as an Automation Server),
these servers do not require a license.
1. Get the
activation for your
product from the
page 37
1. Open a web browser and navigate to customer.solarwinds.com.
2. Enter your SWID (customer ID) and password.
INSTALLATION GUIDE: PATCH MANAGER
Customer Portal
3. Click Licenses > Manage Licenses.
4. Click the View drop-down menu and select Patch Manager.
5. Click + next to Patch Manager.
6. Copy the activation key to a text file.
2. Access the
SolarWinds
Licensing
application
1. Log in to the Primary Application server as an administrator.
2. Verify that the server has Internet access.
If you access the Internet through a proxy server, locate the following:
l
Proxy address and port
l
Proxy user name and password
3. Click the Windows icon > down-arrow to access Apps.
4. In the SolarWinds group, click SolarWinds Licensing.
5. Click Enter Licensing Information.
The Activate Patch Manager window displays.
3. Activate the
license
To activate the license online:
1. Select I have internet access and an activation key from my customer
portal license management page in the window.
2. If you have Internet access through a proxy server, select I access the
Internet through a proxy server and complete the fields in the window.
3. Paste the activation key in the Activation Key field, and click Next.
4. Complete the remaining fields, and click Activate.
To activate the license offline:
page 38
1. Select This sever does not have Internet access. Guide me through
offline, manual activation.
2. Click Next.
3. Review the instructions in the window, and click Next.
4. Complete the remaining fields, and click Activate.
4. View the
license
1. Log in to the SolarWinds Patch Manager Admin Console as an
administrator.
2. Click Patch Manager System Configuration in the Patch Manager menu.
3. Click View Product Licensing in the Patch manager System Tasks
window.
4. Verify the license information in the window.
When the license expires, a banner displays in the Administration
and Reporting > Software Publishing window.
Configure devices and next steps
See the SolarWinds Patch Manager Getting Started Guide to configure and set up SolarWinds Patch
Manager. This guide describes the required steps to perform after you install the Patch Manager on a host
computer running Windows Server and WSUS.
page 39
INSTALLATION GUIDE: PATCH MANAGER
Uninstall Patch Manager
To remove SolarWinds Patch Manager from a server, remove the product through the Control Panel.
1. Open Programs and Features in the Windows Control Panel.
2. Right-click SolarWinds Patch Manager v2.1 (x64) and select Uninstall.
3. Complete the steps on your screen.
4. Reboot the server.
For further information and assistance uninstalling your product, contact Support.
page 40
Get help
After SolarWinds Patch Manager is installed, access the following resources to get started using the
product: l
l
l
l
Getting Started Guide: read the SolarWinds Patch Manager Getting Started Guide first to learn
how to use the product. This guide explains how to configure your environment, generate an
inventory, update your systems, download and publish updates, and generate reports.
Administrator Guide: see the SolarWinds Patch Manager Administrator Guide for details about
the SolarWinds Patch Manager Admin Console, inventory and reporting, WSUS, and advanced
configuration options.
SolarWinds Success Center: access the SolarWinds Success Center for additional product
documentation and knowledge base articles.
SolarWinds THWACK: access the latest third party patches and interact with professionals who can
answer your questions.
page 41