Novell ZENWORKS PATCH MANAGEMENT Release Notes

Release Notes
ZENworks Patch Management Server v6.4
02_014N_6.4.2.19
Novell, Inc. 1800 South Novell Place Provo, UT 84606 Phone: 800.858.4000 www.novell.com
Copyright © 1997-2007 PatchLink® Corporation. ALL RIGHTS RESERVED. U.S. Patent No. 6,990,660, Other Patents Pending. This manual, as well as the software described in it, is
furnished under license. No part of this manual may be reproduced, stored in a retrieval system, or transmitted in any form—electronic, mechanical, recording, or otherwise—except as permitted by such license.
LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: PATCHLINK® CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES IN REGARDS TO THE ACCURACY OR COMPLETENESS OF THE INFORMATION PROVIDED IN THIS MANUAL. PATCHLINK® CORPORATION RESERVES THE RIGHT TO MAKE CHANGES TO THE INFORMATION DESCRIBED IN THIS MANUAL AT ANY TIME WITHOUT NOTICE AND WITHOUT OBLIGATION TO NOTIFY ANY PERSON OF SUCH CHANGES. THE INFORMATION PROVIDED IN THE MANUAL IS NOT GUARANTEED OR WARRANTED TO PRODUCE ANY PARTICULAR RESULT, AND THE ADVICE AND STRATEGIES CONTAINED MAY NOT BE SUITABLE FOR EVERY ORGANIZATION. NO WARRANTY MAY BE CREATED OR EXTENDED WITH RESPECT TO THIS MANUAL BY SALES REPRESENTATIVES OR WRITTEN SALES MATERIALS. PATCHLINK® CORPORATION SHALL NOT BE LIABLE FOR ANY LOSS OF PROFIT OR ANY OTHER DAMAGES ARISING FROM THE USE OF THIS MANUAL, INCLUDING BUT NOT LIMITED TO SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR OTHER DAMAGES
Trademarks:
PatchLink™, PatchLink.com™, securing the enterprise™, WebConsole™, PatchLink Update™, PatchLink Quarantine™, PatchLink Enterprise Reporting Services™, PatchLink Scanner Integration Module™, PatchLink Developers Kit™, and their associated logos are registered trademarks or trademarks of PatchLink® Corporation.
Novell, Novell ZENworks®, Novell ZENworks® Patch Management Server, and Novell Agent are registered trademarks or trademarks of Novell, Inc.
RSA Secured® is a registered trademark of RSA Security Inc.
Apache is a trademark of the Apache Software Foundation
In addition, other companies' names and products mentioned in this document, if any, may be either registered trademarks or trademarks of their respective owners.
Feedback:
Your feedback lets us know if we are meeting your documentation needs. E-mail the Novell Technical Publications department at techpubs@patchlink.com to tell us what you like best, what you like least, and to report any inaccuracies.
- ii -

Release Notes

Server Requirements

Minimum Hardware Requirements

The hardware requirements for Novell ZENworks Patch Management Server 6.4 vary depending upon the number of devices you manage. As the device count increases, so do the requirements. The following, minimum hardware requirements, will support up to 250 devices:
A single 1.4 GHz Pentium or equivalent processor
512 MB RAM
36 GB of available disk space
A single 100 Mbps network connection (with access to the Internet)
Note: For optimal performance please refer to the settings defined under “Recommended
Configuration”.

Supported Operating Systems

ZENworks Patch Management Server v6.4 - Release Notes
Novell ZENworks Patch Management Server 6.4 is supported on the following Operating Systems:
Microsoft Windows Server
Windows Server 2003, Standard Edition with SP1 or later
Windows Server 2003, Enterprise Edition with SP1or later
Windows Server 2003 R2, Standard Edition (SP2 optional but recommended)
Windows Server 2003 R2, Enterprise Edition (SP2 optional but recommended)
2003, Web Edition with SP1 or later
Warning: Novell ZENworks Patch Management must be installed on an Operating System that is not a domain controller and uses any English locale (en-US, en-UK, en­CA, etc.) in its default configuration.
- 1 -
Release Notes

Other Software Requirements

Novell ZENworks Patch Management Server 6.4 requires the following software:

Recommended Configuration

Novell ZENworks Patch Management Server 6.4 recommends the following hardware:
Table 0.1 Novell ZENworks Patch Management Recommended Configuration
Microsoft® Internet Information Services (IIS) 6.0
Microsoft® .NET Framework version 1.1 SP1 and 2.0 (both versions are required)
Microsoft Internet Explorer 6.x or higher
Microsoft SQL Server (any version) must not be installed unless installed by a previous
version of ZENworks Patch Management Server
Number of Nodes
Operating System
Database Server SQL 2005
Processor 1 - 2.4 GHz 1 - Pentium 4 1 - Dual Core,
RAM 1 GB 2 GB 2 GB 4 GB
Storage 1 - 36 GB Hard
< 1000 <2,500 <5,000 <10,000 > 10,000
Windows Server 2003, Web Edition with SP2
Express
Drive
Windows Server 2003, Web Edition with SP2
SQL 2005 Express
1 - 72 GB Hard Drive
Windows Server 2003, Web Edition with SP2
SQL 2005 Express
Non-Xeon
2 - 144 GB Hard Drives
Windows Server 2003, Standard Edition with SP2
SQL 2005 Express
2 - Dual Core Xeon
4 - 144 GB Hard Drives
Note: Refer to the Novell Support Web site (www.novell.com/support) for additional configuration recommendations.
Contact Novell Professional Services
- 2 -
ZENworks Patch Management Server v6.4 - Release Notes

Compatible Products

The following Novell products are compatible with Novell ZENworks Patch Management 6.4:
Table 0.2 Novell ZENworks Patch Management 6.4 Compatible Products
Product Name
Agent Management Center 6.4
Cisco Network Admission Control 6.4
Content Update Tool 6.4
Patch Developers Kit 6.4
Remote Execution Service 6.4
Scanner Integration Module 6.4

Agent Requirements

Agent for Windows

Local or Domain Administrator or Administrator equivalent
Warning: The install (and uninstall) must be done by a Administrator or Administrator equivalent.
500 MHz Processor or higher
256 MB RAM
20 MB of free disk space for agent installation
A single 10 Mbps network connection (with access to the Update Server)
Sufficient free disk space to download and install patches (varies dependent upon size of patch)
Windows Installer 2.0 or higher
Microsoft Internet Explorer 5.01 or higher (Internet Explorer 5.5 or higher if using SSL)
Network connectivity to your ZENworks Patch Management Server (6.4 or higher)
Minimum Version
Note: Windows 2000 computers require Service Pack 1
Windows NT 4.0 computers require Service Pack 6a
- 3 -
Release Notes

Agent for Linux, UNIX, Mac, and Netware

Superuser privileges on the target machine
2 MB of free disk space for agent installation
500 MHz or greater processor
256 MB RAM
10 Mbps network connection (with access to the Update Server)
Sufficient free disk space to download and install patches
Network connectivity to your ZENworks Patch Management Server
Presence of
Warning: The install (and uninstall) must be done by the root user (superuser).
/tmp
directory (
/var/tmp
directory on Solaris) for temporary file storage and
processing.
Warning: There must be no whitespaces (such as a space, tab, or newline character) in the absolute path of the installation directory.
- 4 -
ZENworks Patch Management Server v6.4 - Release Notes

Agent Supported Operating Systems

The following table lists the supported platforms on which the ZENworks Patch Management Agent
6.4 is supported.
Table 0.3 ZENworks Patch Management Agent 6.4 Supported Platforms
Operating System
Apple Mac OS X 10.2.8 -
HP-UX 11.00 -
IBM AIX 5.1 - 5.3
Microsoft Windows 9x
Microsoft Windows NT
Microsoft Windows XP
Microsoft Windows Vista
Novell Netware
Novell SUSE Linux
Red Hat Linux 2.1 - 4 Enterprise AS,
Sun Solaris 2.6 - 10
OS Versions
10.4.10
11.23
98 Second Edition
4.0 SP6A ­2003 R2
All
All All 32/64 bit x86 32/64 bit N/A
(3)
6.5 All 32 bit x86 32 bit 1.3.0+
9 - 10 Enterprise 32/64 bit
OS Edition
All 32/64 bit x86(Intel)/
All 64 bit PA-RISC 64 bit 1.4.0+
All 32/64 bit PowerPC 32/64 bit 1.4.0+
All 32 bit x86 32 bit N/A
(1)
All
Professional
ES, WS
All 32/64 bit SPARC/x86 32/64 bit 1.4.0+
(2)
OS Data Width
32/64 bit x86 32/64 bit N/A
32/64 bit x86 32/64 bit N/A
32/64 bit
Processor Family
PowerPC
x86 32/64 bit 1.4.0+
x86 32/64 bit 1.4.0+
Processor Data Width
32/64 bit 1.4.0+
Min. JRE
(1) Datacenter edition is not supported (2) Home, Media Center and Tablet PC editions are not supported (3) Windows Vista support requires .NET 3.0
- 5 -
Release Notes

Upgrading to ZENworks Patch Management 6.4

To Upgrade to Novell ZENworks Patch Management 6.4
Refer to the Novell Knowledgebase for detailed upgrade instructions
Following the upgrade to ZENworks Patch Management Server 6.4, you must update your

Agent Management Center Requirements

Supported Operating Systems

The AMC is supported on the following operating systems:
Warning: Refer to the “Compatible Products”section of this document when planning your upgrade to ZENworks Patch Management Server 6.4. If you have an unsupported product installed, please contact
Novell support prior to upgrading your server.
existing agents. This can be done by manually installing the ZENworks Patch Management Agent 6.4 or by deploying a Novell provided .plf (Vulnerability) from the Vulnerabilities page within ZENworks Patch Management Server.
Microsoft Windows Server™ 2003, Standard Edition with SP1
Windows Server 2003, Enterprise Edition with SP1
Windows Server 2003 R2, Standard Edition
Windows Server 2003 R2, Enterprise Edition
Microsoft Windows XP Professional with SP2
Note: Microsoft Vista is not a supported platform for the AMC.
- 6 -
ZENworks Patch Management Server v6.4 - Release Notes

Minimum Installation Requirements

Single Intel Pentium 4 (or equivalent) Processor
512 MB of RAM
200 MB of Free Disk Space (During Installation)
100 MB of Disk Space (After Installation)
Single 100 MB NIC with access to the Internet
Local / Domain Administrator or Administrator Equivalent
Microsoft .NET Framework 1.1 with SP1

Supported Agent Operating Systems

The Agent Management Center will install the ZENworks Patch Management Agent on the following platforms:
• Microsoft Windows XP Professional
• Microsoft Windows XP Professional x64 edition
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows Server™ 2003, Standard Edition
• Microsoft Windows Server 2003, Enterprise Edition
• Microsoft Windows Server 2003, Web Edition
• Microsoft Windows Server 2003, Datacenter Edition
• Microsoft Windows Server™ 2003, Standard x64 Edition
• Microsoft Windows Server 2003, Enterprise x64 Edition
• Microsoft Windows Server 2003, Datacenter x64 Edition
• Microsoft Windows Server 2003 R2, Standard Edition
• Microsoft Windows Server 2003 R2, Enterprise Edition
• Microsoft Windows Server 2003 R2, Datacenter Edition
• Microsoft Windows Server 2003 R2, Standard x64 Edition
• Microsoft Windows Server 2003 R2, Enterprise x64 Edition
• Microsoft Windows Server 2003 R2, Datacenter x64 Edition
Note: The Agent Management Center does not support installing the Novell ZENworks Patch Management Agent on Microsoft Windows Vista.
- 7 -
Release Notes

Distribution Point Requirements

Supported Operating Systems

• Microsoft® Windows Server™ 2003, Standard Edition
• Windows Server 2003, Enterprise Edition
• Windows Server 2003 R2, Standard Edition
• Windows Server 2003 R2, Enterprise Edition

Hardware and Software Requirements

256 MB RAM
5 GB of available disk space
A LAN connection
Note: Additional OS support details available from http://httpd.apache.org/
Note: Refer to http://httpd.apache.org/ for additional details.
- 8 -
ZENworks Patch Management Server v6.4 - Release Notes

Content Update Tool Requirements

Supported Operating Systems

The Content Update Tool is supported on the following Operating Systems:
Microsoft Windows Server™ 2003 Standard Edition with SP1
Windows Server 2003 Enterprise Edition with SP1

Hardware Requirements

512 MB of RAM *
Minimum of 50 MB of Disk Space *
1 GHz Processor or higher
* The actual RAM and disk space requirements will vary depending upon the size of the imported patches.

Other Requirements

Novell ZENworks Patch Management Server 6.4
An active network connection to your ZENworks Patch Management Server
Microsoft Windows Installer 3.0
Microsoft .NET Framework 2.0
Local / Domain Administrator or Administrator equivalent
Administrator (Admin) rights to Novell ZENworks Patch Management
An active Internet Connection
- 9 -
Release Notes

New Features

Novell ZENworks Patch Management 6.4 includes the following new features:
Hierarchical Grouping to further simplify agent management.
Group Search functionality, allowing users to search for groups by name.
Directory Service integration with dynamically created and managed groups (based upon the
Custom Groups can be assigned 'Source Groups' to automatically update the group's
ZENworks Patch Management Agent support for Microsoft Windows Vista.
Redesign of the Patch Management Server Home page.
User customizable dashboard views.
Policy sets can be managed from the Groups view in addition to Options.
Groups can be assigned multiple Policy Sets.
User Roles can be assigned directly to groups
The Group Information tab displays more detailed information such as assigned roles, policy
Device Information tab displays the device's resultant Agent Policy.
The Patch Management Server can be installed to a custom location.
The ZENworks Patch Management Agent can be installed to a custom location.
Deployment view brought to the action menu in addition to the other (pre-existing) locations
Deployments are now grouped into Deployment Jobs, for ease of management and follow-up.
Inventory view moved to a tab under Devices.
device's Directory Service configuration).
membership based upon changes to the source group's membership.
sets, child groups, and Mandatory Baselines.
within the user interface.
- 10 -

Issues Resolved

The ZENworks Patch Management 6.4 release resolved the following issues:
• If the user cancels a reboot, the Agent for Windows Vista may return an error indicating that the deployment failed
• The Patch Developers Kit may not import all pre-requisites when importing to an air-gap server
• It is possible to create a Policy Set that has a Communication Interval of more than 365 days
• Windows XP with no service pack may fail to reboot if the screen saver is running with the Login dialog displayed
• ZENworks Patch Management Server may not start correctly if an earlier version of ZENworks Patch Management was previously installed on the target server
• Cancel ZENworks Patch Management Server installation and then re-trying the install may return an error
• Inventory Hardware may list devices with multiple CD-ROM types
• Patch Management Server Installation Continues When Entered E-mail Address is in an Invalid Format
• Uninstalling the agent while the DAU task is running may cause the uninstall to fail
• After uninstalling the 64 bit Agent for Windows, the control panel icon may remain
• User documentation does not describe the tab of ZENworks Patch Management Server. The relevant information for each of the Operating Systems supported by your ZENworks Patch Management Server
• When attempting to install ZENworks Patch Management Server on an unsupported operating system, .NET 1.1 may be installed before the installation stops
• When uninstalling an upgraded ZENworks Patch Management Server, various IIS and SQL warning messages may display.
• Linux/Unix/Mac/Netware Agent upgrade will fail to stop the DAU task if both directories exist
• Agent may wait the FastPath interval before attempting first communication with server
•A value of proxy
• If a Device Group is renamed, the display the original group name. The data displayed in the removing, and then re-adding, the device(s) from the group.
• Cancel of agent uninstall
• Replication may not function properly when using a non-authenticated proxy server
• The AMC installer may continue to install the AMC on an unsupported Operating System
• The AMC 'Remove Offline Agent' feature may not remove the offline agents as expected
• Using the AMC on a non-English Operating System may result in the inability to connect to the database
• Various User Interface typo's
Non Authenticated
ZENworks Patch Management Server v6.4 - Release Notes
OS Packs
under Route within Hardware Inventory indicates the Agent is not using a
Group List
during
“Gathering Information” may not restart agent
button added to the
OS Packs
column (for each of the member devices) will continue to
button will regenerate and synchronize the
Group List
Options > Technical Support
patchlink
column can be refreshed by
and
patchagent
- 11 -
Release Notes

Known Issues

Novell ZENworks Patch Management6.4 contains the following known issues:
• ZENworks Patch Management Agent for Windows installer will accept a serial number containing invalid characters during installation
• Multiple instances of the Desktop Deployment Manager may be running simultaneously
• Mandatory Baselines are using a 'hard-coded' Concurrent Deployment Limit of 25 instead of user-defined value
• The Deployment Wizard may return an 'Internal Server Error'
• Various User Guide typo's
• Disabled agents may incorrectly display within the Deployment Wizard
• Agents running 64-bit Windows may not display as 64-bit within inventory
• Agent Control Panel - Last / Next checked time is not correctly updated when a time zone change is made to the agent
• Agents installed on non-English operating systems may report inventory in English
• The ability to lock a device group’s software, hardware, and services inventory data and vulnerability status data is not available in this version of ZENworks Patch Management
• Package download may not resume when interrupted by a manual reboot
• Device Details Page does not list the Microsoft Windows version (such as Enterprise, Standard, Web Edition)
• The Inventory Collection Options field of a custom Policy Set may show as Not Assigned even after defining Inventory Collection Options
• Users may not be prompted to save changes when browsing away from a page
• All event sources may not get recored correctly within the Event log
• Agent is Not Setting Fastpath When Servers are Invalid
• Veritas Control Panel Icon is Not Present
• Uninstalling Novell ZENworks Patch Management may not remove the %PROGRAMFILES%\Novell folder
• It may be possible to open multiple instances of the Agent control panel applet
• Re-Deploy may provide an unclear status message when using the Agent for Microsoft Windows Vista
• The 'Agent Status' as reported on the dashboard may be incorrect
• PLUS is Used in Agent Log When Invalid Fastpath Server is Used
• Linux/Unix/Mac/Netware Agent Installer may not warn users when gzip is missing
• The Copy function on the Agent Installer page may not work correctly in 64 bit Windows
- 12 -
ZENworks Patch Management Server v6.4 - Release Notes
• If the hostname of your ZENworks Patch Management Server contains more than two dashes (-) you must either: use the server’s IP address, or install from the command prompt when installing your ZENworks Patch Management Agents.
• Proxy password may not be saved correctly during server installation
• Device Services Inventory may not correctly report the service state
• When entering WMI Fingerprints, semicolons cannot be used
• The FastPath Server information may not be displayed properly in control panel
• The silent uninstall may not completely uninstall the agent
• Users cannot log in to server using a user name that contains unicode characters
• Upgrading an SSL server may display an error indicating that the Certificate must be installed although the certificate is already installed
• During installation of the ZENworks Patch Management Agent for Windows, user entered data may not be validated
• During installation of the ZENworks Patch Management Agent for Linux/Unix/Mac/Netware, user entered data may not be validated
• Proxy URL must be formatted as "http(s)://hostname or IP Address" during the installation, however the agent control panel cannot accept the "http:// " protocol
• Some registry files may exist following an agent uninstall
• It may be possible to start multiple instances of the ZENworks Patch Management Agent installer
• Clearing the ZENworks Patch Management Agent for Linux/Unix/Mac/Netware Agent Log, may not clear log contents
• Clearing the ZENworks Patch Management Agent for Linux/Unix/Mac/Netware Error Log, may not clear log contents
• During the ZENworks Patch Management Agent for Linux/Unix/Mac/Netware installation, may not be able to indicate multiple groups
• Upgrading the ZENworks Patch Management Agent for Windows may require a reboot
• Although hardware inventory is not selected, the ZENworks Patch Management Agent for Windows may report hardware inventory
• Packages named using Double-byte characters may not display correctly
• The browse button may be cut off in the Agent Management Center installer
• The Agent Management Center installation creates a PatchLink Corporation registry key
• The Agent Management Center installer reports a company name of Macrovision
• The Agent Management Center does not function correctly on non--english operating systems
• When using the Detection and Installation wizard, unexpected buttons may become disabled
• The support information listed under Add/Remove programs may not list the complete Agent Management Center version information
• When installed using the Host IP Address, the Agent Management Center may display the host name as the computer name
• The Package Deployment Options window may truncate the Operating System information
- 13 -
Release Notes
• The Agent Installation page displays an incorrect version for the LUMN agent
• The Agent Installation page displays an incorrect version for the Content Update Tool
• E-mail notifications display Novell ZENworks Patch Management instead of Novell ZENworks Patch Management Server
• The Novell ZENworks Patch Management installation Password Complexity warning provides incorrect instructions
• If the Content Update Tool installation requires download of .NET Framework, an invalid URL may be opened
• When the Single Agent Installer is downloaded it displays a default name of 'Updateagent.msi'
• Novell ZENworks Patch Management installation does not warn users that system does not meet minimum memory requirements
• During agent installation the ZENworks Patch Management Server and Proxy information entered is not validated
• The TAB key may not change focus within the Novell ZENworks Patch Management installer
• Novell ZENworks Patch Management Installation does not write entries to the Application Event Log
• Non-Admin users cannot open the Novell Control Panel applet
• Users can start multiple instances of the ZENworks Patch Management Agent for Windows MSI installer
• Selections made on previous pages are not remembered as users page through the Novell ZENworks Patch Management user interface
• When not using SSL, ZENworks Patch Management Server to Agent communication is not encrypted
• If you connect to the ZENworks Patch Management Server using a URL that is not the server's Hostname, the URL displayed on the Agent Installers page may be invalid
• When exporting Mandatory Baseline information, all Agent details may not export
• The Context Sensitive help shows an incorrect path and filename for some log files
• Hardware inventory may report redundant information for Multimedia Sound Controller
• Windows Agent Hardware Inventory may not return results from IDE ATA/ATAPI controllers
• Agent Hardware Inventory detection may not return results from USB interfaces
• Installing an English version of Microsoft Office on a Chinese Microsoft Windows operating system may cause the DAU to report the language incorrectly
• Chinese characters may not display properly within Novell ZENworks Patch Management
• The Package Editor does not validate the License URL when entered
• The New Agent Registration alert may not send an e-mail as expected
• Re-selecting the Allow Use of WMI During Inventory Collection checkbox does not automatically select the associated WMI Inventory items
• Attempting to uninstall the ZENworks Patch Management Server may not display a warning message if the Agent is open
• Windows 98SE may display an error when closing the Control Panel applet
• The agent cannot be installed to the root of a drive, nor can it be installed more than 59 levels deep
- 14 -
ZENworks Patch Management Server v6.4 - Release Notes
• The Event log is incorrectly branded as PatchLink
• Although unsupported, the 32-bit Agent for Windows can be installed on a 64-bit operating system
• Although unsupported, the Agent for Windows can be installed on a mapped network drive which will result in errors during operation
• The Agent Management Center installs to %programfiles%\Patchlink
• May receive a version conflict error after attempting to rollback to 6.3 after upgrading to 6.4
• The Agent Management Center installs the agent to %programfiles%\Patchlink\Update Agent
• The Agent Management Center may incorrectly report that an install fails although the agent is successfully installed
• Although unsupported, the Agent Management Center may detect and attempt to install to Windows Vista
• From within the Agent Management Center the copy files test may fail for all agents
• Reports do not validate that the Start date is prior to the End date
• Upgrading from Novell ZENworks Patch Management 6.3 to 6.4 may result with two ZENworks Patch Management Server Icons on the user's Desktop
• The Novell Event Log does not have a description for Event ID (0) or Event ID (256)
• Within the Agent for pre-Vista Windows, modifications to the Proxy settings may not save
A new user role "Admin Manage Deployments" has been added. From the Deployments page, or Package Deployments page, users can view or edit only the deployments that created, unless assigned this role. Users can still view and edit all deployments created for Groups and Devices, to which they have access, from the Group Deployments or Device Deployments pages. Note: When editing an existing deployment only the deployment as it applies to the selected device or group is modified.
- 15 -
Novell, Inc.
1800 South Novell Place Provo, UT 84606
www.novell.com phone: 800.858.4000
© PatchLink Corporation 1997 - 2007. ALL RIGHTS RESERVED. U.S. Patent No. 6,990,660.
02_014N ZENworks Patch Management Server v6.4 Release Notes
Loading...