How to download and install Service Updates (SU)

• • Download the latest patch content
  • Preparing the Core Server for installing the update
  • Update the Core Server
  • Update Rollup Cores, Remote Consoles, and clients

Download the latest patch content

1. Login to the Ivanti/LANDESK Console.
   
2. In the Patch and Compliance tool, click the Download Updates icon.
   
3. In the Download Updates window, check the box under Windows | Software Updates | Ivanti 10.1.1 Software Updates.   The screenshot is from a 2017.1 Core Server. For 2016.3, the box to check is LANDESK 10.1 Software Updates.
4. Click the Download now button at the bottom of the screen.
   
5. When the download completes, click the Close button.
   
6. In the Patch and Compliance tool, click the filter on the upper left side (All types) and select the LANDESK update option from the list.
   
7. In the Patch and Compliance tool, click on LANDESK Updates (All items) folder on the left side.
8. Click on the Severity column at the top to sort the results by the severity.
9. Look for vulnerabilities/patches that have Service Pack in the Severity column. Find the service pack with the newest date in the Date published column. This will be the latest Service Update available.
   
   
   Note: Only the newest Service update is needed because all of the fixes in the previous updates are included in the newest one.
10. Double click the newest one to open its properties.
    
11. In properties of the patch, right-click the detection rule that has Core in the name at the end and select the Download Patch option. Do not select the one with RollupCore at the end of the name.
    
12. When the patch finishes downloading, remember the name of the patch file and the location it was downloaded to so you can get to it for later steps.
13. Click Close.
    
14. Right-click the detection rule with clientat the end of the name and download it.
15. When the client patch finishes downloading, close the download window then click OK to close the patch window.
16. In Windows Explorer, go to the folder where the Core patch was downloaded and find the file.
17. Right-click the patch file and select Properties.
    
18. On the General tab, if there is an Unblock button at the bottom near the Read-only check box, click the Unblock button to unblock the file.
19. Unzip the file in a folder on the Core Server.

Preparing the Core Server for installing the update

1. Backup the Core Server by following your Corporate policies for backing up servers.
2. Backup the Ivanti/LANDESK database. Get help from your Database Administrator if you do not know how to do this.
   
   
   Note: Do not skip the backup steps because they are your safety net in case something goes wrong during the install of the update.
   
   
3. Updates can fail if there are any mounted WIM files on the Core Server. The following community article has information on cleaning up the WIM files before installing the update:
   
   How To: Cleanup WIM Images Before Upgrading/Patching Core
4. Alternate Data Streams (ADS) on the Core Server or on the update files can cause the upgrade to not update all files and causes strange behavior after the upgrade is complete. Remove ADS on the Core Server before installing the update. The following community article has information on Streams and how to clean it up:
   
   Streams; and why you should remove them.

Update the Core Server

1. Reboot the Core Server.
2. Login to the Core Server with an admin account. If you are doing this through Windows Remote Desktop (RDP), make sure you use the /admin switch when starting the RDP session.
3. Close the Ivanti/LANDESK Console if it is running and close any other applications that are running on the Core Server.
4. Stop any Antivirus software and other Security software that is running on the Core Server so they cannot interfere with the update.
5. It is not required to stop the Ivanti/LANDESK services before installing the update but for best results, it is recommended that you manually stop all of the Ivanti/LANDESK services that are running to make sure they stop successfully.
6. In Windows Explorer, right-click the SETUP.EXE file in the folder where you unzipped the update and select the "Run as administrator" option.
7. After the update finishes installing, reboot the Core Server.

Update Rollup Cores, Remote Consoles, and clients

The Remote Consoles and Rollup Cores can be patched manually by running the same SETUP.EXE that was run on the Core Server to update it. The following steps show how to use Patch Manager to update the Rollup Cores, Remote Consoles, and Clients.

1. In the Patch and Compliance tool in the Console, right-click the update and select the Repair option in the list.
   
2. Click on Agent settings on the left side.
3. Select a different Distribution and patch setting or Reboot setting to be used for this task if the ones used in the Agent installed on the clients do not have the options you want for installing the patch.
4. Click Save. This will create the task and take you to the Scheduled Tasks tool.
   
5. Add targets to the task by dragging and dropping the computers from All Devices in the Console on the task or add queries to the task.
6. Right-click the task and select the Start | Now option to start the task immediately or set the start time that you want the task to start.
7. Wait for the task to complete.