All the Primary Servers should be updated before you update the agents and the Satellite Servers in the zone. To ensure the proper functioning of ZENworks, it is recommended that all Primary Servers are updated in as short a time as possible - ideally, immediately after the first Primary Server is updated.
All the primary servers can be updated simultaneously by assigning the system update to all servers in the zone. However, the administrator can always choose to update one of the Primary Servers and then the remaining Primary Servers.
NOTE:
The ZENworks Updater Service should be running to initiate an update on Primary Servers and Windows Agents.
The ZENworks Agent Service should be running to initiate an update on Linux Agents.
If a dedicated system update server is configured in the zone, this server should be the first to be updated.
Before updating the ZENworks Agent on managed devices, ensure that any reboots required from applying a policy are completed.
Windows 10 prerequisite:
When updating the ZENworks Agent to ZENworks 2017 Update 1 on a Windows 10 device, you need to disable Client Self Defense and reboot the device before running the update. Self Defense can be re-enabled after the update. This prerequisite is not applicable when updating the ZENworks Agent from ZENworks 2017 Update 1 to a later version. For information about the Self Defense setting, see Configuring the Agent Security
in the ZENworks Discovery, Deployment, and Retirement Reference.
If you are updating multiple agents, you can use a Quick Task in the ZENworks Control Center to reboot multiple devices after disabling Client Self Defense. For information about the Quick Task feature, see Using Quick Tasks
in the ZENworks Control Center Reference.
Full Disk Encryption Agent prerequisites: In ZENworks 2017 Update 1, Full Disk Encryption incorporates a new Linux kernel that provides some fundamental enhancements. See the ZENworks What’s New Reference. In order to get the new enhancements, these changes require the removal of pre-Update 1 Disk Encryption policies and full decryption of disks before running the update on ZENworks agents. You then need to apply a new Disk Encryption policy created on a ZENworks 2017 Update 1 server.
For more information about Full Disk Encryption update prerequisites and other considerations for doing a system update on managed devices using Full Disk Encryption, see the ZENworks 2017 Update 3 - Full Disk Encryption Update Reference.