4.4 Configuring Ondemand Content Masters for Patch Management

ZENworks Patch Management can use one or more Ondemand Content Masters (OCMs) to download patch content from the Internet. If an OCM requires the use of a proxy server to access the Internet, you must configure the OCM appropriately. In addition, you must configure the OCM (or proxy server) to enable access to the vendor sites (URLs) from which the patch content is downloaded.

4.4.1 Configuring an Ondemand Content Server to Use a Proxy Server

If the OCM requires a proxy to access the service, the OCM server’s Subscription proxy configuration file is used.

If you have configured your network to use a proxy server, you must configure the proxy server subscriptions.

  1. On the Primary Server on which the Ondemant Content Master is configured to run, navigate to the lpm-server.properties file.

    • Linux: /etc/opt/microfocus/zenworks/

    • Windows: %ZENSERVER_HOME%\conf

    An example of the content within the lpm-server.properties file is displayed below:

    Debug=false

    TTL=24

    subscription-proxyaddress=

    subscription-proxyport=

    subscription-proxyuser=

    subscription-proxypassword=

    subscription-useNTLM=false

  2. Modify and save the file with the following subscription proxy details:

    • Set the value of subscription-proxyaddress to the IP address of the proxy server.

    • Set the value of subscription-proxyport to the port number of the proxy server.

    • (Conditional) If the proxy is authentication-based, set the value of subscriptionproxyuser to the name of the proxy user.

    • (Conditional) If the proxy is authentication-based, set the value of subscriptionproxypassword to the password associated with the proxy user name.

    • It is recommended to use the zman srpp command to specify an obfuscated password instead of specifying the raw password.

    • (Conditional) If the proxy server uses an NTLM realm, set the value of subscriptionuseNTLM to true. By default, the value is false.

  3. Restart the ZENworks services.

4.4.2 Enabling Firewall Access to Patch Vendor URLs

Each OCM (or proxy server) must be configured to allow firewall access to vendor sites such as Microsoft and Adobe from which ZENworks Patch Management downloads patch content. A complete list of vendor URLs is provided in the spreadsheet below. Download the spreadsheet to access the URLs for your Firewall policies:

https://www.microfocus.com/documentation/zenworks-resources/ZPM_URLs.xlsx