Subscription Service Content Download

The Subscription Service Content Download page allows you to configure the subscription download options for the ZENworks Primary Server. You can select the languages that are used within your network to ensure that you only download the patches that are most applicable for your organization. The next time replication occurs, only those patches specific to the languages are downloaded, which saves time and disk space on your ZENworks Primary Server.

NOTE:ZENworks does not recommend selecting all languages because each language can represent hundreds of patches. Downloading unnecessary languages can result in thousands of useless patch definitions within your ZENworks Primary Server database that would then need to be disabled in the Patch Management tab.

Item

Description

Select the platforms to download

Enables you to select the operating system platform for which you want to download patches. For example, if you select the Windows check box, only Windows patches are downloaded.

Redhat Linux Subscription Management

Enables you to retain the current default subscription type (Classic) for Redhat systems or to migrate to the preferred subscription type by choosing RHSM, which is a much more efficient method of getting security content from Redhat. For information on RHSM migration, see the ZENworks Patch Management Reference on the ZENworks Documentation web site.

RPM Dependency

This Option will be enabled ONLY when the LINUX platform is selected. Selecting this check box will download all the root level dependencies that will be necessary to resolve any vulnerabilities.

Choose Windows your language options

Enables you to select the language of patches you want to download. For example, if you select the French check box, only French language patches are downloaded.

Mix Multiple Languages

Enables you to combine all languages into each Patch Detection Assignment (not recommended).

SSL

Enables you to turn secured downloading on or off.

Cache patch bundles to satellite servers

Enables you to cache patch bundles to the servers or workstations that are managed by primary servers.

Cache patch bundles to primary servers

Enables you to cache patch bundles to primary servers only.

Download location for patch content

By default all the patches will be downloaded to the ZPM directory which is enabled, but, if necessary, select the radio button for Bundle content directory to download it there.

  • ZPM directory: Downloads patch content to installpath\zenworks\zpm (Windows) or /var/opt/Novell/zenworks/zpm (Linux)

  • Bundle content directory: Downloads patch content to installationpath\zenworks\work\content-repo (Windows) or /var/opt/Novell/zenworks/content-repo (Linux)

Enable not applicable patches

Enables patches that aren’t applicable to your enterprise. This option may slow performance if enabled.

Enable PD caching

Enables local cache for faster Patch Detection results, which eliminates the decryption and decompression of Vulnerability Detections. Only use this feature if you trust end users to stay out of the ZENWorks Agent directory, ideally, workstations users shouldn’t have access to Zenworks agent directory.

Select vendors to use in the system

Enables you to select the vendors to use in the system. By default it is ALL. For example, if you want to select the patches only for Micro Focus not the rest available. Select the radio button Selected and then select the Novell check box, only Micro Focus patches are downloaded.

NOTE:This list of vendors will not be populated until the initial subscription update has completed.

Patch Policy uses only applicable patches

Configures the system to only have applicable patches available for selection when building patch policies.

Patch feed filtering

Disables content within the system based on the criteria you select. These options are useful for filtering out obsolete content. ALL options are selected by default.

Enable clean up of content for disabled patches

Deletes the patch listing and any cached bundles for that patch that meet the following conditions:

  • The patch is disabled.

  • The patch has been disabled longer than the time duration selected from the drop-down.

NOTE:The bundles are not deleted until the next subscription update.

IMPORTANT:Customers with larger network environments should select both Cache patch bundles to satellite servers and Cache patch bundles to primary servers.

Within an enterprise network environment, the customer usually installs more than one ZCM Primary Server. Although only one of these servers can be used to download patches, every Primary Server has a cache of bundle content for distribution to the agents that are closest to it within the zone. Thus, when an agent wants to get a bundle, it can get the bundle directly from its closest Primary Server rather than the Primary Server where the patches were downloaded.

The Satellites that are installed within the customer network can also serve as a cache for bundle content. If an agent is at a remote branch office with a Satellite, it can get its content directly from the Satellite rather than the Primary Server where patches were downloaded.

Button

Action

OK

Enables you to go back to the Configuration page

Apply

Enables you to save the changes made to the page

Reset

Enables you to reset the selected options

Cancel

Enables you to cancel the last action performed

Recommendations for using patches:

  • Customers should disable patches that they no longer require, because this minimizes the volume of patch scan data stored each day, as well as the time taken to scan each of the endpoint devices.

  • We highly recommend that customers cache only the patches they need. When a patch is cached to the Primary Server where patches are downloaded, it normally needs to be copied to all Primary Servers and Satellites within the zone. Downloading all patches wastes a lot of space and bandwidth within the ZENworks Configuration Management content distribution network.

For trademark and copyright information, see Legal Notice.