Home
Patch User Guides
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
Patch for Windows User's Guide
BigFix Patch for Windows™ provides Fixlets for Microsoft™ security and non-security patches. Dashboards, wizards, and reports aid you in managing updates for various endpoint devices.
Patch for Windows
You can manage Fixlets using dashboards, reports, and wizards. You can deploy, fix, and uninstall Fixlets. You can also view the breakdown of Fixlets available or needed in your deployment.
Windows Patch Client settings
Windows patch client settings refer to the configurations and preferences established within the Windows operating system for managing and applying software patches, updates, and fixes.

Patch User Guides
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
- Patch for Windows User's Guide
  BigFix Patch for Windows™ provides Fixlets for Microsoft™ security and non-security patches. Dashboards, wizards, and reports aid you in managing updates for various endpoint devices.
  - Overview
    Patch for Windows™ creates Fixlets for the patches that Microsoft™ issues. The BigFix agent checks the registry, systems language, and other factors to determine if the patches are not installed or if an installed patch is corrupt. Notes® placed in the Fixlet® descriptions help Console Operators work around potential issues.
  - Patch for Windows
    You can manage Fixlets using dashboards, reports, and wizards. You can deploy, fix, and uninstall Fixlets. You can also view the breakdown of Fixlets available or needed in your deployment.
    - Patch using Fixlets
      From the console, you can select the action for the appropriate Fixlets that you want to deploy. The action propagates across your deployment. Patches are applied based on the settings that you make in the Fixlet work area and the Take Action dialog.
    - Supersedence in Windows
      Windows supersedence refers to the process by which a newer version of a software or update replaces and makes the previous version obsolete.
    - Windows Patch Client settings
      Windows patch client settings refer to the configurations and preferences established within the Windows operating system for managing and applying software patches, updates, and fixes.
    - Patches for Windows Overview dashboard
      Use the Patches for Windows Overview Dashboard to view the breakdown of security and non-security patches that are needed in your deployment.
    - Patch Overview dashboard
      View patch site information in your deployment including the most relevant items in deployment and comparisons of critical patches against other patches by site. The dashboard shows all the patches in your deployment, not just those for Windows. Set view options to see the last 10 actions done for every site.
    - Uninstalling patches
      Enter the Microsoft Knowledge Base (KB) number in the Rollback Task Wizard to uninstall patches.
    - Fixing Corrupt Patches
      Use the Corrupt Fixlet Wizard to fix multiple corrupt Fixlets and to create Fixlet copies or baselines without rebooting.
    - Using the Corrupt Patch Deployment wizard
      Use the Corrupt Patch Deployment Wizard to fix corrupt Fixlets by using Fixlet copies or existing baselines.
    - Patch Microsoft Office
      You can deploy Microsoft office updates and patches using Administrative, Network, and Local installation.
  - Installing and updating Click-to-Run products
    Install and update content for Microsoft Click-to-Run products through BigFix Patches for Windows.
  - Navigating Windows Application Update Patches in the BigFix console
    From the console, you can select the Action for the appropriate Fixlets that you want to deploy. The Action propagates across your deployment and applies patches based on the settings that you make in the Fixlet work area and the Take Action dialog.
  - Using the custom repository setting feature
    Utilizing the custom repository setting feature involves configuring a specific repository or source from which software or updates can be retrieved, allowing for greater flexibility and control over the update process.
  - Frequently asked questions
    Learn the answers to frequently asked questions.
- Patch for AIX User's Guide
  BigFix® for Patch for AIX® provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility, and enforcement to deploy and manage patches to all AIX endpoints.
- Patch for Red Hat Enterprise Linux User's Guide
  BigFix Patch for Red Hat Enterprise Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility, and enforcement to deploy and manage patches to all Red Hat Enterprise Linux endpoints.
- Patch for CentOS Linux User's Guide
  BigFix® Patch for CentOS Linux™ provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all CentOs endpoints.
- Patch for Amazon Linux User's Guide
  BigFix® Patch for Amazon Linux™ provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Amazon Linux endpoints.
- Patch for SUSE Linux Enterprise User's Guide
  BigFix Patch for SUSE Linux Enterprise provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all SUSE Linux endpoints.
- Patch for Ubuntu User's Guide
  BigFix Patch for Ubuntu provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Ubuntu endpoints.
- Patch for Oracle Linux User's Guide
  BigFix® Patches for Oracle Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Oracle Linux endpoints.
- Patch for Solaris User's Guide
  BigFix Patch for Solaris provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Solaris endpoints.
- Patch for HP-UX User's Guide
  BigFix® for Patch for HP-UX provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all HP-UX endpoints.
- Patch for Mac OS X User's Guide
  BigFix® for Patch for Mac OS X provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Mac OS X endpoints.
- Patch for Debian User's Guide
  BigFix Patch for Debian provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Debian endpoints.
- Patch for VMware ESXi User's Guide
  BigFix Patch for VMware ESXi provides you unified, near real-time visibility to manage patches to all VMware ESXi endpoints from a single console.
- Patch for Raspbian User's Guide
  BigFix Patch for Raspbian provides Fixlets that you use to manage the latest updates and service packs that Raspberry Pi releases. These Fixlets are available through the Patches for Raspbian sites.
- Patch for Rocky Linux User's Guide
  BigFix Patch for Rocky Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Rocky Linux endpoints.
- Patch for Virtual Endpoint Manager User's Guide
  BigFix® for Virtual Endpoint Manager provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches in a virtual environment.
- Updates for Middleware Applications
  Middleware patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
- Supersedence for Non-Windows
  This topic describes how supersedence works in Patch.

Windows Patch Client settings

Windows patch client settings refer to the configurations and preferences established within the Windows operating system for managing and applying software patches, updates, and fixes.

BigFix Patch introduces the following Client settings which are used in Windows patching module:

_BESClient_WindowsOS_BypassPendingRestartRelevance
All Windows Fixlets that include not pending restart relevance recognizes the _BESClient_WindowsOS_BypassPendingRestartRelevance Client setting.
When the _BESClient_WindowsOS_BypassPendingRestartRelevance is set to 1, the Client computer ignores the not pending restart relevance Fixlets that are checking for Client setting. This helps in generating an accurate patching report or compliance report.
If the setting does not exist or if _BESClient_WindowsOS_BypassPendingRestartRelevance is set to 0, the not pending restart relevance statement takes into effect.
_BESClient_WindowsOS_EnableSupersededEval
The latest version of the BigFix Patch supports evaluating the applicability of the superseded patches. This provides you with an option to continue reporting relevance to endpoints that do not have patch installed (or a superseding patch).
Setting the client configuration parameter _BESClient_WindowsOS_EnableSupersededEval to 1 deploys the Superseded Patch on an endpoint.