Welcome
Patch User Guides
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
Patch for SUSE Linux Enterprise User's Guide
BigFix Patch for SUSE Linux Enterprise provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all SUSE Linux endpoints.
Using the download cacher
The download cacher is a standalone command-line tool that is designed to download and cache files required for caching. The pre-cached files can be used by the download plug-in to patch the endpoints.

BigFix Documentation Homepage
BigFix 10 Patch Documentation
Welcome to the BigFix Patch documentation, where you can find information about how to install, maintain, and use the BigFix Patch.
Platform
Patch Overview
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
Patch User Guides
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
- Patch for Windows User's Guide
  BigFix Patch for Windows™ provides Fixlets for Microsoft™ security and non-security patches. Dashboards, wizards, and reports aid you in managing updates for various endpoint devices.
- Patch for AIX User's Guide
  BigFix® for Patch for AIX® provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility, and enforcement to deploy and manage patches to all AIX endpoints.
- Patch for Red Hat Enterprise Linux User's Guide
  BigFix Patch for Red Hat Enterprise Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility, and enforcement to deploy and manage patches to all Red Hat Enterprise Linux endpoints.
- Patch for CentOS Linux User's Guide
  BigFix® Patch for CentOS Linux™ provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all CentOs endpoints.
- Patch for Amazon Linux User's Guide
  BigFix® Patch for Amazon Linux™ provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Amazon Linux endpoints.
- Patch for SUSE Linux Enterprise User's Guide
  BigFix Patch for SUSE Linux Enterprise provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all SUSE Linux endpoints.
  - Special notice
  - Edition notice
  - Overview
    The BigFix Patch solution, which includes deploying a multi-purpose, lightweight agent to all endpoint devices, supports a wide variety of device types ranging from workstations and servers to mobile and point-of-sale (POS) devices.
  - Using the download plug-in
    The download plug-in is an executable program that downloads relevant packages directly from the patch vendor. Fixlets use an internal protocol to communicate with the download plug-in to download files. These Fixlets are based on updates made by the vendor.
  - Using the download cacher
    The download cacher is a standalone command-line tool that is designed to download and cache files required for caching. The pre-cached files can be used by the download plug-in to patch the endpoints.
    - SCC download cacher usage information
      Use the SUSE Customer Center (SCC) download cacher to download and cache SUSE patches in air-gapped environments. This tool supports the Patches for SLE 12 Native Tools, Patches for SLE 12 on System z, Patches for SLE 11 Native Tools, and Patches for SLE 11 on System z Native Tools sites.
    - SUSE download cacher usage information
      Use the SUSE download cacher to download and cache SUSE 11 patches for System Z (s390x) in air-gapped environments. This tool supports the Patches for SLE11 System Z site and can only be run on Windows systems.
    - Using the SCC download cacher for air-gapped environments
      You can use the SCC download cacher for air-gapped environments by using the buildRepo subcommand to download all patches for a repository to a specified directory.
    - Caching packages on the sha1 folder
      You can use the SCC Download Cacher to cache packages directly on an internet-enabled BigFix server's sha1 folder to improve performance during the Fixlet deployment.
    - Caching packages on the local cache folder
      You can use the SCC Download Cacher to cache packages on an internet-enabled BigFix server. You can configure the BigFix Server to use the repository metadata and packages from both the cache folder and the internet.
  - Using BigFix Patch for SUSE Linux Enterprise
    BigFix Patch provides a simplified patching process for downloading and installing patches that are relevant to a target endpoint. Use the Fixlets on the Patching Support and the various Patches for SUSE Linux Enterprise Fixlet sites to apply patches to your deployment.
  - Multiple-Package Baseline Installation
    BigFix Patch provides a solution to combine the installation of updates for multiple packages in a baseline into a single task, which can reduce the execution time of the baseline.
  - Custom repositories management
    You can set up your custom repositories and Subscription Management Tool (SMT) to manage patches for SUSE Linux Enterprise version 11 and later. This solution allows for multiple repositories and SMTs on the entire deployment.
  - SLE Btrfs snapshot management
    View and manage SLE Btrfs snapshots from the BigFix console. Snapshot management uses Snapper's ability to roll back Btrfs file system snapshots. This feature works with SUSE Linux Enterprise version 11 SP2 and later.
  - Support
    For more information about this product, see the following resources:
  - Troubleshooting
    When problems occur, you can determine what went wrong by viewing messages in the appropriate log files that provide information about how to correct errors.
  - Frequently asked questions
    To better understand Patch Management for SUSE Linux™ Enterprise, read the following questions and answers.
  - Notices
- Patch for Ubuntu User's Guide
  BigFix Patch for Ubuntu provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Ubuntu endpoints.
- Patch for Oracle Linux User's Guide
  BigFix® Patches for Oracle Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Oracle Linux endpoints.
- Patch for Solaris User's Guide
  BigFix Patch for Solaris provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Solaris endpoints.
- Patch for HP-UX User's Guide
  BigFix® for Patch for HP-UX provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all HP-UX endpoints.
- Patch for Mac OS X User's Guide
  BigFix® for Patch for Mac OS X provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Mac OS X endpoints.
- Patch for Debian User's Guide
  BigFix Patch for Debian provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Debian endpoints.
- Patch for VMware ESXi User's Guide
  BigFix Patch for VMware ESXi provides you unified, near real-time visibility to manage patches to all VMware ESXi endpoints from a single console.
- Patch for Raspbian User's Guide
  BigFix Patch for Raspbian provides Fixlets that you use to manage the latest updates and service packs that Raspberry Pi releases. These Fixlets are available through the Patches for Raspbian sites.
- Patch for Rocky Linux User's Guide
  BigFix Patch for Rocky Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Rocky Linux endpoints.
- Patch for Virtual Endpoint Manager User's Guide
  BigFix® for Virtual Endpoint Manager provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches in a virtual environment.
- Updates for Middleware Applications
  Middleware patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
- Supersedence for Non-Windows
  This topic describes how supersedence works in Patch.
Detailed system requirements
The tables in this section provide detailed information about the system requirements for BigFix 10.
Patch guides in PDF format
Following is a list of links to the BigFix Patch user guides in PDF format:

Using the download cacher

The download cacher is a standalone command-line tool that is designed to download and cache files required for caching. The pre-cached files can be used by the download plug-in to patch the endpoints.

The download cacher is designed to be used for air-gapped environments. If the BigFix server has access to the Internet, use the download plug-in. You must register the download plug-in from the Manage Download Plug-ins dashboard. For x86 or x86_64 SUSE patches, see Registering the SCC download plug-in. For SUSE patches for System Z (s390x), see Registering the SUSE download plug-in.

The download cacher is designed to be used for air-gapped environments. Use this tool to download and cache a large number of packages that are required by the Fixlets. By pre-caching the files, execution of actions are faster because you do not need to download the files from the Internet before distributing them to BigFix clients.

Note: If the BigFix server has access to the Internet, use the download plug-in. You must register the download plug-in from the Manage Download Plug-ins dashboard. For more information, see Registering the SCC download plug-in.

You can access the tool by downloading and running it manually.