Clean up unused Patch Packages off the Notification Server and Package Servers

Products

• Patch Management Solution
• IT Management Suite
• Client Management Suite

Issue/Introduction

Unused patch packages can take up a lot of space on the Package Server, and also the Notification Server.  Follow the steps below to reclaim space from unused packages.

NOTE: "Unused patch packages" are defined as Software Updates that have been staged, that do no longer have a Policy.

Environment

ITMS 8.x

Patch Management 8.x

Resolution

NOTE for systems in a hierarchy:  Running Patch Cleanup tasks in a Hierarchy will remove patches from 'all' Package Servers.   Additionally, if Patch Policies have been created on a Child NS, these steps will need to be run for any Policies that were created locally, and also on Bulletins that were downloaded locally which were not downloaded on the Parent.

 

Before we get started with Cleanup, please check the Package Retention Policies for Patch and Software Packages as follows:

1) Patch retention: Settings > Software > Patch Management > Windows Settings > Windows Patch Remediation Settings > Packages tab.  Set the "Delete Packages After" to a reasonable setting.

2) SW Retention: Settings > Software > Notification Server > Site Server Settings > Package Service > Package Service Settings.  Set the "Delete packages files if they are unused" to a reasonable setting.  More information on the "Delete packages files if they are unused for" setting: KB 181052

NOTE: With the Packages already being in the 'trash can' and the 'trash can emptied' from the Notification Server, these two policies determine when we will 'take out the trash' and delete them off of the Package Servers. The Best Practice is to set these to a minimum value.

 

Automated clean up in 8.5 RU1+

1. Configure the Import Patch Data for Windows task (under SMP Console>Home menu>Patch Management>Metadata Import Task>General) to delete updates from policies and disable the bulletins, choosing one of the following options:

--Delete superseded updates from software update policies

"Enable this option to automatically delete the superseded updates from software update policies. You can later run the  Check Software Update Package Integrity task with the enabled option to delete downloaded packages for the deleted updates. If a policy contains updates from partially superseded bulletins, the superseded updates will not be deleted from the policy but their rollout will be disabled."

--Delete superseded updates from software update policies if policies with the corresponding superseding updates exist

"Enable this option to automatically delete the superseded updates from software update policies if policies with the corresponding superseding updates exist. You can later run the Check Software Update Package Integrity task with the enabled option to delete downloaded packages for the deleted updates. If a policy contains updates from partially superseded bulletins, the superseded updates will not be deleted from the policy but their rollout will be disabled."

2. Configure the Check Software Update Package Integrity task to clean up the software update packages (check the three boxes below).

3. Schedule the Check Software Update Package Integrity task to run on a periodic maintenance schedule (Daily is recommended).  This process will Delete the package files off of the Notification Server (default location: C:\Program Files\Altiris\Patch Management\Packages\Updates). 

 

 

 

Manual Cleanup in 8.5 RU1+

Patch Management Solution supports removing disabled bulletins from policies that were used on both, the parent SMP and the child SMP.

Using the Check Software Update Package Integrity task, Patch facilitates the deletion of unused packages for disabled bulletins. Packages deletion is propagated to package servers as well.

 

1. To disable bulletin(s), use right-click action Disable.

2. In the opened dialog window check Remove the selected bulletins from policies.

Confirm the action by clicking on Disable software bulletins button.  The selected bulletin(s) will be deleted from the policies. If a policy contains only bulletin(s) selected for removal, it is deleted also.

3. Run Check Software Update Package Integrity task now or on a recurring schedule (Daily is recommended).  This process will Delete the package files off of the Notification Server (default location: C:\Program Files\Altiris\Patch Management\Packages\Updates). 

 

 

Additional Information

Additional information on the "Delete packages files if they are unused for" setting: KB 181052