Installation System
-
Microsoft Windows NT 4.0 SP6a, NT 4.0 SP6 Terminal Server Edition,
Windows 2000, Windows 2003, or Windows XP Professional (English)
Note:
For NT systems ONLY, you also need:
Note:
On Windows NT4 systems, the offline browsing pack must be installed.
This can be found in IE 5 SP1 or "Gold" edition. The change updates
the Schedule Service atsvc.exe to the Schedule Task Tool mstask.exe
according to Microsoft. For details, consult Microsoft article,
Q236773.
-
English version operating system (for both software and database)
-
500 MHz CPU or higher
Recomendations:
- 500 systems or fewer, 1.5 GHz Pentium III-compatible or faster processor
- 500-1000 systems, 2.5 GHz Pentium IV-compatible or faster processor
- 1000 systems or more, 3 GHz Pentium IV-compatible or faster processor
-
256 MB RAM or greater
Note:
In addition to CPU speed and available RAM, network traffic
and resource utilization (such as how many other application are running
on the installed system) also affect performance.
Recommendations:
500 systems or fewer, 512 MB of RAM
500-1000 systems, 1 GB of RAM
1000 systems or more, 2 GB of RAM
-
Internet Explorer 5.01 or higher
Recommendation:
Internet connectivity for product and database updates.
-
Microsoft Installer (MSI)
-
Microsoft Task Scheduler with scheduling service running
-
NetBIOS (over TCP/IP) protocol support (depending on discovery method)
-
Remote Registry Service must be enabled
-
Valid user account with access rights on the remote database (if remote) and
administrator rights on the local machine / system where Patch Manager is installed
-
Screen resolution of 800 x 600 or higher
Recommendation:
1024 x 768 Super VGA
-
To use alerts and triggers, a SNMP manager (v2c traps) or a mail server must
be available on the network
-
~35 MB free disk space for software
-
~60 MB free disk space available for MSDE installation (if necessary)
-
Sufficient disk space for the patch repository(ies)
Recommendation:
270 MB available disk space
Database Considerations
-
Microsoft SQL Server 2000 or MSDE 2000 for the database.
Notes:
- MSDE is a free Microsoft database with a 2.0 GB data limit, making it
a viable option for testing the database functionality or small environments.
MSDE can be upgraded to SQL Server at any time (without any data loss).
- Resource: Microsoft's requirements for SQL are available at:
http://www.microsoft.com/sql/evaluation/sysreqs/2000/default.asp
- Database Creators role to create a new database on an existing SQL server
- Database "bulk insert" administrator role
- Roles db_datareader, db_datawriter, and public rights to access the database
-
SQL Client
-
Sufficient disk space for the patch knowledge database:
Recommendations:
- 500 systems or fewer, 250 MB available disk space
- 500-1000 systems, 500 MB available disk space
- 1000 systems or more, 1 GB available disk space
Disk Usage per system:
- ≈ 1.2KB of database space per system discovered
- ≈ 100KB of database space per system per scan
- ≈ 1KB of database space per system per patch pushed
Disk Usage per 1000 systems:
- ≈ 1MB for the systems
- ≈ 100MB per full network scan
- ≈ 1MB per full network push
Non-Agent Windows Target Systems
SCANNING / ANALYSIS
-
Microsoft Windows NT 4.0 SP6a, Windows 2000, Windows XP Professional, Windows 2003
Recommendations:
- Windows 2000 SP4
- Windows XP Professional SP2
- Windows 2003 Standard edition, Enterprise Edition, or Datacenter with SP1 or higher
- Windows 2003 Small Business Server with SP1 or higher
Note:
On Windows NT4 systems, the offline browsing pack must be installed.
This can be found in IE 5 SP1 or "Gold" edition. The change updates
the Schedule Service atsvc.exe to the Schedule Task Tool mstask.exe
according to Microsoft. For details, consult Microsoft article,
Q236773.
-
Remote Registry Service enabled
-
NetBIOS (over TCP/IP) protocol support (depending on discovery method)
-
File and Print sharing protocol enabled (for Microsoft networks)
-
Within workgroups, a local admin account on each system that matches the username
and password of the account actively using Patch Manager on the installation system
-
Windows Installer 2.0 or higher (for MSOffice support)
-
To use Wake-on-LAN feature, system and network card must support and be
configured for Wake-on-LAN packets.
REMEDIATION / ROLLBACK
-
Domain (or Enterprise) Administrator rights for all the domains containing
systems you want to analyze
-
Microsoft Task Scheduler
-
Internet Explorer 5.01 or higher
-
Sufficient disk space for the patch(es) being installed
Note:
Only patches with vendor support for rollback can be uninstalled through
Patch Manager's rollback capability. Others must be uninstalled manually.
-
A share directory
Agent Windows Target Systems
SCANNING / ANALYSIS
-
Microsoft Windows NT 4.0 SP6a, Windows 2000, Windows XP Professional, Windows 2003
Recommendations:
Windows 2003 Standard edition, Enterprise Edition, or Datacenter with SP1 or higher
Windows 2003 Small Business Server with SP1 or higher
Note:
On Windows NT4 systems, the offline browsing pack must be installed. This can be found in IE 5 SP1 or "Gold" edition. The change updates
the Schedule Service atsvc.exe to the Schedule Task Tool mstask.exe
according to Microsoft. For details, consult Microsoft article,
Q236773.
-
Connection / Communication between agent system and agent manager system
over HTTP on port 80 (configurable in environment and with firewall)
-
Windows Installer 2.0 or higher (for MSOffice support)
REMEDIATION / ROLLBACK
-
NetBIOS access to the patch repository
-
Domain (or Enterprise) Administrator rights for all the domains containing
systems you want to analyze
-
Internet Explorer 5.01 or higher
-
Sufficient disk space for the patch(es) being installed
Note:
Only patches with vendor support for rollback can be uninstalled through
Patch Manager's rollback capability. Others must be uninstalled manually.
AGENT INSTALLATION
-
Microsoft Windows NT 4.0 SP6a, Windows 2000, Windows XP Professional, Windows 2003
-
Connection / Communication between agent system and agent manager system
over HTTP on port 80 (configurable in environment and with firewall)
-
NetBIOS (over TCP/IP) - OR - WMI/DCOM protocol support
Note:
NetBIOS (over TCP/IP) is required for Workgroups or domains
without trusts and for NT4 systems
-
File and Print sharing protocol enabled (for Microsoft networks)
-
Microsoft Installer (MSI) version 1.1 or higher
-
Within workgroups, a local admin account on each system that matches the username
and password of the account actively using Patch Manager on the installation system
-
Memory must be at least the minimum specified for the OS of target
-
40MB of disk space for agent software
-
A share directory (for agent deployment using NetBIOS over TCP/IP)
Agent Manager Host System
-
Windows 2000 SP4 (or higher) Server or Windows 2003 Server
-
NTFS permissions of Read, Write, and Execute to the Agent Manager
install directory
Note:
Agent Manager cannot be installed on FAT32 systems.
-
Ecora Patch Manager 4.0 or higher
-
Microsoft SQL Server 2000 or MSDE 2000 for the database
-
Internet Information Services (Microsoft IIS) version 5.0 or higher
Note:
Windows NT 4.0 ships with a lower version of IIS and does not meet the system requirements.
-
At least one web site must be running
-
Operator access to the chosen website virtual directory on the web server
-
The "World Wide Web Publishing Service" (svchost.exe -k iissvcs for
Windows 2003 or inetinfo.exe for Windows 2000) must be running
-
Microsoft .Net Framework (version 1.1)
- On Windows 2003 platforms, ASP.NET component of Application Server
must be installed
- On Windows 2000 platforms, .NET should be installed after IIS
(if not, ASP.NET should be registered manually using
aspnet_regiis.exe (more information is available
here).
- If the system became a domain controller after .NET was installed,
.NET should be reinstalled (to grant necessary permissions).
-
MDAC 2.7 or higher
-
Microsoft Windows Installer 2 or higher
-
Microsoft Windows Script 5.6 or higher on Windows 2000
(download here)
-
Domain or local administrative rights
Reporting Center Host System
-
Internet Information Services (Microsoft IIS) version 5.0 or higher
Note:
Windows NT 4.0 ships with a lower version of IIS and does not meet the system requirements.
Note:
Ecora does NOT recommend installing Reporting Center on a Domain Controller due to security best practices
-
Operator access to the "default website" virtual directory on the web server
-
Microsoft Installer
-
Microsoft .Net Framework (version 1.1)
-
MDAC 2.7 or higher
-
Domain or local admin rights (Reporting Center will attempt to create a
domain user account; if this fails, it will create the user as a local user.)
-
Integrated Windows Authentication access enabled for the default website
-
If installed on NTFS partition, NTFS permissions of Read/Write/Execute
to the Reporting Center install directory
Note:
To access and fully utilize the reporting center, the machine accessing the Reporting Center must have IE 5.5 or higher installed.
Supported
Ecora Patch Manager supports patches from Microsoft that have been formally
released with a Security Bulletin (with very rare exceptions) and publicly
available patches from Sun.
-
Microsoft Windows 2000, Windows 2003, Windows XP Professional (International)
-
Microsoft Windows NT 4.0 SP6a, NT 4.0 SP6 Terminal Server Edition (International)
-
Microsoft Office 2000 SR1-a or higher (English)
-
Microsoft Office XP, Office 2003, including SP2 (English)
-
Microsoft Internet Explorer 5.01 or higher (International)
-
Microsoft Outlook Express 5.01, 5.5, 6.0 (English)
-
Microsoft Outlook Express 6.0 for Windows Server 2003 (English)
-
Microsoft Exchange 5.5 and 2000 including SP3 (English)
-
Microsoft Exchange 2003 Gold, including SP1 (English)
-
Microsoft Internet Information Services 4.0, 5.0, 5.1, 6.0 (English)
-
Microsoft SQL Server 7.0 or 2000 (English)
-
Microsoft Data Access Component (MDAC) 2.5, 2.6, 2.7, 2.8 (English)
-
Microsoft Desktop Engine (MSDE) 2000 (English)
-
Microsoft Media Player 6.4, 7.0, 7.1, 8.0, 9.0, 10 (English)
-
Microsoft .Net 1.0, 1.1 (English)
-
Microsoft DirectX 7.0 – 9.0c (English)
-
Microsoft XML (English)
-
Adobe Acrobat Reader 6 (English)
-
International support currently includes the following languages:
- Danish
- Dutch
- Finnish
- French
- German
- Italian
- Japanese
- Norwegian
- Portuguese
- Spanish
- Swedish