Patch Management System Requirements

This Article Applies to:

Avast Business Hub

Windows

11 — x64
10 (Pro, Education, and Enterprise editions) — x64, x86
8/8.1 (all versions except RT and Starter Edition) — x64, x86
7 SP1 (requires KB3033929) — x64, x86
Server 2022, 2019, 2016, 2012 (any edition with latest service pack excluding Server Core) — x64
Server 2008 R2 (requires KB3033929) — x64
Small Business Server 2011 — x64

For more detailed requirements for all operating systems, see System Requirements.

Preparing Devices for Patching

Windows Update: we recommend you change Windows Update settings for your devices via the Windows Update Center and/or Group Policy. We have provided our recommended settings in Recommended Windows Update Configuration for Patch Management. The recommendations are the same for Avast and AVG consoles.

Software Updater: older versions of the Cloud Console and CloudCare provided a Software Updater component that performed some of the same functions as Patch Management. Ensure Software Updater is disabled/uninstalled for devices.

Local System account: patches are deployed under the remote machine's Local System account, so you need to ensure deployment will be allowed by that account.

Hard Drive space: a minimum of 2GB hard drive space should be free to store patches. If you are using a Master Agent/Local Update Agent, that device should have a minimum of 5GB hard drive space.

Servers vs Workstations: If you plan to use different Patch Management settings for your server devices and workstations, you should place your servers into a separate policy. If you only want to update the Windows Server operating system then you should exclude all 3rd party vendors on the Excludes list to make sure that only Windows updates are being provided. See Deploying Missing Patches for more details.

For uninterrupted patching, check these items before setting up Patch Management on devices:

Ensure the user profile of the device’s group policy in Active Directory allows program installations and upgrades
Ensure the device’s hard drive has enough space for patches to be received and stored (at least 2GB)
Ensure that if the device’s policy is set up to download patches from a local update server, the server is in the same network
Ensure the device is online at the time of patching
Ensure the device’s Firewall settings allow patch installation