How to configure SuSE Linux settings in Endpoint Central?

Description

Endpoint Central for SuSE Linux enables IT administrators to manage all the patches that are released by the SuSE Linux, for subscribed SuSE Linux servers and workstations/desktops. It allows you to identify missing SuSE package updates, install and audit the updates, helping enterprises maintain high level of security across Linux endpoints.

Prerequisites:

1. Configure proxy settings and ensure https://scc.suse.com/subscriptions is reachable from your Endpoint Central server.

2. Install Endpoint Central agents on the SuSE systems to be patched.

3. Allow your proxy to download .rpm files.

4. Verify if you have purchased sufficient licenses for your patching requirements.

Steps to configure SuSE Linux settings in Endpoint Central:

  1. Provide the valid registration code that is available for your SuSE subscription. Endpoint Central requires registration code to validate your subscription and download metadata files and patch binaries for your SuSE machines.
  2. You will find the registration code on the SuSE portal 

Architecture and process of SuSE patching:

This section explains the processes involved in patching SuSE systems using Endpoint Central with the help of an architecture diagram. 

suse-architecture.jpeg

How patch management works for SuSE Linux endpoints: 

  1. a) The Endpoint Central server populates supported latest patches information from ManageEngine's central patch repository.
    b) The Endpoint Central downloads the metadata files from SuSE repository. This data is required for scanning missing dependencies in SuSE machines.
  2. The server initiates scan on all the SuSE systems and detects the missing patches and its dependencies.
  3. Then it downloads the patches and dependencies from the SuSE repository.
  4. a) The downloaded files are replicated from the Endpoint Central server to the Distribution Server(s). The remote office agents download the files from the Distribution Server.
    b) Other agents download the files directly from the Endpoint Central Server.  
  5. Once patches are downloaded and available, deployment is carried out.