> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/vulnerability-management/update-manager.md).

# Update Manager

The update manager provides an overview of important missing software updates and allows you to install them directly from the Enginsight platform if required.

***

## Notes

To detect missing updates and perform installations, Enginsight connects to the update services of the operating system installed on the host. The following services and update types are supported:

* **Windows**: On Windows systems, the update manager can install Windows-specific cumulative updates. If **Windows Server Update Services (WSUS)** is available, Enginsight uses WSUS as the update source. Updates for third-party software cannot be installed through the update manager.
* **Linux**: On Linux systems, all functionality provided by the package manager can be used. This allows all types of updates to be installed, including updates for third-party software.
* **macOS**: On macOS systems, in addition to operating system updates, all updates managed through the **Homebrew** package manager can also be installed.

***

<i class="fa-compass">:compass:</i> Navigate to **Hosts** → **Update Manager** to show a list of all missing software updates. If no updates are available, this view is empty.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FaRnb6OnVaVeMckZGI7BN%2Fenginsight-screenshot-hosts-vulnerability%20management-update%20manager.jpg?alt=media&amp;token=811a48f8-7786-4334-9b77-552b760c9674" alt=""><figcaption></figcaption></figure>

The [update overview](#updates-overview) provides information such as:

* which software requires updating and on which operating system it is installed.
* how critical a missing software update is.
* Which vulnerabilities can be resolved by the corresponding software update.

You can also [install missing updates directly](#install-updates).

***

## Navigation

<i class="fa-magnifying-glass">:magnifying-glass:</i> Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly.

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Refresh** icon <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> above the list to update all list items.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages.&#x20;

### Filtering the List

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Filter** icon <i class="fa-filter">:filter:</i> above the list to filter the list by predefined parameters.

<details>

<summary>Available Filters</summary>

<table><thead><tr><th width="206.60546875">Parameter</th><th width="116.515625">Type</th><th>Description</th></tr></thead><tbody><tr><td>Host</td><td>String</td><td>Filter by the name of a specific host for which software updates are available, or exclude it from the results. All available hosts are shown.</td></tr><tr><td>Package Maintainer</td><td>String</td><td>Filter by a specific package maintainer that provides software updates, or exclude it from the results. All available package maintainers are shown.</td></tr><tr><td>Package Name</td><td>String</td><td>Filter by the name of a specific software update package, or exclude it from the results. All available package names are shown.</td></tr><tr><td>Security Update</td><td>Boolean</td><td><p>Filter based on whether the software update is a security update.<br><br>Available values:</p><ul><li><strong>True</strong>: The update is a security update.</li><li><strong>False</strong>: The update is not a security update.</li></ul></td></tr></tbody></table>

</details>

### Sorting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Sort** icon <i class="fa-sort">:sort:</i> next to a column name in the table header to sort by that column in ascending <i class="fa-angle-up">:angle-up:</i> or descending order <i class="fa-chevron-down">:chevron-down:</i> .

<i class="fa-computer-mouse">:computer-mouse:</i> Click the sort icon <i class="fa-bars-sort">:bars-sort:</i> above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority.

***

## Updates: Overview

The update overview is structured as a table.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FFiL7Q6qpPmeryy3Yetuw%2Fenginsight-screenshot-hosts-vulnerability%20management-update%20manager%20overview.jpg?alt=media&amp;token=1b445025-0d22-4c35-9a5b-66fe8eceb862" alt=""><figcaption></figcaption></figure>

The following information is shown:

<table><thead><tr><th width="200.1484375">Column</th><th>Description</th></tr></thead><tbody><tr><td>Severity</td><td><p>Shows the severity of the missing software update.</p><p></p><p>The following severity levels can be shown:</p><ul><li><strong>Critical</strong>: The missing update has a very high criticality.</li><li><strong>High</strong>: The missing update has a high criticality.</li><li><strong>Medium</strong>: The missing update has a medium criticality.</li><li><strong>Low</strong>: The missing update has a low criticality.</li></ul></td></tr><tr><td>Software</td><td>Shows the software for which an update is available.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the name of a software application to navigate to its detail view in the <a href="/docs/manual/english/platform-usage/hosts/management/software-inventory.md">software inventory</a></td></tr><tr><td>Operating System</td><td><p>Shows the icon of the operating system installed on the host on which the software is running.<br><br>The following operating system icons can be shown:</p><ul><li>Linux: <img src="https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/2AU67FyGLMWRjXan9Mow/Enginsight-Symbol-Linux.jpg" alt=""></li><li>macOS: <img src="https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/OSOpQiyGaXBrOGvNqbS6/Enginsight-Symbol-macOS.jpg" alt=""></li><li>Windows: <img src="https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/vdd3JiJPAxSeP3PjywgY/Enginsight-Symbol-Windows.jpg" alt=""></li></ul></td></tr><tr><td>Solvable CVEs</td><td>Shows the number of Common Vulnerabilities and Exposures (CVEs) that can be resolved by the software update, grouped by severity and <a href="/docs/manual/english/appendix/color-coding-of-severity-levels.md">color-coded</a> accordingly.</td></tr><tr><td>Hosts</td><td>Shows the number of hosts that are affected by the missing software update.</td></tr><tr><td>Score</td><td><p>Shows the Enginsight-specific risk score of the missing software update.</p><div data-gb-custom-block data-tag="hint" data-style="success" data-icon="lightbulb" class="hint hint-success"><p>For more information on how the Enginsight-specific risk score is calculated, see our Knowledge Base: <a href="https://docs.enginsight.com/docs/knowledge-base/english/risk-scores/how-is-enginsights-own-risk-score-calculated">How is Enginsight's own risk score calculated?</a></p></div></td></tr></tbody></table>

***

## Installing Updates

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to a list entry to select the respective update. Alternatively, select the checkbox in the table header to select all entries.

The number of selected entries is shown next to the search field.

The <i class="fa-cube">:cube:</i> **Install Updates** button then appears in the upper-right corner. Click it to open a new window where you can configure [update installation settings](#update-scope).

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2Fni1xz7SMq67pvozg92UH%2Fenginsight-screenshot-hosts-vulnerability%20management-update%20manager-install%20updates.jpg?alt=media&amp;token=b2f7fa38-df9b-4a89-88f6-997e21f4c3fc" alt=""><figcaption></figcaption></figure></div>

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Install Updates** after configuring all settings to begin installing updates.

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Back** to return to the overview.

{% hint style="danger" %}
**Please note:** If you leave this view without clicking **Install Updates**, all configured settings will be lost permanently.
{% endhint %}

### Update Scope

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FYICSMxJISqniBnT2Uknx%2Fenginsight-screenshot-hosts-vulnerability%20management-update%20manager-install%20updates-update%20scope.jpg?alt=media&amp;token=3860c4f1-6015-4ed3-8c4c-b573f0b61227" alt=""><figcaption></figcaption></figure>

In the **Update Scope** window, you can define whether the selected software updates should be installed on all affected hosts or only on selected hosts.

The severity of the update, the name of the software to be updated, the update type, and the latest available version are also shown.

{% hint style="warning" %}
**Please note:** We recommend that you select the default option **Affected Hosts (Recommendation)** to ensure that all vulnerabilities addressed by the updates are resolved across all affected hosts.
{% endhint %}

The following options are available:

<table><thead><tr><th width="250.11328125">Option</th><th>Description</th></tr></thead><tbody><tr><td>Affected Hosts (Recommended)</td><td>Install the software updates on all affected hosts.</td></tr><tr><td>Manual Host Selection</td><td>Install the software updates only on selected hosts or exclude specific hosts from the installation.<br><br>This opens the <a href="#assigned-hosts">Assigned Hosts</a> section.</td></tr></tbody></table>

### Assigned Hosts

<i class="fa-eye">:eye:</i> This section is only visible when you selected **Manual Host Selection**.

Here you can define the hosts or groups of hosts to which the configured settings should apply.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FYR7UyXLPL5lH4nfJExPa%2FEnginsight-EN-Assigned%20References.jpg?alt=media&amp;token=cebf4535-0c6c-4404-a071-76821b8fc228" alt=""><figcaption></figcaption></figure></div>

The following options are available:

<table><thead><tr><th width="199.625">Option</th><th>Description</th></tr></thead><tbody><tr><td>Hosts</td><td><p>Define the hosts to which the configured settings should apply.</p><p></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Hosts</strong> field to expand a list of all available hosts, then select one or more hosts. Alternatively, use the free-text search to find hosts in the list more quickly.<br></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added host to remove it from the <strong>Hosts</strong> field.</p></td></tr><tr><td>Tag Logic</td><td><p>Define how many tags an assigned host must have for the settings to apply to it.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>The default tag logic is <strong>All Tags are Present in the Reference</strong>.</p></div><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Tag Logic</strong> field to expand a list of all available options.<br><br>The following options are available:</p><ul><li><strong>All Tags are Present in the Reference:</strong> An assigned host must have all specified tags for the settings to apply to it.</li><li><strong>At Least One of the Specified Tags is Present:</strong> An assigned host must have at least one of the specified tags for the settings to apply to it.</li></ul></td></tr><tr><td>Tags</td><td><p>Define tags for groups of hosts to which the configured settings should apply.</p><p></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Tags</strong> field to expand a list of all available tags, then select one or more tags. Alternatively, use the free-text search to find tags in the list more quickly.<br></p><p><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Remove</strong> icon <i class="fa-circle-xmark">:circle-xmark:</i> next to an added tag to remove it from the <strong>Tags</strong> field.</p></td></tr></tbody></table>

#### Excluded Hosts

Here you can define which hosts or groups of hosts should be explicitly excluded from the configured settings.

{% hint style="info" %}
Defining excluded hosts is optional.
{% endhint %}

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Define Exceptions** next to **Assigned Hosts** to show the options for **Excluded Hosts**.

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FOwkoC0RXeV3yJg6fqoh0%2FEnginsight-EN-Excluded%20References.jpg?alt=media&amp;token=25189e42-a39b-4936-a80a-3780807e258f" alt=""><figcaption></figcaption></figure></div>

<i class="fa-gear">:gear:</i> Configure all settings as described for an assigned host.

***

## Further Resources

**Knowledge Base**

* [How is Enginsight's own risk score calculated?](https://docs.enginsight.com/docs/knowledge-base/english/risk-scores/how-is-enginsights-own-risk-score-calculated)

***