Patch management policy

Patch management policy is a security policy that installs patches and updates for the Microsoft and third-party products on the workload to close the discovered vulnerabilities. For more information on the Patch management functionality, see this section of the Acronis Cyber Protection User Guide.

The following example can be used when creating a protection plan with this protection policy:

Policy example

{
    # Put a unique ID of the policy here.
    "id": "",
    # Patch management policy type is 'policy.security.patch_management'
    'type': 'policy.security.patch_management',
    'parent_ids': [
        # Put the ID of total protection policy here.
    ],
    'origin': 'upstream',
    'enabled': True,
    'settings_schema': '2.0',
    'settings': {
        # An object with patch management settings of Microsoft products.
        'microsoft': {
            # Determines what updates will be installed. 'ALL' means that all available updates will be installed.
            'update_option': 'ALL'
        },
        # An object with patch management settings of third-party products.
        'other': {
            # Determines what updates will be installed. 'ONLY_MAJOR' means that only major updates will be installed.
            'update_option': 'ONLY_MAJOR'
        },
        # Determines whether the system must be rebooted after the update. 'NEVER' means that system will not be rebooted after the update.
        'restart': 'NEVER',
        # A number of minutes in which the system will be rebooted after the updated.
        'restart_in': 0,
        # An object with pre-update backup settings
        'safety_backup': {
            # Set to true to force creation of restore points with current backup settings before installing the update.
            'enable_safety_backup': False
        },
        # An object with the schedule settings
        'schedule': {
            'activation': {
                'action': 'run',
                'timeout': {
                    'count': 4294967295,
                    'type': 'seconds'
                }
            },
            'alarms': {
                'time': {
                    'rand_max_delay': {
                        'count': 3600,
                        'type': 'seconds'
                    },
                    'run_later': False,
                    'time_from': {
                        'hour': 15,
                        'minute': 25,
                        'second': 0
                    },
                    'wake_on_lan': False,
                    'weekdays': [
                        'mon'
                    ]
                }
            },
            'conditions': {},
            'prevent_sleep': True,
            'type': 'daily'
        },
        # Set to true to prevent system reboot until backup is finished.
        'wait_backup_completion': True
    }
}