Hitachi

JP1 Version 11 JP1/IT Desktop Management 2 Administration Guide


15.3.5 Expiration date of security judgment for cumulative updates and security monthly quality rollups for Windows

When a cumulative update or security monthly quality rollup (called monthly rollup) is installed on Windows, the last month's rollup is removed from Windows. Normally, JP1/IT Desktop Management 2 - Manager judges that the security level of a device is in danger if a target monthly rollup is not installed on the managed device. To prevent security judgment from being affected by removed monthly rollups, JP1/IT Desktop Management 2 - Manager no longer checks for a monthly rollup after a specified period expires.

For example, monthly rollups are released in April and May, 2017. Microsoft releases a monthly rollup on the second Tuesday of every month (in US time), which falls on April 11, 2017. The support service site releases a patch information file in late April so that JP1/IT Desktop Management 2 - Manager can import the file to start security judgment. In May, Microsoft releases a monthly rollup on the 9th of the month. JP1/IT Desktop Management 2 - Manager no longer checks for the April rollup on May 9 or later.

[Figure]

To change the expiration date, you need to edit the configuration file (jdn_manager_config.conf).

To change the expiration date for monthly rollup:

  1. Add the property described below to the configuration file.

    The configuration file (jdn_manager_config.conf) exists in the following location:

    JP1/IT-Desktop-Management-2-installation-folder\mgr\conf

  2. Restart the JP1/IT Desktop Management 2 service.

The following table describes the property to be added to the configuration file:

Property

Description

Value

Default

RollUpPatch_ExpirationDate

Expiration date for a monthly rollup judgment.

The security judgment for a monthly rollup is no longer made after the specified date. The specified value is interpreted as a date in the Eastern Standard Time in US.

Specify 0 or a value in the format: nth-week,day-of-week. nth-week can be 1 to 5. day-of-week can be 1 to 7. The day-of-week value represents:

1: Sunday

2: Monday

3: Tuesday

4: Wednesday

5: Thursday

6: Friday

7: Saturday

When 0 is specified, no expiration date is set on the judgment.

2,3

(The second Tuesday)

For example, the value 3,1 (the third Sunday) means that the judgment period expires on May 21, 2017.