Update Manager Configurator 6.0

Update Manager 6.0 introduces new features. This page describes the features that can be modified through the application called "Update Manager Configurator".

Two operating modes

The Update Manager has two modes of operation. The first is called "User" while the second is called "Administrator". User mode allows you to start searching and installing updates from any user on the system. The administrator mode, on the other hand, limits the start of the search and installation of updates, not only to users with administrative permissions but who actually start the application with administrative rights. Administrator mode is the way in which the Update Manager has always worked (at least from version 4.0 onwards). User mode is a new feature introduced with Update Manager 6.0. This second mode has the purpose of promoting the maintenance of security in the system by ensuring that updates can be installed independently of the group to which the logged-in user belongs. The basic idea is that updates, correcting bugs and reducing the attack surface, must always be installed and therefore it does not matter which user is using the system.

Note that the mode called "User" only concerns the possibility of searching and installing updates for only the BMProduction products already installed. Setting this mode does not change the behavior of the operating system or other installed applications. Even within the same Update Manager or other BMProduction applications, the "User" mode does not provide access to applications that require administrative permissions; it is only about finding and installing updates.

From a technical point of view, the user mode works thanks to some services. Administrator mode, on the other hand, starts the services only at the appropriate time. These services, however, are optimized so that they don't take up unnecessarily resources (around 10-15 MB in RAM).

Naturally, the administrator can decide that the updates should be installed by checking them previously. To do this, simply use the administrator mode. Note that using administrator mode, a user who experiences a problem in an application will not be able to solve it even if the update has already been distributed as long as the administrator does not physically perform the update procedure on the machine. If the administrator is not on site, it is good to choose this option only if the administrator can guarantee the management of the machines remotely.

Server machines and those that perform critical operations should use administrator mode.

 

Notify of updates

Update Manager 6.0 introduces a mechanism for notifying you of updates. Notification does not include automatic installation. The user is only notified of the availability of these updates but it will be up to him to start the Update Manager to install them.

To show a notification, a service periodically checks for new updates in the background. Under normal conditions this service requires less than 10 MB of RAM. The search for new updates is performed only once every tot time. This time can be set by the administrator only (not by the user, even if the "User" mode described above is set). The possible options are shown in a drop-down menu. Generally there are options ranging from checking once a day to once every three months. Based on the use of BMProduction applications, it is possible to modify the most appropriate value. It is preferable not to extend the search beyond three months to avoid being discovered by the most recent vulnerabilities covered.

The notification service can be deactivated. The notification method can also be decided: notify each update or notify only the updates considered most critical. Whatever the administrator's choice, if the notification is active and critical updates are found an icon will be shown on the TrayBar and a balloon will warn of the availability of updates. The balloon will be shown again after about 24 hours until critical updates are installed. It may happen that critical updates are available but the user cannot install them because the administrator has set the "Admin" mode. If instead non-critical updates are found and the administrator has set the notification for all updates, an icon is still shown on the TrayBar but no balloons will be shown. In fact, these updates may not be installed at the discretion of the administrator.

Note that if an update is shown, even if it is not marked as critical, it is a good idea to carefully evaluate the non-installation. An item placed in Update Manager is an item that has been deemed worthy of being installed.

By default, auditing is set once every 31 days and notification is enabled for all updates.
Server machines and those that perform critical operations should have notification disabled.

 

 

Last update: 2020-05-19