Docs / Desktop Management / Managing Updates

Managing Updates

ZEM Cloud provides centralised visibility and control over software updates across all your managed endpoints.

Update Monitoring

The ZEM Cloud agent on each endpoint periodically checks for available updates and reports them to the dashboard.

Update Detection

Updates are detected using each platform's native package manager:

  • Ubuntu/Debian - apt (checks apt-get update)
  • Arch Linux - pacman (uses checkupdates)
  • Fedora - dnf (checks dnf check-update)
  • macOS - softwareupdate (checks softwareupdate --list)
  • Windows - Windows Update API (COM interface)

Update Types

  • Regular Updates - Standard software and security updates
  • Security Updates - Critical security patches (highlighted separately)

Viewing Pending Updates

Home Dashboard

The "Updates Pending" card on the home dashboard shows the total number of endpoints with available updates. Click the card to filter the Endpoint Overview to show only these endpoints.

Endpoint Overview

The Updates column shows the number of pending updates for each endpoint. Endpoints with security updates display a red badge.

Endpoint Details

Open an endpoint's details to see:

  • Total pending updates count
  • Number of security updates
  • List of specific packages to be updated (if available)

Auto Reboot Settings

Configure how endpoints handle updates that require a reboot:

Auto Reboot Enabled

When enabled, the endpoint will automatically:

  1. Download and install available updates
  2. Schedule a reboot at the configured reboot time
  3. Reboot to complete the update installation

Auto Reboot Disabled

When disabled, updates are detected but not automatically installed. Manual intervention is required to install updates and reboot.

Configuring Auto Reboot

  1. Open the endpoint details
  2. Click Toolbox > Endpoint Settings
  3. Toggle Auto Reboot on or off
  4. Set the Reboot Time (24-hour format)
  5. Click Save

Manual Update Installation

To trigger an immediate update on an endpoint:

  1. Open the endpoint details
  2. Click Toolbox > Remote Actions
  3. Click Update Now
  4. Confirm the action

The endpoint will:

  1. Check for all available updates
  2. Download the updates
  3. Install the updates
  4. Reboot if required (and auto-reboot is enabled)

Update Notifications

ZEM Cloud highlights endpoints that need attention:

  • Orange badge - Updates available
  • Red badge - Security updates available
  • Dashboard card - Total endpoints with pending updates

Platform-Specific Behaviour

Linux (Ubuntu, Debian, Arch, Fedora)

  • Updates installed via native package manager
  • Security updates identified from security repositories
  • Kernel updates may require reboot

macOS

  • Uses softwareupdate for system updates
  • Major updates may require user interaction
  • Some updates require restart

Windows

  • Uses Windows Update API
  • Automatic EULA acceptance for updates
  • Feature updates handled separately from quality updates
  • Multiple reboots may be required for large updates

Best Practices

  • Regular Monitoring - Check the dashboard regularly for pending updates
  • Security Priority - Prioritise endpoints with security updates
  • Scheduled Reboots - Configure reboot times during maintenance windows
  • Test First - Consider testing updates on a subset of endpoints first
  • Backup - Ensure critical endpoints have recent backups before major updates