Patch Endpoints to Minimum Standard

Before your first Patch Tuesday, you should patch your endpoints to a minimum standard. Make sure that service packs, hotfixes, or rollups from prior months are installed on your endpoints.

If your endpoints don't already have this software installed, they likely don't meet the prerequisites to install the patches releases on Patch Tuesday. Therefore, if you have any endpoints that don't already have this software, deploy it to your endpoints.

To Patch Endpoints:

From the Endpoint Security Console, navigate to Review > Software > Service Packs.
Set the following filters (and any others that you want to set), and then click Update View:

Content type: Critical and Not Superseded
This filter updates the page list with only patches that haven't been outdated by another patch.
Applicability: Applicable
This filter further reduces results so that only patches that apply to endpoints that you support are listed.

Deploy the services packs that are listed to any endpoints that don't have them installed.
Select all the service packs that are listed, and then click Deploy.
Complete the Deployment Wizard.

A few tips for while you're completing the Deployment Wizard:

Make sure you select all groups and endpoints that don't have the recently released service packs (and other software) installed. The easiest way to patch all these endpoints is to select the root Custom Groups object.
Don't select any patches from the Available Packages page. You've already selected the patches you're deploying.
Make sure you schedule the deployment after business hours.
Don't finish the deployment without caching the patches first. Before you finish the Wizard, it will ask you if you want to deploy without caching the content. Always cache the content first, because this practice assures that the patches are installed in the proper order.

The deployment is scheduled.
The Deployments and Tasks page opens to your deployment.
From this page you can monitor the deployment progress once it begins.