Agent Reboot Options

This tab does not affect the reboot options that are applied during Windows patch deployments. For Windows machines, those reboot options are configured on the patch deployment template that is specified within your patch task.
For Linux machines, you specify if and when you want patch reboots in the patch deployment template (see Creating and Editing a Linux Patch Deployment Configuration) that is specified within your patch task, but specify countdowns and so on in the Server/Linux patch section of this tab.

This tab enables you to specify how an agent machine will be restarted after one of the following occurs:

  • An agent is upgraded
  • An engine component is installed or upgraded

You can specify different reboot options depending on whether the agent is installed on a server or workstation machine.

Field

Description

Never reboot

This SafeReboot capability specifies that it is unnecessary to reboot each machine. The remaining options on this tab will be disabled.

As a rule, you should only enable this option if you are concerned about the availability of certain machines, such as servers.

Reboot when needed

This SafeReboot capability specifies that Security Controls will determine whether or not a reboot of each machine is required.

After installation

You can specify what state you want to leave the machines after the reboot.

  • Restart: The machines are restarted and left in a powered on state.
  • Restart, then sleep if possible: The machines are restarted and then put into a sleep state. There is a two minute delay between the completion of the restart and the time the machines are put into the sleep state. The Microsoft Scheduler is used on each target machine to initiate the sleep state following the restart. For more detailed information about sleep state, see Sleep and Hibernation Notes.
  • Restart, then hibernate if possible: The machines are restarted and then put into a hibernation state. There is a two minute delay between the completion of the restart and the time the machines are put into the hibernate state. The Microsoft Scheduler is used on each Windows target machine to initiate the hibernation state following the restart.
  • If a target machine is not configured to allow hibernation, the program will instead attempt to put the machine into a sleep state after the restart. If the machine cannot be put into a sleep state no action will occur. For more detailed information about hibernate state, see Sleep and Hibernation Notes.
  • Restart, then shut down: The machines are restarted and then powered off. There is a two minute delay between the completion of the restart and the time the machines are shut down. This option is useful if you want to perform a reboot in order to complete a maintenance task but then want the machines to be shut down. The Microsoft Scheduler is used on each Windows target machine to initiate the shutdown following the restart.
  • Shut down only, do not restart: The machines are powered off. This option is also useful if you simply want to make sure non-critical machines are turned off each night or over a weekend, saving energy.

For more information about the power management capabilities of Security Controls, see Power Management Overview.

Use defaults

This button is tied to the Restart and power action box. When you click Use defaults, all remaining options on the dialog will be changed to the values recommended for use with the currently selected Restart and power action.

If a user is logged on

If you elect to restart the machines, you can specify the amount of warning that a logged-on user with an active session will receive. You can also choose the degree of control the user will have over the restart process. The options do not apply to inactive sessions such as locked machines or disconnected RDP sessions.

  • Alert the user that a restart will occur when they log off.
  • Elect to force a restart after a number of minutes have passed.
  • Elect to force a restart at a specific date and time.
  • Show a countdown dialog on the user's Windows machine in advance of the restart. To preview the dialog box that the user will see, click Show sample countdown. The language box to the right can be used to preview this dialog in different languages.

  • Select the duration to display the standard Windows shutdown message when the shutdown sequence is initiated.
  • Allow the user to extend the time-out countdown up to a specified maximum. The maximum can be specified as either a duration or as a specific latest time that the restart will occur.
  • Allow the user to cancel the time-out. If a time-out is cancelled the patches will not be deployed until the user logs off or manually restarts the machine.
  • Allow the user to cancel the restart. The patches will not be installed until the machine is restarted.

User's on Linux machines will not see a countdown dialog as shown above but they will see a notification. They will use the stagentctl command-line utility to extend the time-out.