We have a problem with TEM in that deploying Windows security updates to servers can take hours. Given two identical servers, one with WSUS and one with TEM, the WSUS machine can install a couple of months worth of patches in 10-20 minutes. The server running TEM took 3-4 hours.
We did check the box to have he clients pre download the updates so downloading is not the cause of the delay. We don’t see anything in the client log to indicate why patching takes so long.
Any suggestions to increase patching speed would be appreciated as we have tight patching windows. Servers taking 3-4 hours (or more) to patch is not acceptable.
When selecting the option to “Start client downloads before constraints are satisfied” I find it only makes a difference if the Action is scheduled to Start Execution at some future point, hence it’s “constraints” have not been met yet. You don’t indicate if you sent an action to the target computer with this option or not.
Are you making an apples to apples comparison between TEM and WSUS? I think in WSUS you have to approve the patches before you deploy them to a specific endpoint. Are these the same as the ones you’re trying to apply via TEM?
Also I’m not sure whether this will make a difference or not, but in theory applying the patch on TEM and WSUS should be the same. What might be different is the amount of time it takes to evaluate something is applicable, so I would try tweaking the CPU utilization of the client to see if processing the relevance for months worth of patches is faster. I think you can just try tweaking things outlined in fixlet 524 in BESSupport.
I need to ask, did this ever get resolved? We are having the same issue on many servers. I do not know who to call if support is needed. Microsoft or IBM. Our Web servers have a very tight window for patching, some patches never finish due to the slowness of patch installation. It’s not just one server that has the issue its many servers that serve many functions that have this issue not just Ecom.
My personal experience is server patches do take longer time to install. Some may take a few hours.
And the actual duration also depends on the server’s hardware and configuration.
It’s helpful if you can post the name of the updates that are particularly slow.