Automated installation
of Microsoft updates
for SIMATIC PCS 7
Continuous patch management is important to close security gaps and protect OT clients from potential cyberattacks. However, manually installing patches with Windows Server Update Services (WSUS) via the SIMATIC PCS7 software takes time and is prone to errors.
Challenges when patching with WSUS
A key aspect of WSUS patch management is the need for a responsible person to manually check the approved or rejected updates. The manual processing of update lists can lead to avoidable sources of error.
As an official Siemens Product Partner for SIMATIC Automation Systems, you can use the ondeso SR Connector for SIMATIC PCS 7 to automate and secure Microsoft Update Management (WSUS Patch Management) within your PCS 7 infrastructures. Two options are available to you:
Patching with WSUS and ondeso SR
The combined use of WSUS and ondeso SR relieves you of manual checking and offers the following advantages:
Patching with ondeso SR
If you decide to patch your OT clients exclusively with ondeso SR, you benefit from a fully automated and transparent patch management process that can be flexibly integrated into the ongoing operation of your production.
… and much more!
Patching with ondeso SR: The Workflow in Detail
The entire process is carried out using the API connection of ondeso SR to the SIMATIC Management Console (SMMC) and the import of the XML file provided by Siemens for the description of compatible Microsoft updates. Thanks to this connection and integration depth, the Windows systems of a PCS 7 environment can be provided easily, securely and reliably with the Microsoft updates released by Siemens.
The interaction of the shown components of SIMATIC PCS 7 and ondeso SR enables the automated patch process.
Step 1
The user selects a SIMATIC PCS 7 client to be patched in the ondeso Admin Console. ondeso sends the command „Stop Runtime“ to the SIMATIC Management Console via the ondeso Service Client.
Step 2
The SIMATIC Management Console reports back to the ondeso Service Client when the runtime of the SIMATIC PCS 7 client has been terminated.
Step 3
The patch management is then started on the SIMATIC PCS 7 client. ondeso installs all missing updates on the SIMATIC PCS7 client – even across reboots.
Step 4
ondeso reports the completion of the patch process on the SIMATIC PCS 7 – client to the ondeso Service Client.
Step 5
ondeso sends „Start WinCC Runtime“ to the SIMATIC Management Console. It reboots the SIMATIC PCS 7 – client and automatically restarts the PCS 7 – OS user interface.
Step 6
Feedback of the update result to the ondeso Admin Console.
ondeso SR is the only patch management system approved by Siemens to date. You can find our entry in the Siemens Industry Mall.
ondeso SR: Windows patch and update management
Further information on the compatibility of Microsoft updates with SIMATIC PCS7 can be found in the Industry Online Support.
Which Microsoft updates have been tested for compatibility with SIMATIC PCS 7?
No, neither tool currently offers the option of patching PCS 7 clients. The SIMATIC Automation Tool is a software developed by Siemens for the commissioning and maintenance of SIMATIC devices and is mainly used for PLC control, for example for setting up, configuring and querying SIMATIC parameters. The SIMATIC Assessment Suite – Data Collector, formerly SIMATIC Diagnostic Tool, is a software developed for troubleshooting and analysing SIMATIC devices.
Success Story: Efficient Patch Management of SIMATIC PCS 7 Clients
A biotechnology company had the task of patching all Siemens SIMATIC PCS 7 clients during a short maintenance window. The implementation was carried out via ondeso SR.
Why choose ondeso SR?
Contact us and together we will find out whether our software is the right tool for you.
You can then either test ondeso SR for 30 days free of charge or start an individual proof of concept (POC) so that you can convince yourself of our software and automate the patch management of your PCS 7 clients.
Download Information Brochure
We have summarised all the information for you in a compact and clear way in this 2-page brochure.
By loading the video, you agree to YouTube's data processing.
Learn more
Software & Update Distribution with ondeso SR
We help you to keep the security and performance of your OT clients continuously at the highest level to keep production running. Watch this video for more information.
Would you like to find out more?
I will be happy to help you.
Moritz Metka
Phone: + 49 941 462932-34
More about ondeso SR
Click here for more information about our OT administration software designed for industrial PCs.
References & Success Stories
Which companies rely on ondeso for their industrial IT management? Discover the answer here.
About ondeso
Learn more about our company and our comprehensive expertise as a pioneer and market leader.
