Patching tool for downloading patch installer

1. Introduction

The OWCPatchingTool is a command-line utility designed to download and package system or third-party applications patches based on CSV filters. It supports flexible configuration, multi-threaded downloads, and optional packaging of all patches into a single archive.

2. Basic Usage

• Run -h to display tool information

2.1 Command Syntax

2.2 Required Parameters

• --get-system-patch

  • Enables the system patch downloading flag.

• --get-app-patch

  • Enables the 3rd app patch downloading flag

• --input-file <csv_path>

  • Specifies the CSV file containing patch filters.

• --mode 0/1

  • Select the CSV patch filter format:

    • 0: Manual input (default)

    • 1: Automatic (exported from Patch Management UI)

2.3 Optional Parameters

• --output-path <dir>

  • Specifies the directory where downloaded patches will be stored (Default: Current working directory).

• --threads <num>

  • Number of concurrent download threads (Default: 8).

• --version

  • Displays the current version of the tool.

• --package

  • Package downloaded patches into a ZIP archive and generate a manifest (YML) for upload.

• --db-date <yyyymmdd>

  • Select the date to download the database resource. This setting allows users to download the latest app version at the specified time.

• --timeout <seconds>

  • Download timeout in seconds. (Default: no timeout)

3. Examples

3.1 Download system patches using manual CSV filters

OWCPatchingTool.exe --get-system-patch --input-file system_missing_patches.csv

3.2 Save output to a specific directory

OWCPatchingTool.exe --get-system-patch --input-file system_missing_patches.csv --output-path C:\Patches

3.3 Using multiple threads for faster download

OWCPatchingTool.exe --get-system-patch --input-file system_missing_patches.csv --threads 16

3.4 Download 3rd patches with manual CSV filters

OWCPatchingTool.exe --get-app-patch --input-file 3rd_missing_patches.csv

3.5 Download 3rd patches with exported CSV from Patch Management UI

OWCPatchingTool.exe --get-app-patch --mode 1 --input-file Data_3rd_missing_patches.csv

3.6 Download 3rd patches at the provided time

OWCPatchingTool.exe --get-app-patch --mode 1 --input-file Data_3rd_missing_patches.csv --db-date 20251020

3.7 Download system & 3rd app patches and pack them into a zip package

3.7.1 Generate and upload system patches packages

OWCPatchingTool.exe --get-system-patch --input-file system_missing_patches.csv --package

• This command downloads patch installers and packs them into a zip file in the packages/system/<timestamp> folder. This output is the same as the Windows folder using --output-path. The output appears as below:

  

  System patches packages

• Upload os_patches_package_<index>_<timestamp>.yml/zip in Settings → Upload Package → Patches Tab → Operating System → Select Manual source. You can upload multiple patches to My OPSWAT Central Management On-Premises.

  

  Upload system patches packages to My OPSWAT Central Management On-Premises

3.7.2 Generate and upload app patches packages

OWCPatchingTool.exe --get-app-patch --input-file app_missing_patches.csv --package

• This command downloads patch installers and packs them into a zip file in the packages/app/<timestamp> folder. This output is the same as the Windows folder using --output-path. The output appears below:

  

  Application patches packages

• Upload app_patches_package_<index>_<timestamp>.yml/zip in Settings → Upload Package → Patches Tab → Operating System → Select Manual source. You can upload multiple patches to My OPSWAT Central Management On-Premises.

  

  Upload app patches packages to My OPSWAT Central Management On-Premises

3.7.3 Upload vulnerability & patch databases

Database Packages Upload

4. Appendices

4.1 CSV File Format Specification

4.1.1 Manual CSV Format (--mode 0)

1. OS patches

• kb_id: Knowledge Base article ID (required)

• os_id: Operating system ID (optional). See Supported Operating Systems in Section 4.2

• architecture: Target architecture: x86_32, x86_64, or arm64 (required)

Tips:

• For OS-related KBs, fill in os_id.

• For application KBs, os_id can be blank.

• If a KB is not found, try leaving os_id blank to broaden the search.

2. Third-party application patches

The columns include name, architecture, language, product_release_id, channel, and exclude_apps. The values are described below

• name: Product name (required)

• architecture: Product architecture (x86_32, x86_64, or arm64) (required)

• language: Product language (en-US, fr-FR, …) (required)

The columns product_release_id, channel, and exclude_apps are only required for Microsoft Office products. For other 3rd-party applications, these columns can be left blank.

How to collect these informations? (see Collect Office Configuration at Section 4.3)

4.1.2 Exported CSV Format (--mode 1)

1. OS Patches

• id: Unique patch identifier (required)

• kb_id: Knowledge Base article ID (optional)

2. Third-party app patches (Not Supported)

4.2 Operating System ID Supported

4.3 Collect office configuration

To collect product_release_id, channel, and exclude_apps for Microsoft Office installations, use the provided PowerShell script GetOfficeConfiguration.ps1.

Open a PowerShell console as administrator and set the execution policy:

Set-ExecutionPolicy Bypass -Scope Process -Force

Run the script to collect Office configuration data

Run this script on devices that need Office patching to collect the correct Office configuration

.\scripts\GetOfficeConfiguration.ps1

The script will output the required Office configuration details, which you can use to populate the corresponding columns in your CSV file. Running it in PowerShell will return output like this:

ProductReleaseIds : O365ProPlusRetail
ExcludedApps : groove,infopath,lync,sharepointdesigner
Language : en-us
Channel : Current
Architecture : x64
Version : 16.0.19127.20222