Automated installation
of Microsoft updates
for SIMATIC PCS 7
Continuous patch management is important to close security gaps and protect OT clients from potential cyberattacks. However, manually installing patches with Windows Server Update Services (WSUS) via the SIMATIC PCS7 software takes time and is prone to errors.
Challenges when patching with WSUS
A key aspect of WSUS patch management is the need for a responsible person to manually check the approved or rejected updates. The manual processing of update lists can lead to avoidable sources of error.
As an official Siemens Product Partner for SIMATIC Automation Systems, you can use the ondeso SR Connector for SIMATIC PCS 7 to automate and secure Microsoft Update Management (WSUS Patch Management) within your PCS 7 infrastructures. Two options are available to you:
Patching with WSUS and ondeso SR
The combined use of WSUS and ondeso SR relieves you of manual checking and offers the following advantages:
Patching with ondeso SR
If you decide to patch your OT clients exclusively with ondeso SR, you benefit from a fully automated and transparent patch management process that can be flexibly integrated into the ongoing operation of your production.
… and much more!
Patching with ondeso SR: The Workflow in Detail
The entire process is carried out using the API connection of ondeso SR to the SIMATIC Management Console (SMMC) and the import of the XML file provided by Siemens for the description of compatible Microsoft updates. Thanks to this connection and integration depth, the Windows systems of a PCS 7 environment can be provided easily, securely and reliably with the Microsoft updates released by Siemens.
The interaction of the shown components of SIMATIC PCS 7 and ondeso SR enables the automated patch process.
Step 1
The user selects a SIMATIC PCS 7 client to be patched in the ondeso Admin Console. ondeso sends the command „Stop Runtime“ to the SIMATIC Management Console via the ondeso Service Client.
Step 2
The SIMATIC Management Console reports back to the ondeso Service Client when the runtime of the SIMATIC PCS 7 client has been terminated.
Step 3
The patch management is then started on the SIMATIC PCS 7 client. ondeso installs all missing updates on the SIMATIC PCS7 client – even across reboots.
Step 4
ondeso reports the completion of the patch process on the SIMATIC PCS 7 – client to the ondeso Service Client.
Step 5
ondeso sends „Start WinCC Runtime“ to the SIMATIC Management Console. It reboots the SIMATIC PCS 7 – client and automatically restarts the PCS 7 – OS user interface.
Step 6
Feedback of the update result to the ondeso Admin Console.
ondeso SR is the only patch management system approved by Siemens to date. You can find our entry in the Siemens Industry Mall.
ondeso SR: Windows patch and update management
Further information on the compatibility of Microsoft updates with SIMATIC PCS7 can be found in the Industry Online Support.
Which Microsoft updates have been tested for compatibility with SIMATIC PCS 7?
No, neither tool currently offers the option of patching PCS 7 clients. The SIMATIC Automation Tool is a software developed by Siemens for the commissioning and maintenance of SIMATIC devices and is mainly used for PLC control, for example for setting up, configuring and querying SIMATIC parameters. The SIMATIC Assessment Suite – Data Collector, formerly SIMATIC Diagnostic Tool, is a software developed for troubleshooting and analysing SIMATIC devices.
Success Story: Efficient Patch Management of SIMATIC PCS 7 Clients
A biotechnology company had the task of patching all Siemens SIMATIC PCS 7 clients during a short maintenance window. The implementation was carried out via ondeso SR.
Software & Update Distribution with ondeso SR
We help you to keep the security and performance of your OT clients continuously at the highest level to keep production running. Watch this video for more information.
Download Information Brochure
We have summarised all the information for you in a compact and clear way in this 2-page brochure.
Why ondeso SR Is the Right Choice
Contact us so we can find out together whether our software is the right tool for your needs.
Your Next Steps if You’re Interested in ondeso SR
We show you ondeso SR live and give you a comprehensive overview of the features, tailored to your use cases and specific requirements, so you can see it in action.
Request a demo.
In the PoC, you test ondeso SR together with us in your real OT environment. You will directly experience how inventory, patch management, backup and automation can be implemented in your operations.
After the PoC, training and rollout begin. If the prerequisites are in place, installation can be completed within a few hours, after which your OT systems can be managed reliably.
Experience the Benefits Yourself
I am here to assist you.
Christoph Ackermann
Head of Professional Services
Phone: +49 175 3334006
Where does your company stand today
and where is room to grow? 
Our OT Maturity Check provides you
with a well-founded assessment.
You need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Turnstile. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from reCAPTCHA. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information
