Contents
- Third-party software updates
- Scenario: Updating third-party software
- Installing third-party software updates
- Creating the Find vulnerabilities and required updates task
- Find vulnerabilities and required updates task settings
- Creating the Install required updates and fix vulnerabilities task
- Adding rules for update installation
- Creating the Install Windows Update updates task
- Viewing information about available third-party software updates
- Exporting the list of available software updates to a file
- Approving and declining third-party software updates
- Updating third-party applications automatically
Third-party software updates
Kaspersky Security Center Cloud Console enables you to manage updates of third-party software installed on managed devices and fix vulnerabilities in Microsoft applications and other software makers' products through installation of required updates.
Kaspersky Security Center Cloud Console searches for updates through the Find vulnerabilities and required updates task. When this task is complete, Administration Server receives the lists of detected vulnerabilities and required updates for the third-party software installed on the devices that you specified in the task properties. After viewing information about available updates, you can install them on devices.
Kaspersky Security Center Cloud Console updates some applications by removing the previous version of the application and installing the new one.
A user interaction may be required when you update a third-party application or fix a vulnerability in a third-party application on a managed device. For example, the user may be prompted to close the third-party application if it is currently open.
For security reasons, any third-party software updates that you install by using the Vulnerability and patch management feature are automatically scanned for malware by Kaspersky technologies. These technologies are used for automatic file checks and include virus scanning, static analysis, dynamic analysis, behavior analysis in the sandbox environment, and machine learning.
Kaspersky experts do not perform manual analysis of third-party software updates that can be installed by using the Vulnerability and patch management feature. In addition, Kaspersky experts do not search for vulnerabilities (known or unknown) or undocumented features in such updates, nor do they perform other types of analysis of the updates other than those specified in the paragraph above.
Tasks for installation of third party software updates
When metadata of the third-party software updates is downloaded to the repository, you can install the updates on client devices by using the following tasks:
- The Install required updates and fix vulnerabilities task
This task is used to install updates for Microsoft applications, including the updates provided by the Windows Update service, and updates of other vendors' software.
When this task is complete, the updates are installed on the managed devices automatically. When metadata of new updates is downloaded to the Administration Server repository, Kaspersky Security Center Cloud Console checks whether the updates meet the criteria specified in the update rules. All new updates that meet the criteria will be downloaded and installed automatically at the next task run.
- The Install Windows Update updates task
This task can be used to install Windows Update updates only.
When this task is complete, only those updates that are specified in the task properties are installed. In future, if you want to install new updates, you must add the required updates to the list of updates in the existing task or create an Install Windows Update updates task.
The software update installation tasks have a number of limitations. These limitations depend on the license under which you are using Kaspersky Security Center Cloud Console and on the mode in which Kaspersky Security Center Cloud Console is working.
Scenario: Updating third-party software
This section provides a scenario for updating third-party software installed on the client devices. The third-party software includes applications from Microsoft and other software vendors. Updates for Microsoft applications are provided by the Windows Update service.
Stages
Updating third-party software proceeds in stages:
- Searching for required updates
To find the third-party software updates required for the managed devices, run the Find vulnerabilities and required updates task. When this task is complete, Kaspersky Security Center Cloud Console receives the lists of detected vulnerabilities and required updates for the third-party software installed on the devices that you specified in the task properties.
The Find vulnerabilities and required updates task is created automatically by the Administration Server quick start wizard. If you did not run the wizard, create the task or run the quick start wizard now.
How-to instructions:
- Analyzing the list of found updates
View the Software updates list and decide which updates you want to install. To view detailed information about each update, click the update name in the list. For each update in the list, you can view the statistics about the update installation on managed devices. For example, you can view the number of devices on which the selected update is not installed, will be installed, or on which the update installation has failed.
How-to instructions: Viewing information about available third-party software updates
- Configuring installation of updates
When Kaspersky Security Center Cloud Console received the list of the third-party software updates, you can install them on client devices by using the Install required updates and fix vulnerabilities task or the Install Windows Update updates task. Create one of these tasks. You can create these tasks on the Tasks tab or by using the Software updates list.
The Install required updates and fix vulnerabilities task is used to install updates for Microsoft applications, including the updates provided by the Windows Update service, and updates of other vendors' software.
The Install Windows Update updates task can be used to install Windows Update updates only.
The software update installation tasks have a number of limitations. These limitations depend on the license under which you are using Kaspersky Security Center Cloud Console and on the mode in which Kaspersky Security Center Cloud Console is working.
To install some software updates you must accept the End User License Agreement (EULA) for the installation software. If you decline the EULA, the software update will not be installed.
How-to instructions:
- Scheduling the tasks
To be sure that the update list is always up-to-date, schedule the Find vulnerabilities and required updates task to run the task automatically from time to time. The default frequency is once a week.
If you have created the Install required updates and fix vulnerabilities task, you can schedule it to run with the same frequency as the Find vulnerabilities and required updates task or less often. When scheduling the Install Windows Update updates task, note that for this task you must define the list of updates every time before starting this task.
When scheduling the tasks, make sure that a task to fix vulnerability starts after the Find vulnerabilities and required updates task is complete.
How-to instructions: General task settings
- Approving and declining software updates (optional)
If you have created the Install required updates and fix vulnerabilities task, you can specify rules for update installation in the task properties. If you have created the Install Windows Update updates task, skip this step.
For each rule, you can define the updates to install depending on the update status: Undefined, Approved or Declined. For example, you may want to create a specific task for servers and set a rule for this task to allow installation of only Windows Update updates and only those ones that have Approved status. After that you manually set the Approved status for those updates that you want to install. In this case the Windows Update updates that have the Undefined or Declined status will not be installed on the servers that you specified in the task.
By default, the downloaded software updates have the Undefined status. You can change the status to Approved or Declined in the Software updates list (Operations → Patch management → Software updates).
How-to instructions: Approving and declining third-party software updates
- Running an update installation task
Start the Install required updates and fix vulnerabilities task or the Install Windows Update updates task. When you start these tasks, updates are downloaded and installed on managed devices. After the task is complete, make sure that it has the Completed successfully status in the task list.
How-to instructions: Starting a task manually
- Create the report on results of update installation of third-party software (optional)
To make sure that the task is created and the updates are installed, create the Report on results of installation of third-party software updates and view detailed statistics on the update installation in this report.
How-to instructions: Generating and viewing a report
Installing third-party software updates
You can install third-party software updates on managed devices by creating and running one of the following tasks:
- Install required updates and fix vulnerabilities
You can use this task to install both Windows Update updates provided by Microsoft and updates of other vendors' software.
- Install Windows Update updates
You can use this task to install Windows Update updates only.
The software update installation tasks have a number of limitations. These limitations depend on the license under which you are using Kaspersky Security Center Cloud Console and on the mode in which Kaspersky Security Center Cloud Console is working.
A user interaction may be required when you update a third-party application or fix a vulnerability in a third-party application on a managed device. For example, the user may be prompted to close the third-party application if it is currently open.
As an option, you can create a task to install the required updates in the following ways:
- By opening the update list and specifying which updates to install.
As a result, a new task to install the selected updates is created. As an option, you can add the selected updates to an existing task.
- By running the Update installation wizard.
The availability of the Update installation wizard depends on the Kaspersky Security Center Cloud Console mode and your current license.
The wizard simplifies creation and configuration of an update installation task, and enables you to eliminate the creation of redundant tasks that contain the same updates to install.
Installing third-party software updates by using the update list
To install third-party software updates by using the list of updates:
- Open one of the lists of updates:
- To open the general update list, in the main menu, go to Operations → Patch management → Software updates.
- To open the update list for a managed device, in the main menu, go to Assets (Devices) → Managed devices → <device name> → Advanced → Available updates.
- To open the update list for a specific application, in the main menu, go to Operations → Third-party applications → Applications registry → <application name> → Available updates.
A list of available updates appears.
- Select the check boxes next to the updates that you want to install.
- Click the Install updates button.
To install some software updates, you must accept the End User License Agreement (EULA). If you decline the EULA, the software update will not be installed.
- Select one of the following options:
- New task
The New task wizard starts. The Install required updates and fix vulnerabilities task or the Install Windows Update updates task is preselected, depending on the Kaspersky Security Center Cloud Console mode and your current license. Follow the steps of the wizard to complete the task creation.
- Install update (add rule to specified task)
Select a task to which you want to add the selected updates. Select an Install required updates and fix vulnerabilities task or an Install Windows Update updates task. If you select an Install required updates and fix vulnerabilities task, a new rule to install the selected updates will be automatically added to the selected task. If you select an Install Windows Update updates task, the selected updates will be added to the task properties.
The task properties window opens. Click the Save button to save the changes.
- New task
If you have chosen to create a task, the task is created and displayed in the task list at Assets (Devices) → Tasks. If you have chosen to add the updates to an existing task, the updates are saved in the task properties.
To install third-party software updates, start the Install required updates and fix vulnerabilities task or the Install Windows Update updates task. You can start any of these tasks manually or specify schedule settings in the properties of the task that you start. When specifying the task schedule, make sure that the update installation task starts after the Find vulnerabilities and required updates task is complete.
Installing third-party software updates by using the Update installation wizard
The availability of this feature depends on the Kaspersky Security Center Cloud Console mode and your current license.
To create a task to install third-party software updates by using the Update installation wizard:
- In the main menu, go to Operations → Patch management → Software updates.
A list of available updates appears.
- Select the check box next to the update that you want to install.
- Click the Run Update installation wizard button.
The Update installation wizard starts. The Select the update installation task page displays the list of all existing tasks of the following types:
- Install required updates and fix vulnerabilities
- Install Windows Update updates
- Fix vulnerabilities
You cannot modify the tasks of the last two types to install new updates. To install new updates, you can only use the Install required updates and fix vulnerabilities tasks.
- If you want the wizard to display only those tasks that install the update that you selected, then enable the Show only tasks that install this update option.
- Choose what you want to do:
- To start a task, select the check box next to the task name, and then click the Start button.
- To add a new rule to an existing task:
- Select the check box next to the task name, and then click the Add rule button.
- On the page that opens, configure the new rule:
- Installation rule for updates of this importance level
- Installation rule for updates of this importance level according to MSRC (available only for Windows Update updates)
- Installation rule for updates by this vendor (available only for updates of third-party applications)
- Installation rule for updates of the type
- Installation rule for the selected update
- Approve selected updates
- Automatically install all previous application updates that are required to install the selected updates
- Click the Add button.
- To create a task:
- Click the New task button.
- On the page that opens, configure the new rule:
- Installation rule for updates of this importance level
- Installation rule for updates of this importance level according to MSRC (available only for Windows Update updates)
- Installation rule for updates by this vendor (available only for updates of third-party applications)
- Installation rule for updates of the type
- Installation rule for the selected update
- Approve selected updates
- Automatically install all previous application updates that are required to install the selected updates
- Click the Add button.
If you have chosen to start a task, you can close the wizard. The task will complete in background mode. No further actions are required.
If you have chosen to add a rule to an existing task, the task properties window opens. The new rule is already added to the task properties. You can view or modify the rule or other task settings. Click the Save button to save the changes.
If you have chosen to create a task, you continue to create the task in the New task wizard. The new rule that you added in the Update installation wizard is displayed in the New task wizard. When you complete the New task wizard, the Install required updates and fix vulnerabilities task is added to the task list.
Creating the Find vulnerabilities and required updates task
Through the Find vulnerabilities and required updates task, Kaspersky Security Center Cloud Console receives the lists of detected vulnerabilities and required updates for the third-party software installed on the managed devices.
The Find vulnerabilities and required updates task is created automatically when the quick start wizard is running. If you did not run the wizard, you can create the task manually.
To create the Find vulnerabilities and required updates task:
- In the main menu, go to Assets (Devices) → Tasks.
- Click Add.
The New task wizard starts. Follow the steps of the wizard.
- For the Kaspersky Security Center Cloud Console application, select the Find vulnerabilities and required updates task type.
- Specify the name for the task that you are creating. A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
- Select devices to which the task will be assigned.
- If you want to modify the default task settings, enable the Open task details when creation is complete option on the Finish task creation page. If you do not enable this option, the task is created with the default settings. You can modify the default settings later, at any time.
- Click the Create button.
The task is created and displayed in the list of tasks.
- Click the name of the created task to open the task properties window.
- In the task properties window, specify the general task settings.
- On the Application settings tab, specify the following settings:
- Search for vulnerabilities and updates listed by Microsoft
- Connect to the update server to update data
- Search for third-party vulnerabilities and updates listed by Kaspersky
- Specify paths for advanced search of applications across the file system
- Enable advanced diagnostics
- Maximum size, in MB, of advanced diagnostics files
- Click the Save button.
The task is created and configured.
If the task results contain a warning of the 0x80240033 "Windows Update Agent error 80240033 ("License terms could not be downloaded.")" error, you can resolve this issue through the Windows Registry.
Find vulnerabilities and required updates task settings
The Find vulnerabilities and required updates task is created automatically when the quick start wizard is running. If you did not run the wizard, you can create the task manually.
In addition to the general task settings, you can specify the following settings when creating the Find vulnerabilities and required updates task or later, when configuring the properties of the created task:
- Search for vulnerabilities and updates listed by Microsoft
- Connect to the update server to update data
- Search for third-party vulnerabilities and updates listed by Kaspersky
- Specify paths for advanced search of applications across the file system
- Enable advanced diagnostics
- Maximum size, in MB, of advanced diagnostics files
Recommendations on the task schedule
When scheduling the Find vulnerabilities and required updates task, make sure that two options—Run missed tasks and Use automatically randomized delay for task starts—are enabled.
By default, the Find vulnerabilities and required updates task is set to start manually. If the organization's workplace rules provide for shutting down all devices at this time, the Find vulnerabilities and required updates task will run after the devices are turned on again, that is, in the morning of the next day. Such activity may be undesirable because a vulnerability scan may increase the load on CPUs and disk subsystems. You must set up the most convenient schedule for the task based on the workplace rules adopted in the organization.
Creating the Install required updates and fix vulnerabilities task
The availability of the Install required updates and fix vulnerabilities task depends on the Kaspersky Security Center Cloud Console mode and your current license.
The Install required updates and fix vulnerabilities task is used to update and fix vulnerabilities in third-party software, including Microsoft software, installed on the managed devices. This task enables you to install multiple updates and fix multiple vulnerabilities according to certain rules.
To install updates or fix vulnerabilities by using the Install required updates and fix vulnerabilities task, you can do one of the following:
- Run the Update installation wizard or the Vulnerability fix wizard.
- Create an Install required updates and fix vulnerabilities task.
- Add a rule for update installation to an existing Install required updates and fix vulnerabilities task.
The software update installation tasks have a number of limitations. These limitations depend on the license under which you are using Kaspersky Security Center Cloud Console and on the mode in which Kaspersky Security Center Cloud Console is working.
To create the Install required updates and fix vulnerabilities task:
- In the main menu, go to Assets (Devices) → Tasks.
- Click Add.
The New task wizard starts. Follow the steps of the wizard.
- For the Kaspersky Security Center Cloud Console application, select the Install required updates and fix vulnerabilities task type.
- Specify the name for the task that you are creating. A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
- Select devices to which the task will be assigned.
- Specify the rules for update installation, and then specify the following settings:
- Start installation at device restart or shutdown
- Install the required general system components
- Allow installation of new application versions during updates
- Download updates to the device without installing them
- Download updates to
- Enable advanced diagnostics
- Maximum size, in MB, of advanced diagnostics files
- Specify operating system restart settings:
- If on the Finish task creation page you enable the Open task details when creation is complete option, you can modify the default task settings. If you do not enable this option, the task is created with the default settings. You can modify the default settings later, at any time.
- Click the Finish button.
The task is created and displayed in the list of tasks.
- Click the name of the created task to open the task properties window.
- In the task properties window, specify the general task settings according to your needs.
- Click the Save button.
The task is created and configured.
If the task results contain a warning of the 0x80240033 "Windows Update Agent error 80240033 ("License terms could not be downloaded.")" error, you can resolve this issue through the Windows Registry.
Adding rules for update installation
The availability of this feature depends on the Kaspersky Security Center Cloud Console mode and your current license.
When installing software updates or fixing software vulnerabilities by using the Install required updates and fix vulnerabilities task, you must specify rules for the update installation. These rules determine the updates to install and the vulnerabilities to fix.
The exact settings depend on whether you add a rule for all updates, for Windows Update updates, or for updates of third-party applications (applications made by software vendors other than Kaspersky and Microsoft). When adding a rule for Windows Update updates or updates of third-party applications, you can select specific applications and application versions for which you want to install updates. When adding a rule for all updates, you can select specific updates that you want to install and vulnerabilities that you want to fix by means of installing updates.
You can add a rule for update installation in the following ways:
- By adding a rule while creating a new Install required updates and fix vulnerabilities task.
- By adding a rule on the Application Settings tab in the properties window of an existing Install required updates and fix vulnerabilities task.
- Through the Update installation wizard or the Vulnerability fix wizard.
To add a new rule for all updates:
- Click the Add button.
The Rule creation wizard starts. Proceed through the wizard by using the Next button.
- On the Rule type page, select Rule for all updates.
- On the General criteria page, use the drop-down lists to specify the following settings:
- On the Updates page, select the updates to be installed:
- On the Vulnerabilities page, select vulnerabilities that will be fixed by installing the selected updates:
- On the Name page, specify the name for the rule that you are adding. You can later change this name in the Settings section of the properties window of the created task.
After the Rule creation wizard completes its operation, the new rule is added and displayed in the rule list in the New task wizard or in the task properties.
To add a new rule for Windows Update updates:
- Click the Add button.
The Rule creation wizard starts. Proceed through the wizard by using the Next button.
- On the Rule type page, select Rule for Windows Update.
- On the General criteria page, specify the following settings:
- On the Applications page, select the applications and application versions for which you want to install updates. By default, all applications are selected.
- On the Categories of updates page, select the categories of updates to be installed. These categories are the same as in Microsoft Update Catalog. By default, all categories are selected.
- On the Name page, specify the name for the rule that you are adding. You can later change this name in the Settings section of the properties window of the created task.
After the Rule creation wizard completes its operation, the new rule is added and displayed in the rule list in the New task wizard or in the task properties.
To add a new rule for updates of third-party applications:
- Click the Add button.
The Rule creation wizard starts. Proceed through the wizard by using the Next button.
- On the Rule type page, select Rule for third-party updates.
- On the General criteria page, specify the following settings:
- On the Applications page, select the applications and application versions for which you want to install updates. By default, all applications are selected.
- On the Name page, specify the name for the rule that you are adding. You can later change this name in the Settings section of the properties window of the created task.
After the Rule creation wizard completes its operation, the new rule is added and displayed in the rule list in the New task wizard or in the task properties.
Creating the Install Windows Update updates task
The Install Windows Update updates task enables you to install software updates provided by the Windows Update service on client devices.
The software update installation tasks have a number of limitations. These limitations depend on the license under which you are using Kaspersky Security Center Cloud Console and on the mode in which Kaspersky Security Center Cloud Console is working.
To create the Install Windows Update updates task:
- In the main menu, go to Assets (Devices) → Tasks.
- Click Add.
The New task wizard starts. Proceed through the wizard by using the Next button.
- For the Kaspersky Security Center Cloud Console application, select the Install Windows Update updates task type.
- Specify the name for the task that you are creating.
A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
- Select devices to which the task will be assigned.
- Click the Add button.
The list of updates opens.
- Select the Windows Update updates that you want to install, and then click OK.
- Specify the operating system restart settings:
- Specify the account settings:
- If you want to modify the default task settings, enable the Open task details when creation is complete option on the Finish task creation page. If you do not enable this option, the task is created with the default settings. You can modify the default settings later, at any time.
- Click the Finish button.
The task is created and displayed in the list of tasks.
- Click the name of the created task to open the task properties window.
- In the task properties window, specify the general task settings according to your needs.
- Click the Save button.
The task is created and configured.
Viewing information about available third-party software updates
You can view the list of available updates for third-party software, including Microsoft software, installed on client devices.
To view a list of available updates for third-party applications installed on client devices,
In the main menu, go to Operations → Patch management → Software updates.
A list of available updates appears.
You can specify a filter to view the list of software updates. Click the Filter icon (
) in the upper right corner of the software updates list to manage the filter. You can also select one of preset filters from the Preset filters drop-down list above the software vulnerabilities list.
To view the properties of an update:
- Click the name of the required software update.
- The properties window of the update opens, displaying information grouped on the following tabs:
To view the statistics of an update installation:
- Select the check box next to the required software update.
- Click the Statistics of update installation statuses button.
The diagram of the update installation statuses is displayed. Clicking a status opens a list of devices on which the update has the selected status.
You can view information about available software updates for third-party software, including Microsoft software, installed on the selected managed device running Windows.
To view a list of available updates for third-party software installed on the selected managed device:
- In the main menu, go to Assets (Devices) → Managed devices.
The list of managed devices is displayed.
- In the list of managed devices, click the link with the name of the device for which you want to view third-party software updates.
The properties window of the selected device is displayed.
- In the properties window of the selected device, select the Advanced tab.
- In the left pane, select the Available updates section. If you want to view only installed updates, enable the Show installed updates option.
The list of available third-party software updates for the selected device is displayed.
Exporting the list of available software updates to a file
You can export the list of updates for third-party software, including Microsoft software, that is displayed at the moment to the CSV or TXT files. You can use these files, for example, to send them to your information security manager or to store them for purposes of statistics.
To export to a text file the list of available updates for third-party software installed on all managed devices:
- In the main menu, go to Operations → Patch management → Software updates.
The page displays a list of available updates for third-party software installed on all managed devices.
- Click the Export to TXT or Export to CSV button, depending on the format you prefer for export.
The file containing the list of available updates for third-party software, including Microsoft software, is downloaded to the device that you use at the moment.
To export to a text file the list of available updates for third-party software installed on the selected managed device:
- Open the list of available third-party software updates on the selected managed device.
- Select the software updates you want to export.
Skip this step if you want to export a complete list of software updates.
If you want to export a complete list of software updates, only updates displaying on the current page will be exported.
If you want to export only installed updates, select the Show installed updates check box.
- Click the Export to TXT or Export to CSV button, depending on the format you prefer for export.
The file containing the list of updates for third-party software, including Microsoft software, installed on the selected managed device is downloaded to the device you are using at the moment.
Approving and declining third-party software updates
When you configure the Install required updates and fix vulnerabilities task, you can create a rule that requires a specific status of updates that are to be installed. For example, an update rule can allow installation of the following:
- Only approved updates
- Only approved and undefined updates
- All updates irrespective of the update statuses
You can approve updates that must be installed and decline updates that must not be installed.
The usage of the Approved status to manage update installation is efficient for a small amount of updates. To install multiple updates, use the rules that you can configure in the Install required updates and fix vulnerabilities task. We recommend that you set the Approved status for only those specific updates that do not meet the criteria specified in the rules. When you manually approve a large amount of updates, performance of Administration Server decreases and may lead to Administration Server overload.
To approve or decline one or several updates:
- In the main menu, go to Operations → Patch management → Software updates.
A list of available updates appears.
- Select the updates that you want to approve or decline.
- Click Approve to approve the selected updates or Decline to decline the selected updates.
The default value is Undefined.
The selected updates have the statuses that you defined.
As an option, you can change the approval status in the properties of a specific update.
To approve or decline an update in its properties:
- In the main menu, go to Operations → Patch management → Software updates.
A list of available updates appears.
- Click the name of the update that you want to approve or decline.
The update properties window opens.
- In the General section, select a status for the update by changing the Update approval status option. You can select the Approved, Declined, or Undefined status.
- Click the Save button to save the changes.
The selected update has the status that you defined.
If you set Declined status for third-party software updates, these updates will not be installed on devices for which they were planned but have not yet been installed. Updates will remain on devices on which they were already installed. If you have to delete them, you can manually delete them locally.
Updating third-party applications automatically
Some third-party applications can be updated automatically. The application vendor defines whether or not the application supports the auto-update feature. If a third-party application installed on a managed device supports auto-update, you can specify the auto-update setting in the application properties. After you change the auto-update setting, Network Agents apply the new setting on each managed device on which the application is installed.
The auto-update setting is independent of the other objects and settings of the Vulnerability and patch management feature. For example, this setting does not depend on an update approval status or the update installation tasks, such as Install required updates and fix vulnerabilities, Install Windows Update updates, and Fix vulnerabilities.
To configure the auto-update setting for a third-party application:
- In the main menu, go to Operations → Third-party applications → Applications registry.
- Click the name of the application for which you want to change the auto-update setting.
To simplify the search, you can filter the list by the Automatic Updates status column.
The application properties window opens.
- In the General section, select a value for the following setting:
- Click the Save button to save the changes.
The auto-update setting is applied to the selected application.