Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to restart device at specific time after Elements Endpoint Protection has installed a Software Updater patch?

Issue:

How to have an Elements Endpoint Protection device restart automatically at a pre-defined time if Patch Management (Software Updater) has installed an update and a restart is required to finish the update? 

Resolution:

When Elements Agent is installed on a server, it will never by default force the server to restart. You can use the Automated Tasks feature to schedule a restart to happen within a maintenance window if there is a restart required to finish the installation of an update. 

Follow the steps below to create a Software Updater installation rule and a restart rule in the profile:

  1. Log in to the Elements Security Center portal: https://elements.withsecure.com
  2. Open Security Configurations > Profiles and select the profile used on the servers
  3. Open Automated Tasks and make sure it is enabled
  4. Add a task with a type such as "Install all security updates", and define a schedule using a CRON expression (for example, Saturdays at 23:00)
  5. Add a second task with the type "Force restart, if required" and schedule it shortly after the installation task
  6. If updates and restarts are only allowed during a maintenance window, disable the Never skip option for the tasks
  7. Click Save profile

Important notes:

Task start times are randomized within a one-hour window to reduce network load, so the restart will occur during the selected hour rather than at an exact minute. The schedule follows the server's local time.

The "If required" restart task will restart the server only if an installed update requires it.