Skip to main content

​
Overview

The ManageEngine Patch integration enables ThreatAware to collect read-only data from your ManageEngine Patch Manager console, providing visibility into patch deployment status and helping validate your patch management security controls.
Connection Method: API Setup Time: 15 minutes Access Required: ManageEngine Administrator account

​
Data collected

The ManageEngine Patch integration provides:
  • Patch deployment status
  • Update compliance metrics
  • System patch history
  • Security update tracking

​
Use cases

Patch Compliance Tracking

Monitor patch deployment status and ensure systems are current with security updates

Compliance Validation

Verify patch management controls are in place for all managed systems

Security Monitoring

Identify systems missing critical security patches across your environment

Audit Support

Generate reports showing patch deployment coverage and compliance metrics

​
Setup instructions

1

Log in to ManageEngine Patch Manager Console

Access your ManageEngine Patch Manager Console using an account with administrator privileges.
2

Generate an API Key

In the Patch Manager console, navigate to Admin > API Key Generation.
  • Click Generate Key and create a new key for ThreatAware integration
  • Set the required permissions, typically Read-only for monitoring, unless broader access is needed
  • Copy the API Key generated
3

Configure in ThreatAware

Complete the integration setup in ThreatAware:
  • Open ThreatAware and navigate to Settings > Integrations
  • Search for and select ManageEngine Patch
  • Enter the required credentials:
    • API Key: The key generated in ManageEngine Patch Manager
    • ManageEngine URL: Your ManageEngine Patch Manager instance URL
  • Click Connect to establish the integration
4

Verify Connection

After connecting, ThreatAware will begin polling data from ManageEngine Patch within 1 hour.
  • Check that the Integration Status shows as Active
  • Verify data is appearing in ThreatAware by viewing patch compliance details

​
Required credentials

Field Name: ManageEngine Patch API Key Type: Password (encrypted) Description: The API key generated in ManageEngine Patch Manager for API access
Store this credential securely in your organisation’s password manager for future reference.
Field Name: ManageEngine Patch URL Type: String Description: The URL of your ManageEngine Patch Manager instanceFormat: https://your-manageengine-url.com Example: https://patch.acme.com or https://manageengine.company.net

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings > Integrations in ThreatAware
    • Confirm the ManageEngine Patch integration shows Active status
    • Check the last sync timestamp
  2. Verify Data Collection
    • Wait 60 minutes for the initial data poll
    • Search for a known device in ThreatAware
    • Check for ManageEngine Patch data in device details
  3. Test Queries
    • Create a test query to filter devices with patch data
    • Verify the data matches your expectations

​
Troubleshooting

Symptoms: Integration status shows authentication failureSolutions:
  • Verify the API Key is correct and copied completely
  • Ensure API key generation is enabled in ManageEngine Patch Manager
  • Check that the API key has not expired
  • Confirm the API key was entered without extra spaces
Symptoms: Integration connects but no data appearsSolutions:
  • Verify the API key has read permissions to patch data
  • Review the ManageEngine API Documentation for required permissions
  • Check if there are organisational units the API key cannot access
  • Ensure the API key has permissions across all required scopes
Symptoms: Integration fails to connect or times outSolutions:
  • Verify the ManageEngine URL is correct and accessible from ThreatAware
  • Check firewall rules allow outbound HTTPS (443) to your ManageEngine instance
  • Confirm your ManageEngine Patch Manager is accessible via the internet (or review network requirements)
  • Test the URL in a browser to ensure it’s reachable
Symptoms: Integration shows active but no patch data appearsSolutions:
  • Verify there is patch data in ManageEngine Patch Manager to collect
  • Check the API key’s scope and access permissions
  • Review ThreatAware integration logs (contact support if needed)
  • Confirm the systems you expect to see exist in ThreatAware from other integrations

​
Additional resources

ManageEngine API Documentation

Official ManageEngine documentation for API configuration and permissions

ThreatAware Support

Contact ThreatAware support for integration assistance

​
Best practices

Credential Management
  • Create a dedicated API key specifically for ThreatAware
  • Document credentials in your organisation’s password manager
  • Rotate credentials annually or per your security policy
  • Monitor for authentication failures in ThreatAware regularly
Security Considerations
  • Only grant read-only permissions (never write access)
  • Limit API key scope to only necessary systems
  • Review audit logs in ManageEngine periodically to monitor API usage
  • Follow your organisation’s least privilege principles