Decline or reinstate patches (Linux only)

Use the Decline action to stop specific patches from installing on selected assets. You can clear the declined status at any time to allow the patch to install in the future.

Declining patches lets you intentionally manage patch installation. Use this option to:

  • Block patches that are known to cause issues in your environment
  • Keep patching decisions and exceptions visible across Patch Management
  • Resume patch installation without changing policies or configuration

The declined status is available throughout Patch Management, including:

  • Assets view that show devices with declined patches.
  • Patch status columns that display the Declined state.
  • The Actions menu, where you can select Decline patches.

Decline pending patches

While reviewing pending patches, you may decide to decline patches if priorities change or issues are identified.

Declining a patch indicates that it is not appropriate for the selected devices or environment at this time. Declined patches are removed from future eligible lists, helping reduce noise and allowing you to focus on patches that meaningfully reduce risk.

You might decline a patch when:

  • The patch is not applicable to the device or software.
  • The patch is superseded by a newer update.
  • The patch is known to cause issues or conflicts.
  • The patch is low risk or does not align with current priorities.
  • The patch is managed outside N‑central.

You can decline patches in the following ways:

  • Decline a single pending patch.
  • Select multiple patches and decline them in bulk.

Declined patches can be reinstated later if they become relevant. You can decline patches directly from the Available Patches view.

To decline patches:

  1. Go to Endpoint Remediation > Patches > Available Patches.
  2. Select the patch or patches you want to decline.
  3. Select Decline patches from the Actions menu.
  4. On the asset selection page, do one of the following:
    • To decline the patch for all listed assets, select the checkbox next to Asset name.
    • To decline the patch for specific assets, select the checkbox next to each asset name.
  5. Select Decline patches from the Actions menu to complete the action.

The declined patches are excluded from installation on the selected assets.

Reinstate patch installation

If a previously declined patch is ready to be installed, you can remove the declined status at any time.

Removing the declined status allows the patch to be installed in future patch cycles, helping you quickly resume patching after issues are resolved or validation is complete.

To reinstate patches:

  1. Go to Endpoint Remediation > Patches > Available Patches.
  2. Select the patch or patches you want to reinstate.
  3. Select Un-decline patches from the Actions menu.
  4. On the asset selection page, do one of the following:
    • To reinstate the patch for all listed assets, select the checkbox next to Asset name.
    • To reinstate the patch for specific assets, select the checkbox next to each asset name.
  5. Select Un-decline patches from the Actions menu to complete the action.

This removes the declined status to allow the patch to be installed in future patch cycles.

Related Topic