This document outlines the supported deployment models for Tenable Patch Management Server in both Lab or Evaluation and Production environments. Select the configuration that aligns with your intended use.

Lab or Evaluation Environment

This deployment model is intended for evaluation, testing, or small-scale lab environments. It allows both the Tenable Patch Management Server Application and Microsoft SQL Server Express to be installed on a single Windows Server machine.

Note: This configuration is not supported for production deployments.

Note: This configuration supports only up to 2,000 clients.

Server Requirements

Refer to the Tenable Patch Server Requirements for the minimum specifications required (CPU, memory, disk space, and operating system).

Setup Instructions

• Use the Quick Install method.

• The setup process requires only a license key and a username.

• SQL Server Express is installed and configured automatically.

• Standard antivirus exceptions configurations must be applied as they would be in a production deployment. Refer to Antivirus Exceptions for details.

• Tenable Patch Server installation automatically creates Windows Firewall rules for ports in all network profiles during the Tenable Patch Server installation. If using a firewall, other than Windows Defender, you may need to manually configure the required ports to ensure communications are available. For the required ports, refer to Communication and Network Requirements for details.

Production Environment

A production deployment of the Tenable Patch Management Server requires separation of application and database roles across two servers: one for the Tenable Patch Management Server Application and another for Microsoft SQL Server.

Note: Quick Install is not supported for production use.

Note: The Tenable Patch Management Server Application and SQL Server must be installed on separate machines.

Server Architecture

Component	Description
Tenable Patch Management Application Server	Hosts the Tenable Patch Management Server application
SQL Server	Hosts the Tenable Patch Management database

Server Requirements

Refer to the Tenable Patch Management Server Requirements for detailed production specifications based on the number of clients.

SQL Server Requirements

Refer to the SQL Server Requirements for detailed production specifications based on the number of clients.

Setup Instructions

• Use the full installation process as documented in the Tenable Patch Management Server Installation Guide.

• All standard antivirus exceptions configurations must be implemented, consistent with production best practices. Refer to Antivirus Exceptions for details.

• Tenable Patch Server installation automatically creates Windows Firewall rules for ports in all network profiles during the Tenable Patch Server installation. If using a firewall, other than Windows Defender, you may need to manually configure the required ports to ensure communications are available. For the required ports, refer to Communication and Network Requirements for details.

Summary Comparison

Deployment Type	Quick Install Supported	Single Server	Maximum Clients	Production Support
Lab/Evaluation	Yes	Yes	2,000	No
Production	No	No	Based on sizing	Yes

If you need additional assistance with specific deployment sizing or configuration planning, please contact Tenable Support for further guidance.