Information:
This is the basic steps to setup VMWare Update Manger (VUM) to update ESX hosts with the latest patches. This process assumes the following:
- Virtual Center (VC) has been purchased.
- Virtual Center and VMWare Update Manager will be installed on the same server.
- VC and VUM are not running on a Virtual Machine (at least not on the same ESX Host to be updated).
- The VUM and VC server has non-authenticated (no proxy, etc) to the VMWare web site to download updates.
1) Install VMWare Update Manager as part of the Virtual Center installation.
a. The installation is pretty straight forward, review the installation of Virtual Center for more information.
All the following commands are performed in the VI Client
2) Install the VI Client Plug-In
a. Select “Plugins” then “Manage Plugins” from the top menu
b. Click the “Download and install” button from the Available tab for “VMWare Update Manager Extension”
i. A installation wizard appears
ii. Accept defaults and click Next for each page.
c. After the plug-in is installed, close the VI Client.
d. Open VI Client
e. Select the “Plugins” then “Manage Plugins” from the top menu
f. Click the Installed Tab
g. Check “Enabled”
h. Click OK
3) Configure VUM Settings
a. Select “Plugins…Update Manager…Settings” from the menu
b. Click the ESX Host Settings in the left pane.
c. Change the settings as shown in the picture, or as needed for your environment.
4) Schedule Downloading of ESX Updates (critical and non-critical)
a. Select “Plugins…Update Manager…Schedule Update Download” from the menu
b. The Schedule Update Download Wizard appears
i. Select Update Types page
1. Check “ESX Server Updates”
a. Will down both critical and non-critical updates
2. Un-check “All Windows Updates”
3. Un-check “All Linux Updates”
4. Click Next
ii. Schedule Task Page
1. Task Name: Change name as needed
2. Task Description: ESX Host Critical and Non-Critical updates
3. Frequency, Interval, and Start Time: Select as desired, or accept defaults
4. Click Next
iii. Email Notification Page
1. Click Next
iv. Summary Page
1. Click Finish
5) Manually run the first download
a. Click the “Scheduled Tasks” button
b. Right click the schedule task that will download the ESX Host updates
c. Click Run
i. This may take awhile, monitor progress in the Recent Tasks of the VI Client. You can also verify download of files by looking in
“C:\Documents and Settings\All Users\Application Data\VMWare\VMWare Update Manager\Data”
6) Attach the default ESX Host Baseline(s) to the ESX Host(s)
a. Click the Inventory button drop down and select “Hosts and Clusters”
b. In the left pane, select an individual ESX Host to attach the baseline(s) to.
i. You can also select the a Datacenter or the parent “Hosts & Cluster” folder
1. Doing either of these will apply the baseline(s) to all ESX Hosts under those objects
c. In the right page, select the “Update Manager” tab
d. On the far right click “Attach Baseline…”
i. You can also Right Click in the column headings and select “Attach Baseline” from the menu.
e. Select checkboxes for Critical and Non-critical Host Updates
f. Click OK
7) Create a Scheduled Scan of the ESX Host(s)
a. Click the “Scheduled Tasks” button
b. Right Click in open area and select “New Scheduled Task”
c. From the list select “Scan for Updates”
i. Click OK
d. The Schedule as Scan wizard appears
i. Task Type page
1. Select “ESX Servers”
2. Click Next
ii. Select Objects page
1. Drill down to the individual ESX host
a. Optional: You can select Datacenters, Folders, or the parent “Hosts & Clusters” to apply the scan to multiple ESX Hosts under those objects
2. Click Next
iii. Schedule Task page
1. Task Name: name as required
a. Example: ESX Host Scan for datacenter abc
2. Task Description: enter as needed
3. Frequency: Select as needed
a. Recommendation: Weekly basis 1 hour before Remediation (to be done later). Preferably during company maintenance windows.
4. Click Next
iv. Summary page
1. Click Finish
8) Manually run the first Scan
a. Assumes the download of the updates are completed, if not wait until completed.
b. Click “Scheduled Tasks” button
c. Right Click the Scan scheduled task
d. Select Run
i. Optional: You can also use in the Inventory “Hosts and Clusters” view and right click any ESX Host, or folder object, etc. then select “Scan for Updates”
9) View Scan Results for Individual ESX Hosts
a. Click the Inventory button drop down and select “Hosts and Clusters”
b. On the left pane select an individual ESX Host
c. On the right pane click the “Update Manager” tab
d. Review the results
10) View Scan Results for Multiple ESX Hosts
a. Click the Inventory button drop down and select “Hosts and Clusters”
b. On the left pane select a Datacenter, Folder, etc
c. On the right pane click the “Update Manager” tab
d. Review the results
11) Schedule Remediation of Baseline
a. Remediation is the process of bringing non-compliant servers in line with the baseline. The baseline is the “fully patched” standard that you wish to enforce.
b. Note: Remediation cannot be scheduled on a recurring basis. It is a one time only event. However, it is useful to allow the remediation to start without human intervention. Also, the scheduled task cannot be updated after it is scheduled, it must be deleted and recreated.
c. Click the “Scheduled Tasks” button
d. Right Click in open area and select “New Scheduled Task”
e. From the list select “Remediate”
i. Click OK
f. The Remediate wizard appears
i. Task Type page
1. Select “ESX Servers”
2. Click Next
ii. Select Objects page
1. Drill down to the individual ESX host
a. Optional: You can select Datacenters, Folders, or the parent “Hosts & Clusters” to apply the remediation to multiple ESX Hosts under those objects.
2. Click Next
iii. Baseline and Updates page
1. Check Critical Host Updates
2. Optional: Check Non-Critical Host Updates. This can be done as a separate scheduled task if desired.
3. Click Next
iv. Host Remediation Options:
1. Configure Date and Time as needed
2. Configure Failure Options as needed, or use recommendation below.
3. Click Next
v. Summary page
1. Click Finish
12) Manually run Remediation without a Scheduled Task
a. Click the Inventory button drop down and select “Hosts and Clusters”
b. Right click an individual ESX Host, Folder, Datacenter, etc.
c. Click Remediate
d. Remediate Wizard opens
i. Follow the wizard, and select Immediately when prompted.
ii. Use the information from “Schedule Remediation of Baseline” for more information
iii. Warning: doing this will perform Remediation immediately which will cause all running VM’s to be migrated to other ESX hosts (assumes HA / DRS), or powered off so that the ESX Host(s) can be put into maintenance mode.
e. Click OK
More Information:
VMWare Update Manager Administration Guide