Merge pull request #270763 from SnehaSudhirG/01Apr-GovClouds

updated support matrix and whatsnew

Author: v-dirichards

articles/update-manager/support-matrix.md

@@ -4,7 +4,7 @@ description: This article provides a summary of supported regions and operating
 ms.service: azure-update-manager
 author: SnehaSudhirG
 ms.author: sudhirsneha
-ms.date: 03/26/2024
+ms.date: 04/01/2024
 ms.topic: overview
 ms.custom: references_regions
 ---
@@ -36,15 +36,15 @@ Update Manager doesn't support driver updates.
 
 ### Extended Security Updates (ESU) for Windows Server
 
-Using Azure Update Manager, you can deploy Extended Security Updates for your Azure Arc-enabled Windows Server 2012 / R2 machines. To enroll in Windows Server 2012 Extended Security Updates, follow the guidance on [How to get Extended Security Updates (ESU) for Windows Server 2012 and 2012 R2](/windows-server/get-started/extended-security-updates-deploy#extended-security-updates-enabled-by-azure-arc)
+Using Azure Update Manager, you can deploy Extended Security Updates for your Azure Arc-enabled Windows Server 2012 / R2 machines. To enroll in Windows Server 2012 Extended Security Updates, follow the guidance on [How to get Extended Security Updates (ESU) for Windows Server 2012 and 2012 R2.](/windows-server/get-started/extended-security-updates-deploy#extended-security-updates-enabled-by-azure-arc)
 
 ### First-party updates on Windows
 
 By default, the Windows Update client is configured to provide updates only for the Windows operating system. If you enable the **Give me updates for other Microsoft products when I update Windows** setting, you also receive updates for other Microsoft products. Updates include security patches for Microsoft SQL Server and other Microsoft software.
 
 Use one of the following options to perform the settings change at scale:
 
-- For servers configured to patch on a schedule from Update Manager (with VM `PatchSettings` set to `AutomaticByPlatform = Azure-Orchestrated`), and for all Windows Servers running on an earlier operating system than Windows Server 2016, run the following PowerShell script on the server you want to change:
+- For servers configured to patch on a schedule from Update Manager (with virtual machine `PatchSettings` set to `AutomaticByPlatform = Azure-Orchestrated`), and for all Windows Servers running on an earlier operating system than Windows Server 2016, run the following PowerShell script on the server you want to change:
 
     ```powershell
     $ServiceManager = (New-Object -com "Microsoft.Update.ServiceManager")
@@ -53,7 +53,7 @@ Use one of the following options to perform the settings change at scale:
     $ServiceManager.AddService2($ServiceId,7,"")
     ```
 
-- For servers running Windows Server 2016 or later that aren't using Update Manager scheduled patching (with VM `PatchSettings` set to `AutomaticByOS = Azure-Orchestrated`), you can use Group Policy to control this process by downloading and using the latest Group Policy [Administrative template files](/troubleshoot/windows-client/group-policy/create-and-manage-central-store).
+- For servers running Windows Server 2016 or later that aren't using Update Manager scheduled patching (with virtual machine `PatchSettings` set to `AutomaticByOS = Azure-Orchestrated`), you can use Group Policy to control this process by downloading and using the latest Group Policy [Administrative template files](/troubleshoot/windows-client/group-policy/create-and-manage-central-store).
 
 > [!NOTE]
 > Run the following PowerShell script on the server to disable first-party updates:
@@ -65,23 +65,26 @@ Use one of the following options to perform the settings change at scale:
 > $ServiceManager.RemoveService($ServiceId)
 > ```
 
-### Third-party updates
+### Third party updates
 
-**Windows**: Update Manager relies on the locally configured update repository to update supported Windows systems, either WSUS or Windows Update. Tools such as [System Center Updates Publisher](/mem/configmgr/sum/tools/updates-publisher) allow you to import and publish custom updates with WSUS. This scenario allows Update Manager to update machines that use Configuration Manager as their update repository with third-party software. To learn how to configure Updates Publisher, see [Install Updates Publisher](/mem/configmgr/sum/tools/install-updates-publisher).
+**Windows**: Update Manager relies on the locally configured update repository to update supported Windows systems, either WSUS or Windows Update. Tools such as [System Center Updates Publisher](/mem/configmgr/sum/tools/updates-publisher) allow you to import and publish custom updates with WSUS. This scenario allows Update Manager to update machines that use Configuration Manager as their update repository with third party software. To learn how to configure Updates Publisher, see [Install Updates Publisher](/mem/configmgr/sum/tools/install-updates-publisher).
 
-**Linux**: If you include a specific third-party software repository in the Linux package manager repository location, it's scanned when it performs software update operations. The package isn't available for assessment and installation if you remove it.
+**Linux**: If you include a specific third party software repository in the Linux package manager repository location, it's scanned when it performs software update operations. The package isn't available for assessment and installation if you remove it.
 
 Update Manager doesn't support managing the Configuration Manager client.
 
 ## Supported regions
 
 Update Manager scales to all regions for both Azure VMs and Azure Arc-enabled servers. The following table lists the Azure public cloud where you can use Update Manager.
 
-# [Azure VMs](#tab/azurevm)
+#### [Azure Public cloud](#tab/public)
+
+### Azure VMs
 
 Azure Update Manager is available in all Azure public regions where compute virtual machines are available.
 
-# [Azure Arc-enabled servers](#tab/azurearc)
+### Azure Arc-enabled servers
+
 
 Azure Update Manager is currently supported in the following regions. It implies that VMs must be in the following regions.
 
@@ -105,13 +108,26 @@ UAE | UAE North
 United Kingdom | UK South </br> UK West
 United States | Central US </br> East US </br> East US 2</br> North Central US </br> South Central US </br> West Central US </br> West US </br> West US 2 </br> West US 3
 
+#### [Azure for US Government](#tab/gov)
+
+**Geography** | **Supported regions** | **Details** 
+--- | --- | ---
+United States | USGovVirginia </br>  USGovArizona </br> USGovTexas | For both Azure and Arc VMs </br> For both Azure and Arc VMs </br> For Azure VMs only
+
+#### [Azure operated by 21Vianet](#tab/21via)
+
+**Geography** | **Supported regions** | **Details** 
+--- | --- | ---
+China | ChinaEast </br> ChinaEast2 </br> ChinaNorth </br> ChinaNorth2 | For Azure VMs only </br> For both Azure and Arc VMs </br> For Azure VMs only </br> For both Azure and Arc VMs.
+
+
 ---
 
 ## Supported operating systems
 
 >[!NOTE]
 > - All operating systems are assumed to be x64. For this reason, x86 isn't supported for any operating system.
-> - Update Manager doesn't support VMs created from CIS-hardened images.
+> - Update Manager doesn't support virtual machines created from CIS-hardened images.
 
 ### Support for Azure Update Manager operations
 
@@ -153,12 +169,12 @@ Following is the list of supported images and no other marketplace images releas
 
 | **Publisher**| **Offer** | **SKU**|  **Unsupported image(s)** |
 |----------|-------------|-----| ---|
-|microsoftwindowsserver | windowsserver | * | windowsserver 2008|
+|microsoftwindowsserver | windows server | * | windowsserver 2008|
 |microsoftbiztalkserver | biztalk-server | *|
 |microsoftdynamicsax | dynamics | * |
 |microsoftpowerbi |* |* |
 |microsoftsharepoint | microsoftsharepointserver | *|
-|microsoftvisualstudio | Visualstudio* |  *-ws2012r2. </br> *-ws2016-ws2019 </br> *-ws2022 |
+|microsoftvisualstudio | Visualstudio* |  *-ws2012r2 </br> *-ws2016-ws2019 </br> *-ws2022 |
 |microsoftwindowsserver | windows-cvm | * |
 |microsoftwindowsserver | windowsserverdotnet | *|
 |microsoftwindowsserver | windowsserver-gen2preview | *|

articles/update-manager/whats-new.md

@@ -12,11 +12,18 @@ ms.date: 04/03/2024
 
 [Azure Update Manager](overview.md) helps you manage and govern updates for all your machines. You can monitor Windows and Linux update compliance across your deployments in Azure, on-premises, and on the other cloud platforms from a single dashboard. This article summarizes new releases and features in Azure Update Manager.
 
+## April 2024
+
+### New region support
+
+Azure Update Manager is now supported in US Government and Microsoft Azure operated by 21Vianet. [Learn more](support-matrix.md#supported-regions)
+
+
 ## February 2024
 
 ### Migration scripts to move machines and schedules from Automation Update Management to Azure Update Manager (preview)
 
-Migration scripts allow you to move all machines and schedules in an automation account from Automation Update Management to azure Update Management in an automated fashion. [Learn more](guidance-migration-automation-update-management-azure-update-manager.md).
+Migration scripts allow you to move all machines and schedules in an automation account from Automation Update Management to Azure Update Management in an automated fashion. [Learn more](guidance-migration-automation-update-management-azure-update-manager.md).
 
 
 ### Updates blade in Azure Update Manager (preview)
@@ -75,7 +82,7 @@ Dynamic scope is an advanced capability of schedule patching. You can now create
 
 ### Customized image support
 
-Update Manager now supports [generalized](../virtual-machines/linux/imaging.md#generalized-images) custom images, and a combination of offer, publisher, and SKU for Marketplace/PIR images.See the [list of supported operating systems](support-matrix.md#supported-operating-systems). 
+Update Manager now supports [generalized](../virtual-machines/linux/imaging.md#generalized-images) custom images, and a combination of offer, publisher, and SKU for Marketplace/PIR images. See the [list of supported operating systems](support-matrix.md#supported-operating-systems). 
 
 ### Multi-subscription support