Added a new article, images and updated toc

Author: SnehaSudhirG

articles/update-manager/manage-hot-patching-arc-machines.md

@@ -0,0 +1,127 @@
+---
+title: Hotpatching on Azure Arc-enabled machines
+description: This article details how to manage hotpatching on Azure Arc-enabled machines.
+ms.service: azure-update-manager
+ms.date: 10/06/2024
+ms.topic: how-to
+author: SnehaSudhirG
+ms.author: sudhirsneha
+---
+
+# Manage Hotpatches on Arc-Enabled Machines
+
+**Applies to:** :heavy_check_mark: Windows VMs :heavy_check_mark: Linux VMs :heavy_check_mark: On-premises environment :heavy_check_mark: Azure Arc-enabled servers.
+
+Azure Update Manager enables you to install hotpatches on Windows Server Azure Editions and Arc-enabled machines. For more information, see [Hotpatch for virtual machines](https://learn.microsoft.com/windows-server/get-started/hotpatch). 
+
+This article explains how to install hotpatches on compatible Arc-enabled machines. For Hotpatches being non-intrusive on availability, you can create faster schedules and update your services immediately after release, with less planning to maintain reliability of your machines at-scale.  
+
+## Support matrix
+
+- Windows Server 2025 Standard Edition 
+- Windows Server 2025 Datacenter Edition 
+
+
+## Prerequisites
+
+- Verify that the machine has a supported OS SKU [Learn more](#support-matrix).
+- Confirm that Virtualization Based Security (VBS) is enabled. [Learn more](https://techcommunity.microsoft.com/t5/windows-server-news-and-best/how-to-preview-azure-arc-connected-hotpatching-for-windows/ba-p/4246895).
+- Ensure the machine is Arc-enabled. 
+
+## Manage Hotpatches
+
+### Enroll hotpatch license
+
+To enroll hotpatch license, follow these steps:
+
+1. Sign in to the [Azure portal](https://portal.azure.com) and go to **Azure Update Manager**
+1. Under **Resources**, select **Machines** and then select the specific *Arc-enabled server*.
+1. Under the **Recommended updates** section, in Hotpatch, select **Change**.
+1. In the Hotpatch (preview), select **Enroll in Hotpatch** and then select **Confirm**.
+       
+   :::image type="content" source="./media/manage-hot-patching-arc-machines/enroll-hot-patch-license.png" alt-text="Screenshot showing how to enroll hotpatch license." lightbox="./media/manage-hot-patching-arc-machines/enroll-hot-patch-license.png"::: 
+       
+### Manage hotpatch updates
+
+After you enroll to hotpatch license, your machine is automatically opted in to receive hotpatch updates. 
+
+To re-enable or disable updates at scale, follow these steps: 
+
+1. Sign in to the [Azure portal](https://portal.azure.com) and go to Azure Update Manager.
+1. Under **Resources**, select **Machines** and in the **Azure Update Manager | Machines** page, under **Settings**, select **Update settings**.
+1. In **Change update settings** page, select **+Add machine**, to select the machine to which you want to change the update settings.
+1. In **Select resources** page, select the machines and then select **Add** to view the machines in **Change update settings** page.
+1. In the **Hotpatch** dropdown, select **Enable** and then select **Save**.
+
+   :::image type="content" source="./media/manage-hot-patching-arc-machines/manage-hot-patch-updates.png" alt-text="Screenshot showing how to manage hotpatch updates." lightbox="./media/manage-hot-patching-arc-machines/enroll-hotpatch-license.png"::: 
+
+### View hotpatch status 
+
+#### [At scale](#tab/hotpatch-scale)
+
+To view the hotpatch status at scale on your machines, follow these steps:
+
+1. Sign in to the [Azure portal](https://portal.azure.com) and go to Azure Update Manager.
+1. Under **Resources**, select **Machines** and then select **Edit columns**.
+1. In **Choose columns**, select **Hotpatch status** and then select **Save**.
+   The **Hotpatch status** column appears in the machines grid and displays the status for all Azure machines and Arc-enabled machines. To view only Arc related details, you can filter Resource Type as **Arc-enabled server**. 
+
+    :::image type="content" source="./media/manage-hot-patching-arc-machines/view-status-at-scale.png" alt-text="Screenshot showing how to view hotpatching status at scale." lightbox="./media/manage-hot-patching-arc-machines/view-status-at-scale.png":::
+
+#### [On single VM](#tab/hotpatch-single)
+
+To view the hotpatch status on a single machine, follow these steps:
+
+1. Sign in to the [Azure portal](https://portal.azure.com) and go to Azure Update Manager.
+1. Under **Resources**, select **Machines** and then select the specific Arc-enabled machine.
+1. Under the **Recommended updates** section, you can view the Hotpatch status for your VM.
+
+   :::image type="content" source="./media/manage-hot-patching-arc-machines/view-status-single-machine.png" alt-text="Screenshot showing how to view hotpatching status on single virtual machine." lightbox="./media/manage-hot-patching-arc-machines/view-status-single-machine.png":::
+
+---
+
+### Hotpatch statuses
+
+| Status |  Meaning    |
+|------|-----|
+| Not enrolled| License is available but not enrolled on this machine. |
+| Enabled     | License is enrolled and machine is enabled for receiving hotpatch updates.|
+| Canceled | License has been canceled on the machine.   |
+| Disabled | License is enrolled but the machine is disabled for receiving hotpatch updates. |
+| Pending | Interim status while enrollment is in progress. |
+
+### Check hotpatch updates
+
+You can enable either [periodic assessment](assessment-options.md#periodic-assessment) or [one-time update](assessment-options.md#check-for-updates-nowon-demand-assessment) to check for latest hotpatch updates. 
+
+Periodic assessment automatically assesses for available updates and ensures that available patches are detected. You can view the results of the assessment on the **Recommended updates** tab, including the time of the last assessment. 
+
+You can also choose to trigger an *on-demand patch assessment* for your VM at any time using the **Check for updates** option and review the results after assessment completes. In this assessment result, you can view the reboot status of the given update under **Reboot required** column. 
+
+:::image type="content" source="./media/manage-hot-patching-arc-machines/check-hot-patch-updates.png" alt-text="Screenshot showing how to check hotpatching updates." lightbox="./media/manage-hot-patching-arc-machines/check-hot-patch-updates.png":::
+
+
+### Install hotpatch updates
+
+To install, you can create a [user-defined schedule](scheduled-patching.md#schedule-recurring-updates-on-a-single-vm) or [one-time update](quickstart-on-demand.md#install-updates). You can install it immediately after it's available, allowing your machine to get secure faster. 
+
+Using either of these options you can choose to install all available update classifications or only security updates. You can also specify updates to include or exclude by providing a list of individual hotpatch knowledge base articles. 
+
+This ensures hotpatch updates that don't require reboots are installed in the same schedule or one-time update, making patch installation window predictable. 
+
+### View history
+
+You can also view the history of update deployments on your VM through the [history](deploy-updates.md#view-update-history-for-a-single-vm). 
+
+Update history from the past 30 days is displayed, along with patch installation details such as reboot status. 
+
+:::image type="content" source="./media/manage-hot-patching-arc-machines/history-update-deployments.png" alt-text="Screenshot showing how to view the history of update deployments on your VM." lightbox="./media/manage-hot-patching-arc-machines/history-update-deployments.png":::
+ 
+
+
+## Next steps
+
+* Learn more about [configure update settings](manage-update-settings.md) on your machines.
+* Learn more on how to perform an [on-demand update](deploy-updates.md).
+
+

articles/update-manager/media/manage-hot-patching-arc-machines/check-hot-patch-updates.png

@@ -103,6 +103,8 @@ items:
         href: pre-post-events-schedule-maintenance-configuration.md
       - name: Manage pre and post events 
         href: manage-pre-post-events.md  
+    - name: Manage Hotpatches on Arc-Enabled Machines
+      href: manage-hotpatches-arc-enabled-machines.md
     - name: Manage updates for Azure VMs using REST API
       href: manage-vms-programmatically.md
     - name: Manage updates for Arc-enabled servers using REST API