Skip to content

Commit d867b4d

Browse files
authored
Merge pull request #204578 from SnehaSudhirG/13July-UMCV2-Onboarding
Updated the onboarding features details
2 parents 59dae10 + e0a851d commit d867b4d

File tree

4 files changed

+28
-99
lines changed

4 files changed

+28
-99
lines changed

articles/update-center/assessment-options.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Update management center (preview) provides you the flexibility to assess the st
1818

1919
## Periodic assessment
2020

21-
Periodic assessment is an update setting on a machine that allows you to enable automatic periodic checking of updates by update management center (preview). We recommend that you enable this property on your machines as it allows update management center (preview) to fetch latest updates for your machines every 24 hours and enables you to view the latest compliance status of your machines. You must register this [feature in your Azure subscription](enable-machines.md#from-the-azure-portal). You can enable this setting using update settings flow as detailed [here](manage-update-settings.md#configure-settings-on-single-vm) or enable it at scale by using [Policy](periodic-assessment-at-scale.md).
21+
Periodic assessment is an update setting on a machine that allows you to enable automatic periodic checking of updates by update management center (preview). We recommend that you enable this property on your machines as it allows update management center (preview) to fetch latest updates for your machines every 24 hours and enables you to view the latest compliance status of your machines. You must register this [feature in your Azure subscription](enable-machines.md#periodic-assessment). You can enable this setting using update settings flow as detailed [here](manage-update-settings.md#configure-settings-on-single-vm) or enable it at scale by using [Policy](periodic-assessment-at-scale.md).
2222

2323
:::image type="content" source="media/updates-maintenance/periodic-assessment-inline.png" alt-text="Screenshot showing periodic assessment option." lightbox="media/updates-maintenance/periodic-assessment-expanded.png":::
2424

articles/update-center/enable-machines.md

Lines changed: 11 additions & 87 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,11 @@ Register the periodic assessment and scheduled patching feature resource provide
3131

3232
- Ensure that you meet all [prerequisites for update management center](overview.md#prerequisites)
3333

34-
## From the Azure portal
34+
## Periodic assessment
3535

36-
### [Periodic assessment](#tab/portal-periodic)
36+
The following section describes how to enable periodic assessment feature for your subscription using Azure portal, PowerShell, CLI and REST API:
37+
38+
### [Azure portal](#tab/portal-periodic)
3739

3840
**For Arc-enabled servers**, no onboarding is required for using periodic assessment feature.
3941

@@ -51,37 +53,10 @@ Follow the steps below to register for the *InGuestAutoAssessmentVMPreview* feat
5153

5254
1. In the **Virtual Machine Guest Automatic Patch Assessment Preview** pane, select **Register** to register the provider with your subscription.
5355

54-
55-
### [Scheduled patching](#tab/portal-scheduled-patching)
56-
57-
To use scheduled patching functionality for Azure VMs as well as Arc-enabled servers, your subscriptions for both machine and maintenance configurations must be allowlisted for **InGuestScheduledPatchVMPreview**.
58-
59-
Follow the steps below to register for preview *InGuestScheduledPatchVMPreview* feature:
60-
61-
1. Sign in to the Update management center Private Preview portal link: **https://aka.ms/umc-preview**.
62-
63-
1. In the Azure portal menu, search for **Preview features** and select it from the available options.
64-
65-
1. In the **Preview features** page, search for **InGuestScheduledPatchVMPreview** and select **Allows subscription to enable automatic VM guest patching on schedule** from the list.
66-
67-
1. In the **Allows subscription to enable automatic VM guest patching on schedule** pane, select **Register** to register the provider with your subscription.
68-
69-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
70-
71-
---
72-
73-
>[!NOTE]
74-
> This preview feature will be auto-approved.
75-
7656
After your register for the above feature, go to update management center (preview) portal link: **https://aka.ms/umc-preview**.
7757

7858

79-
80-
## Using the Azure PowerShell
81-
82-
The following section describes how to enable periodic assessment and scheduled patching features for your subscription using Azure PowerShell:
83-
84-
### [Periodic assessment](#tab/ps-periodic-assessment)
59+
### [PowerShell](#tab/ps-periodic)
8560

8661
**Arc-enabled servers** - No onboarding is required to use periodic assessment feature.
8762

@@ -91,58 +66,22 @@ For Azure VMs, to register the resource provider, use:
9166
```azurepowershell
9267
Register-AzResourceProvider -FeatureName InGuestAutoAssessmentVMPreview -ProviderNamespace Microsoft.Compute
9368
```
94-
95-
### [Scheduled patching](#tab/ps-scheduled-patching)
96-
97-
98-
To register the resource provider for both Azure VMs and Arc-enabled servers, use:
99-
100-
```azurepowershell
101-
Register-AzResourceProvider -FeatureName InGuestScheduledPatchVMPreview -ProviderNamespace Microsoft.Compute
102-
```
103-
104-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
105-
106-
---
107-
108-
>[!NOTE]
109-
> This preview feature will be auto-approved.
110-
11169

112-
## Using the Azure CLI
70+
### [CLI](#tab/cli-periodic)
11371

114-
The following section describes how to enable periodic assessment and scheduled patching features in Azure for your subscription using the Azure CLI [az feature register](/cli/azure/feature#az_feature_register) command.
115-
116-
### [Periodic assessment](#tab/cli-periodic-assessment)
72+
To enable periodic assessment feature in Azure for your subscription use the Azure CLI [az feature register](/cli/azure/feature#az_feature_register) command.
11773

11874
**Arc-enabled servers** - No onboarding is required for using Periodic assessment feature.
75+
11976
**Azure machines** - To register the resource provider, use:
12077

12178
```azurecli
12279
az feature register --namespace Microsoft.Compute --name InGuestAutoAssessmentVMPreview
12380
```
12481

125-
### [Scheduled patching](#tab/cli-scheduled-patching)
126-
127-
**Azure VMs and Arc-enabled servers** - To register a resource provider, use:
128-
129-
```azurecli
130-
az feature register --namespace Microsoft.Compute --name InGuestScheduledPatchVMPreview
131-
```
132-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
133-
134-
---
135-
136-
>[!NOTE]
137-
> This preview feature will be auto-approved.
138-
139-
140-
141-
## Using the Azure REST API
142-
143-
The following section describes how to enable periodic assessment and scheduled patching features in Azure for your subscription using the [Azure REST API](/rest/api/azure).
82+
### [REST API](#tab/rest-periodic-assessment)
14483

145-
### [Periodic Assessment](#tab/rest-periodic-assessment)
84+
To enable periodic assessment feature in Azure for your subscription use the [Azure REST API](/rest/api/azure).
14685

14786
>[!NOTE]
14887
> This option is only applicable to Azure VMs.
@@ -155,27 +94,12 @@ POST on `/subscriptions/subscriptionId/providers/Microsoft.Features/providers/Mi
15594

15695
Replace the value `subscriptionId` with the ID of the target subscription.
15796

158-
159-
### [Scheduled patching](#tab/rest-scheduled-patching)
160-
161-
>[!NOTE]
162-
> This option is only applicable to Azure VMs.
163-
164-
To register a resource provider, use:
165-
166-
```rest
167-
POST on `/subscriptions/subscriptionId/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestScheduledPatchVMPreview/register?api-version=2015-12-01`
168-
```
169-
170-
Replace the value `subscriptionId` with the ID of the target subscription.
171-
172-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
173-
17497
---
17598

17699
>[!NOTE]
177100
> This preview feature will be auto-approved.
178101
102+
179103
## Next steps
180104

181105
* [View updates for single machine](view-updates.md)

articles/update-center/manage-update-settings.md

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -35,15 +35,17 @@ To configure update settings on your machines on a single VM, follow these steps
3535
The following update settings are available for configuration for the selected machine(s):
3636

3737
- **Periodic assessment** - enable periodic **Assessment** to run every 24 hours.
38+
>[!NOTE]
39+
> You must [register for the periodic assessement](/azure/update-center/enable-machines?branch=release-updatecenterv2-publicpreview&tabs=portal-periodic%2Cps-periodic-assessment%2Ccli-periodic-assessment%2Crest-periodic-assessment) in your Azure subscription to enable this feature.
3840
39-
- **Hot patching** - for Azure VMs, you can enable [hot patching](/azure/automanage/automanage-hotpatch) on supported Windows Server Azure Edition Virtual Machines (VMs) don't require a reboot after installation. You can use update management center (preview) to install patches with other patch classifications or to schedule patch installation when you require immediate critical patch deployment.
41+
- **Hot patching** - for Azure VMs, you can enable [hot patching](/azure/automanage/automanage-hotpatch) on supported Windows Server Azure Edition Virtual Machines (VMs) don't require a reboot after installation. You can use update management center (preview) to install patches with other patch classifications or to schedule patch installation when you require immediate critical patch deployment.
4042

4143
- **Patch orchestration** option provides the following:
4244

43-
- **Automatic by operating system** - When the workload running on the VM doesn't have to meet availability targets, operating system updates are automatically downloaded and installed. Machines are rebooted as needed.
44-
- **Azure-orchestrated (preview)** - Available *Critical* and *Security* patches are downloaded and applied automatically on the Azure VM using [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching). This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.
45-
- **Manual updates** - Configures the Windows Update agent by setting [configure automatic updates](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#configure-automatic-updates).
46-
- **Image Default** - Only supported for Linux Virtual Machines, this mode honors the default patching configuration in the image used to create the VM.
45+
- **Automatic by operating system** - When the workload running on the VM doesn't have to meet availability targets, operating system updates are automatically downloaded and installed. Machines are rebooted as needed.
46+
- **Azure-orchestrated (preview)** - Available *Critical* and *Security* patches are downloaded and applied automatically on the Azure VM using [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching). This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.
47+
- **Manual updates** - Configures the Windows Update agent by setting [configure automatic updates](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#configure-automatic-updates).
48+
- **Image Default** - Only supported for Linux Virtual Machines, this mode honors the default patching configuration in the image used to create the VM.
4749

4850
1. In **Machines**, select the checkbox for your machine and Select **Next** to continue.
4951

@@ -67,7 +69,7 @@ To configure update settings on your machines on a single VM, follow these steps
6769
1. Under **Operations**, select **Updates**.
6870
1. In **Updates**, select **Go to Updates using Update Center**.
6971
1. In **Updates preview**, select **Update Settings**.
70-
1. In **Change update settings**, you can select the update settings that you want to change for your machine and and follow the procedure from step 3 listed in **From Overview blade** of [Configure settings on single VM](#configure-settings-on-single-vm).
72+
1. In **Change update settings**, you can select the update settings that you want to change for your machine and follow the procedure from step 3 listed in **From Overview blade** of [Configure settings on single VM](#configure-settings-on-single-vm).
7173

7274
---
7375

@@ -105,4 +107,4 @@ A notification appears to confirm that the update settings are successfully chan
105107

106108
* [View assessment compliance](view-updates.md) and [deploy updates](deploy-updates.md) for a selected Azure VM or Arc-enabled server, or across [multiple machines](manage-multiple-machines.md) in your subscription in the Azure portal.
107109
* To view update assessment and deployment logs generated by update management center (preview), see [query logs](query-logs.md).
108-
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).
110+
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).

articles/update-center/periodic-assessment-at-scale.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -12,22 +12,25 @@ ms.topic: conceptual
1212

1313
This article describes how to enable Periodic Assessment for your machines at scale using Azure Policy. Periodic Assessment is a setting on your machine that enables you to see the latest updates available for your machines and removes the hassle of performing assessment manually every time you need to check the update status. Once you enable this setting, update management center (preview) fetches updates on your machine once every 24 hours.
1414

15+
>[!NOTE]
16+
> You must [register for the periodic assessement](/azure/update-center/enable-machines?branch=release-updatecenterv2-publicpreview&tabs=portal-periodic%2Cps-periodic-assessment%2Ccli-periodic-assessment%2Crest-periodic-assessment) in your Azure subscription to enable this feature.
17+
1518
## Enable Periodic assessment for your Azure machines using Policy
1619
1. Go to **Policy** from the Azure portal and under **Authoring**, go to **Definitions**.
17-
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on azure virtual machines* for Azure machines.
20+
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on Azure virtual machines* for Azure machines.
1821
1. When the Policy Definition opens, select Assign.
1922
1. In **Basics**, select your subscription as your scope. You can also specify a resource group within subscription as the scope and select Next.
2023
1. In **Parameters**, uncheck **Only show parameters that need input or review** so that you can see the values of parameters. In **Assessment** mode, select *AutomaticByPlatform*, select *Operating system* and select **Next**. You need to create separate policies for Windows and Linux.
2124
1. In **Remediation**, check **Create a remediation task**, so that periodic assessment is enabled on your machines and click **Next**.
2225
1. In **Non-compliance message**, provide the message that you would like to see in case of non-compliance. For example: *Your machine doesn't have periodic assessment enabled.* Select **Review+Create.**
23-
1. On the **Review+Create** tab, select **Create**. This will the trigger Assignment and Remediation Task creation which can take a minute or so.
26+
1. On the **Review+Create** tab, select **Create**. This action triggers Assignment and Remediation Task creation, which can take a minute or so.
2427

2528
You can monitor the compliance of resources under **Compliance** and remediation status under **Remediation** from the Policy home page.
2629

2730
## Enable Periodic assessment for your Arc machines using Policy
2831

2932
1. Go to **Policy** from the Azure portal and under **Authoring**, **Definitions**.
30-
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on azure Arc-enabled servers* for Arc-enabled machines.
33+
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on Azure Arc-enabled servers* for Arc-enabled machines.
3134
1. When the Policy Definition opens, select **Assign**.
3235
1. In **Basics**, select your subscription as your scope. You can also specify a resource group within subscription as the scope and select **Next**.
3336
1. In **Parameters**, uncheck **Only show parameters that need input or review** so that you can see the values of parameters. In **Assessment** mode, select *AutomaticByPlatform*, select *Operating system* and select **Next**. You need to create separate policies for Windows and Linux.
@@ -53,4 +56,4 @@ You can monitor compliance of resources under **Compliance** and remediation sta
5356

5457
* [View assessment compliance](view-updates.md) and [deploy updates](deploy-updates.md) for a selected Azure VM or Arc-enabled server, or across [multiple machines](manage-multiple-machines.md) in your subscription in the Azure portal.
5558
* To view update assessment and deployment logs generated by update management center (preview), see [query logs](query-logs.md).
56-
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).
59+
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).

0 commit comments

Comments
 (0)