You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/update-center/assessment-options.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ Update management center (preview) provides you the flexibility to assess the st
18
18
19
19
## Periodic assessment
20
20
21
-
Periodic assessment is an update setting on a machine that allows you to enable automatic periodic checking of updates by update management center (preview). We recommend that you enable this property on your machines as it allows update management center (preview) to fetch latest updates for your machines every 24 hours and enables you to view the latest compliance status of your machines. You must register this [feature in your Azure subscription](enable-machines.md#from-the-azure-portal). You can enable this setting using update settings flow as detailed [here](manage-update-settings.md#configure-settings-on-single-vm) or enable it at scale by using [Policy](periodic-assessment-at-scale.md).
21
+
Periodic assessment is an update setting on a machine that allows you to enable automatic periodic checking of updates by update management center (preview). We recommend that you enable this property on your machines as it allows update management center (preview) to fetch latest updates for your machines every 24 hours and enables you to view the latest compliance status of your machines. You must register this [feature in your Azure subscription](enable-machines.md#periodic-assessment). You can enable this setting using update settings flow as detailed [here](manage-update-settings.md#configure-settings-on-single-vm) or enable it at scale by using [Policy](periodic-assessment-at-scale.md).
To use scheduled patching functionality for Azure VMs as well as Arc-enabled servers, your subscriptions for both machine and maintenance configurations must be allowlisted for **InGuestScheduledPatchVMPreview**.
58
-
59
-
Follow the steps below to register for preview *InGuestScheduledPatchVMPreview* feature:
60
-
61
-
1. Sign in to the Update management center Private Preview portal link: **https://aka.ms/umc-preview**.
62
-
63
-
1. In the Azure portal menu, search for **Preview features** and select it from the available options.
64
-
65
-
1. In the **Preview features** page, search for **InGuestScheduledPatchVMPreview** and select **Allows subscription to enable automatic VM guest patching on schedule** from the list.
66
-
67
-
1. In the **Allows subscription to enable automatic VM guest patching on schedule** pane, select **Register** to register the provider with your subscription.
68
-
69
-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
70
-
71
-
---
72
-
73
-
>[!NOTE]
74
-
> This preview feature will be auto-approved.
75
-
76
56
After your register for the above feature, go to update management center (preview) portal link: **https://aka.ms/umc-preview**.
77
57
78
58
79
-
80
-
## Using the Azure PowerShell
81
-
82
-
The following section describes how to enable periodic assessment and scheduled patching features for your subscription using Azure PowerShell:
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
105
-
106
-
---
107
-
108
-
>[!NOTE]
109
-
> This preview feature will be auto-approved.
110
-
111
69
112
-
## Using the Azure CLI
70
+
### [CLI](#tab/cli-periodic)
113
71
114
-
The following section describes how to enable periodic assessment and scheduled patching features in Azure for your subscription using the Azure CLI [az feature register](/cli/azure/feature#az_feature_register) command.
To enable periodic assessment feature in Azure for your subscription use the Azure CLI [az feature register](/cli/azure/feature#az_feature_register) command.
117
73
118
74
**Arc-enabled servers** - No onboarding is required for using Periodic assessment feature.
75
+
119
76
**Azure machines** - To register the resource provider, use:
120
77
121
78
```azurecli
122
79
az feature register --namespace Microsoft.Compute --name InGuestAutoAssessmentVMPreview
**Azure VMs and Arc-enabled servers** - To register a resource provider, use:
128
-
129
-
```azurecli
130
-
az feature register --namespace Microsoft.Compute --name InGuestScheduledPatchVMPreview
131
-
```
132
-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
133
-
134
-
---
135
-
136
-
>[!NOTE]
137
-
> This preview feature will be auto-approved.
138
-
139
-
140
-
141
-
## Using the Azure REST API
142
-
143
-
The following section describes how to enable periodic assessment and scheduled patching features in Azure for your subscription using the [Azure REST API](/rest/api/azure).
POST on `/subscriptions/subscriptionId/providers/Microsoft.Features/providers/Microsoft.Compute/features/InGuestScheduledPatchVMPreview/register?api-version=2015-12-01`
168
-
```
169
-
170
-
Replace the value `subscriptionId` with the ID of the target subscription.
171
-
172
-
For detailed steps to start using scheduled patching, refer to [Prerequisites for scheduled patching](scheduled-patching.md#prerequisites-for-scheduled-patching).
173
-
174
97
---
175
98
176
99
>[!NOTE]
177
100
> This preview feature will be auto-approved.
178
101
102
+
179
103
## Next steps
180
104
181
105
*[View updates for single machine](view-updates.md)
Copy file name to clipboardExpand all lines: articles/update-center/manage-update-settings.md
+9-7Lines changed: 9 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -35,15 +35,17 @@ To configure update settings on your machines on a single VM, follow these steps
35
35
The following update settings are available for configuration for the selected machine(s):
36
36
37
37
-**Periodic assessment** - enable periodic **Assessment** to run every 24 hours.
38
+
>[!NOTE]
39
+
> You must [register for the periodic assessement](/azure/update-center/enable-machines?branch=release-updatecenterv2-publicpreview&tabs=portal-periodic%2Cps-periodic-assessment%2Ccli-periodic-assessment%2Crest-periodic-assessment) in your Azure subscription to enable this feature.
38
40
39
-
-**Hot patching** - for Azure VMs, you can enable [hot patching](/azure/automanage/automanage-hotpatch) on supported Windows Server Azure Edition Virtual Machines (VMs) don't require a reboot after installation. You can use update management center (preview) to install patches with other patch classifications or to schedule patch installation when you require immediate critical patch deployment.
41
+
-**Hot patching** - for Azure VMs, you can enable [hot patching](/azure/automanage/automanage-hotpatch) on supported Windows Server Azure Edition Virtual Machines (VMs) don't require a reboot after installation. You can use update management center (preview) to install patches with other patch classifications or to schedule patch installation when you require immediate critical patch deployment.
40
42
41
43
-**Patch orchestration** option provides the following:
42
44
43
-
-**Automatic by operating system** - When the workload running on the VM doesn't have to meet availability targets, operating system updates are automatically downloaded and installed. Machines are rebooted as needed.
44
-
-**Azure-orchestrated (preview)** - Available *Critical* and *Security* patches are downloaded and applied automatically on the Azure VM using [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching). This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.
45
-
-**Manual updates** - Configures the Windows Update agent by setting [configure automatic updates](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#configure-automatic-updates).
46
-
-**Image Default** - Only supported for Linux Virtual Machines, this mode honors the default patching configuration in the image used to create the VM.
45
+
-**Automatic by operating system** - When the workload running on the VM doesn't have to meet availability targets, operating system updates are automatically downloaded and installed. Machines are rebooted as needed.
46
+
-**Azure-orchestrated (preview)** - Available *Critical* and *Security* patches are downloaded and applied automatically on the Azure VM using [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching). This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.
47
+
-**Manual updates** - Configures the Windows Update agent by setting [configure automatic updates](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#configure-automatic-updates).
48
+
-**Image Default** - Only supported for Linux Virtual Machines, this mode honors the default patching configuration in the image used to create the VM.
47
49
48
50
1. In **Machines**, select the checkbox for your machine and Select **Next** to continue.
49
51
@@ -67,7 +69,7 @@ To configure update settings on your machines on a single VM, follow these steps
67
69
1. Under **Operations**, select **Updates**.
68
70
1. In **Updates**, select **Go to Updates using Update Center**.
69
71
1. In **Updates preview**, select **Update Settings**.
70
-
1. In **Change update settings**, you can select the update settings that you want to change for your machine and and follow the procedure from step 3 listed in **From Overview blade** of [Configure settings on single VM](#configure-settings-on-single-vm).
72
+
1. In **Change update settings**, you can select the update settings that you want to change for your machine and follow the procedure from step 3 listed in **From Overview blade** of [Configure settings on single VM](#configure-settings-on-single-vm).
71
73
72
74
---
73
75
@@ -105,4 +107,4 @@ A notification appears to confirm that the update settings are successfully chan
105
107
106
108
*[View assessment compliance](view-updates.md) and [deploy updates](deploy-updates.md) for a selected Azure VM or Arc-enabled server, or across [multiple machines](manage-multiple-machines.md) in your subscription in the Azure portal.
107
109
* To view update assessment and deployment logs generated by update management center (preview), see [query logs](query-logs.md).
108
-
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).
110
+
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).
Copy file name to clipboardExpand all lines: articles/update-center/periodic-assessment-at-scale.md
+7-4Lines changed: 7 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,22 +12,25 @@ ms.topic: conceptual
12
12
13
13
This article describes how to enable Periodic Assessment for your machines at scale using Azure Policy. Periodic Assessment is a setting on your machine that enables you to see the latest updates available for your machines and removes the hassle of performing assessment manually every time you need to check the update status. Once you enable this setting, update management center (preview) fetches updates on your machine once every 24 hours.
14
14
15
+
>[!NOTE]
16
+
> You must [register for the periodic assessement](/azure/update-center/enable-machines?branch=release-updatecenterv2-publicpreview&tabs=portal-periodic%2Cps-periodic-assessment%2Ccli-periodic-assessment%2Crest-periodic-assessment) in your Azure subscription to enable this feature.
17
+
15
18
## Enable Periodic assessment for your Azure machines using Policy
16
19
1. Go to **Policy** from the Azure portal and under **Authoring**, go to **Definitions**.
17
-
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on azure virtual machines* for Azure machines.
20
+
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on Azure virtual machines* for Azure machines.
18
21
1. When the Policy Definition opens, select Assign.
19
22
1. In **Basics**, select your subscription as your scope. You can also specify a resource group within subscription as the scope and select Next.
20
23
1. In **Parameters**, uncheck **Only show parameters that need input or review** so that you can see the values of parameters. In **Assessment** mode, select *AutomaticByPlatform*, select *Operating system* and select **Next**. You need to create separate policies for Windows and Linux.
21
24
1. In **Remediation**, check **Create a remediation task**, so that periodic assessment is enabled on your machines and click **Next**.
22
25
1. In **Non-compliance message**, provide the message that you would like to see in case of non-compliance. For example: *Your machine doesn't have periodic assessment enabled.* Select **Review+Create.**
23
-
1. On the **Review+Create** tab, select **Create**. This will the trigger Assignment and Remediation Task creation which can take a minute or so.
26
+
1. On the **Review+Create** tab, select **Create**. This action triggers Assignment and Remediation Task creation, which can take a minute or so.
24
27
25
28
You can monitor the compliance of resources under **Compliance** and remediation status under **Remediation** from the Policy home page.
26
29
27
30
## Enable Periodic assessment for your Arc machines using Policy
28
31
29
32
1. Go to **Policy** from the Azure portal and under **Authoring**, **Definitions**.
30
-
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on azure Arc-enabled servers* for Arc-enabled machines.
33
+
1. From the **Category** dropdown, select **Update management center**. Select *[Preview]: Configure periodic checking for missing system updates on Azure Arc-enabled servers* for Arc-enabled machines.
31
34
1. When the Policy Definition opens, select **Assign**.
32
35
1. In **Basics**, select your subscription as your scope. You can also specify a resource group within subscription as the scope and select **Next**.
33
36
1. In **Parameters**, uncheck **Only show parameters that need input or review** so that you can see the values of parameters. In **Assessment** mode, select *AutomaticByPlatform*, select *Operating system* and select **Next**. You need to create separate policies for Windows and Linux.
@@ -53,4 +56,4 @@ You can monitor compliance of resources under **Compliance** and remediation sta
53
56
54
57
*[View assessment compliance](view-updates.md) and [deploy updates](deploy-updates.md) for a selected Azure VM or Arc-enabled server, or across [multiple machines](manage-multiple-machines.md) in your subscription in the Azure portal.
55
58
* To view update assessment and deployment logs generated by update management center (preview), see [query logs](query-logs.md).
56
-
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).
59
+
* To troubleshoot issues, see the [Troubleshoot](troubleshoot.md) update management center (preview).
0 commit comments