Skip to content

Commit e1c295f

Browse files
SnehaSudhirGSnehaSudhirG
committed
feedback incorporated
1 parent 3ffdade commit e1c295f

File tree

1 file changed

+90
-77
lines changed

1 file changed

+90
-77
lines changed

‎articles/update-center/prerequsite-for-schedule-patching.md

Lines changed: 90 additions & 77 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,18 @@
11
---
2-
title: Prerequisites for scheduled patching in update management center (preview).
3-
description: The article describes the new prerequisites to configure scheduled patching in Update management center (preview).
2+
title: Configure schedule patching on Azure VMs to ensure business continuity in update management center (preview).
3+
description: The article describes the new prerequisites to configure scheduled patching to ensure business continuity in Update management center (preview).
44
ms.service: update-management-center
5-
ms.date: 04/18/2023
5+
ms.date: 04/24/2023
66
ms.topic: conceptual
77
author: snehasudhirG
88
ms.author: sudhirsneha
99
---
1010

11-
# Configure Azure VMs for enhanced patching
11+
# Configure schedule patching on Azure VMs to ensure business continuity
1212

1313
**Applies to:** :heavy_check_mark: Windows VMs :heavy_check_mark: Linux VMs :heavy_check_mark: Azure VMs.
1414

15-
This article is an overview on how to configure Schedule patching and Automatic guest VM patching on Azure VMs using the new prerequisite. The steps to configure both the patching options on Arc VMs continue to remain the same.
15+
This article is an overview on how to configure Schedule patching and Automatic guest VM patching on Azure VMs using the new prerequisite to ensure business continuity. The steps to configure both the patching options on Arc VMs continue to remain the same.
1616

1717
Currently, you can enable [Automatic guest VM patching](../virtual-machines/automatic-vm-guest-patching.md) (Autopatch) by setting the patch mode to **Azure-orchestrated** or **AutomaticByPlatform** on Azure portal and using REST API respectively, where patches are automatically applied during off-peak hours.
1818

@@ -22,7 +22,7 @@ However, in certain cases, when you remove the schedule from a VM, there is a po
2222

2323

2424
> [!IMPORTANT]
25-
> For a seamless scheduled patching experience, you must ensure that the new VM property is enabled on all your Azure VMs (existing or new) that have schedules attached to them **before April 30, 2023**. Failing to update will give an error that the prerequisites aren't met.
25+
> For a continued scheduled patching experience, you must ensure that the new VM property, *BypassPlatformSafetyChecksOnUserSchedule*, is enabled on all your Azure VMs (existing or new) that have schedules attached to them **before May 12, 2023**. This setting will ensure machines are patched using your configured schedules and not autopatched. Failing to enable the pre-requisite will give an error that the prerequisites aren't met.
2626
2727

2828
## Enable schedule patching on Azure VMs
@@ -31,9 +31,9 @@ However, in certain cases, when you remove the schedule from a VM, there is a po
3131

3232
**Prerequisite**
3333

34-
Patch orchestration = Azure-orchestrated with user managed schedules (Preview).
34+
Patch orchestration = Customer managed schedules.
3535

36-
Select the patch orchestration option as **Azure-orchestrated with user managed schedules(Preview)**.
36+
Select the patch orchestration option as **Customer managed schedules**.
3737
The new patch orchestration option enables the following VM properties on your behalf after receiving your consent:
3838

3939
- Patch mode = Azure-orchestrated
@@ -60,15 +60,15 @@ To schedule patch the newly created VMs, follow the procedure from step 2 in **E
6060
You can update the patch orchestration option for existing VMs that either already have schedules associated or are to be newly associated with a schedule:
6161

6262
> [!NOTE]
63-
> If the **Patch orchestration** is set as *Azure-orchestrated or Azure-orchestrated Global safe deployment (AutomaticByPlatform)*, the **BypassPlatformSafetyChecksOnUserSchedule** is set to *False* and there is no schedule associated, the VM(s) will be autopatched.
63+
> If the **Patch orchestration** is set as *Azure-orchestrated or Azure-orchestrated safe deployment (AutomaticByPlatform)*, the **BypassPlatformSafetyChecksOnUserSchedule** is set to *False* and there is no schedule associated, the VM(s) will be autopatched.
6464
6565
To update the patch mode, follow these steps:
6666

6767
1. Sign in to the [Azure portal](https://portal.azure.com)
6868
1. Go to **Update management center (Preview)**, select **Update Settings**.
6969
1. In **Change update settings**, select **+Add machine**.
7070
1. In **Select resources**, select your VMs and then select **Add**.
71-
1. In **Change update settings**, under **Patch orchestration**, select *Azure-orchestrated with user managed schedules(Preview)* and then select **Save**.
71+
1. In **Change update settings**, under **Patch orchestration**, select *Customer managed schedules* and then select **Save**.
7272

7373
Attach a schedule after you complete the above steps.
7474

@@ -79,55 +79,61 @@ Attach a schedule after you complete the above steps.
7979
- Patch mode = AutomaticByPlatform
8080
- BypassPlatformSafetyChecksOnUserSchedule = TRUE
8181

82-
**Enable for new VMs**
82+
**Enable on Windows VMs**
8383

8484
```
85-
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2020-12-01`
85+
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2023-03-01`
8686
```
8787

8888
```json
89-
{
90-
"location": "<location>",
91-
"properties": {
92-
"osProfile": {
93-
"windowsConfiguration": {
94-
"provisionVMAgent": true,
95-
"enableAutomaticUpdates": true,
96-
"patchSettings": {
97-
"patchMode": "AutomaticByPlatform"
98-
}
99-
}
100-
}
101-
}
102-
}
103-
```
89+
{
90+
"location":"<location>",
91+
"properties": {
92+
"osProfile": {
93+
"windowsConfiguration": {
94+
"provisionVMAgent": true,
95+
"enableAutomaticUpdates": true,
96+
"patchSettings": {
97+
"patchMode": "AutomaticByPlatform",
98+
"automaticByPlatformSettings":{
99+
"bypassPlatformSafetyChecksOnUserSchedule":true
100+
}
101+
}
102+
}
103+
}
104+
}
105+
}
104106

105-
**Enable for existing VMs**
107+
```
108+
**Enable on Linux VMs**
106109

107110
```
108-
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2020-12-01`
111+
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2023-03-01`
109112
```
110113

111114
```json
112-
{
113-
"location": "<location>",
114-
"properties": {
115-
"osProfile": {
116-
"windowsConfiguration": {
117-
"provisionVMAgent": true,
118-
"enableAutomaticUpdates": true,
119-
"patchSettings": {
120-
"patchMode": "AutomaticByPlatform"
121-
}
122-
}
123-
}
124-
}
125-
}
115+
{
116+
117+
"location":"<location>",
118+
"properties": {
119+
"osProfile": {
120+
" linuxConfiguration": {
121+
"provisionVMAgent": true,
122+
"enableAutomaticUpdates": true,
123+
"patchSettings": {
124+
"patchMode": "AutomaticByPlatform",
125+
"automaticByPlatformSettings":{
126+
"bypassPlatformSafetyChecksOnUserSchedule":true
127+
}
128+
}
129+
}
130+
}
131+
}
132+
}
126133
```
127134
---
128135
> [!NOTE]
129136
> Currently, you can only enable the new prerequisite for schedule patching via Azure portal and REST API. It cannot be enabled via Azure CLI and PowerShell.
130-
131137
---
132138

133139
## Enable automatic guest VM patching on Azure VMs
@@ -162,7 +168,7 @@ To update the patch mode, follow these steps:
162168
1. Go to **Update management center (Preview)**, select **Update Settings**.
163169
1. In **Change update settings**, select **+Add machine**.
164170
1. In **Select resources**, select your VMs and then select **Add**.
165-
1. In **Change update settings**, under **Patch orchestration**, select *Azure-orchestrated Global safe deployment* and then select **Save**.
171+
1. In **Change update settings**, under **Patch orchestration**, select *Azure-orchestrated-safe deployment* and then select **Save**.
166172

167173

168174
# [REST API](#tab/auto-rest-api)
@@ -172,50 +178,57 @@ To update the patch mode, follow these steps:
172178
- Patch mode = AutomaticByPlatform
173179
- BypassPlatformSafetyChecksOnUserSchedule = FALSE
174180

175-
**Enable for new VMs**
181+
**Enable on Windows VMs**
176182

177183
```
178-
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2020-12-01`
184+
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2023-03-01`
179185
```
180186

181187
```json
182-
{
183-
"location": "<location>",
184-
"properties": {
185-
"osProfile": {
186-
"windowsConfiguration": {
187-
"provisionVMAgent": true,
188-
"enableAutomaticUpdates": true,
189-
"patchSettings": {
190-
"patchMode": "AutomaticByPlatform"
191-
}
192-
}
193-
}
194-
}
195-
}
188+
{
189+
190+
"location":"<location>",
191+
"properties": {
192+
"osProfile": {
193+
"windowsConfiguration": {
194+
"provisionVMAgent": true,
195+
"enableAutomaticUpdates": true,
196+
"patchSettings": {
197+
"patchMode": "AutomaticByPlatform",
198+
"automaticByPlatformSettings":{
199+
"bypassPlatformSafetyChecksOnUserSchedule":false
200+
}
201+
}
202+
}
203+
}
204+
}
205+
}
196206
```
197207

198-
**Enable for existing VMs**
208+
**Enable on Linux VMs**
199209

200210
```
201-
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2020-12-01`
211+
PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2023-03-01`
202212
```
203213

204214
```json
205-
{
206-
"location": "<location>",
207-
"properties": {
208-
"osProfile": {
209-
"windowsConfiguration": {
210-
"provisionVMAgent": true,
211-
"enableAutomaticUpdates": true,
212-
"patchSettings": {
213-
"patchMode": "AutomaticByPlatform"
214-
}
215-
}
216-
}
217-
}
218-
}
215+
{
216+
"location":"<location>",
217+
"properties": {
218+
"osProfile": {
219+
" linuxConfiguration": {
220+
"provisionVMAgent": true,
221+
"enableAutomaticUpdates": true,
222+
"patchSettings": {
223+
"patchMode": "AutomaticByPlatform",
224+
"automaticByPlatformSettings":{
225+
"bypassPlatformSafetyChecksOnUserSchedule":false
226+
}
227+
}
228+
}
229+
}
230+
}
231+
}
219232
```
220233
---
221234

0 commit comments

Comments
 (0)