You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/update-manager/prerequsite-for-schedule-patching.md
+18-18Lines changed: 18 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,30 +1,30 @@
1
1
---
2
-
title: Configure schedule patching on Azure VMs for business continuity
2
+
title: Configure scheduled patching on Azure VMs for business continuity
3
3
description: The article describes the new prerequisites to configure scheduled patching to ensure business continuity in Azure Update Manager.
4
4
ms.service: azure-update-manager
5
5
ms.custom: devx-track-azurepowershell
6
-
ms.date: 09/06/2024
6
+
ms.date: 12/03/2024
7
7
ms.topic: how-to
8
8
author: snehasudhirG
9
9
ms.author: sudhirsneha
10
10
---
11
11
12
-
# Configure schedule patching on Azure VMs for business continuity
12
+
# Configure scheduled patching on Azure VMs for business continuity
13
13
14
14
**Applies to:**:heavy_check_mark: Windows VMs :heavy_check_mark: Linux VMs :heavy_check_mark: Azure VMs.
15
15
16
-
This article is an overview on how to configure schedule patching and automatic guest virtual machine (VM) patching on Azure VMs by using the new prerequisite to ensure business continuity. The steps to configure both the patching options on Azure Arc VMs remain the same.
16
+
This article is an overview on how to configure scheduled patching and automatic guest virtual machine (VM) patching on Azure VMs by using the new prerequisite to ensure business continuity. The steps to configure both the patching options on Azure Arc VMs remain the same.
17
17
18
18
Currently, you can enable [automatic guest VM patching](/azure/virtual-machines/automatic-vm-guest-patching) (autopatch) by setting the patch mode to **Azure-orchestrated** in the Azure portal or **AutomaticByPlatform** in the REST API, where patches are automatically applied during off-peak hours.
19
19
20
-
For customizing control over your patch installation, you can use [schedule patching](updates-maintenance-schedules.md#scheduled-patching) to define your maintenance window. You can [enable schedule patching](scheduled-patching.md#schedule-recurring-updates-on-a-single-vm) by setting the patch mode to **Azure-orchestrated** in the Azure portal or **AutomaticByPlatform** in the REST API and attaching a schedule to the Azure VM. So, the VM properties couldn't be differentiated between **schedule patching** or **Automatic guest VM patching** because both had the patch mode set to **Azure-orchestrated**.
20
+
For customizing control over your patch installation, you can use [scheduled patching](updates-maintenance-schedules.md#scheduled-patching) to define your maintenance window. You can [enable scheduled patching](scheduled-patching.md#schedule-recurring-updates-on-a-single-vm) by setting the patch mode to **Azure-orchestrated** in the Azure portal or **AutomaticByPlatform** in the REST API and attaching a scheduled to the Azure VM. So, the VM properties couldn't be differentiated between **scheduled patching** or **Automatic guest VM patching** because both had the patch mode set to **Azure-orchestrated**.
21
21
22
-
In some instances, when you remove the schedule from a VM, there's a possibility that the VM might be autopatched and rebooted. To overcome the limitations, we've introduced a new prerequisite, `ByPassPlatformSafetyChecksOnUserSchedule`, which can now be set to `true` to identify a VM by using schedule patching. It means that VMs with this property set to `true` are no longer autopatched when the VMs don't have an associated maintenance configuration.
22
+
In some instances, when you remove the scheduled from a VM, there's a possibility that the VM might be autopatched and rebooted. To overcome the limitations, we've introduced a new prerequisite, `ByPassPlatformSafetyChecksOnUserSchedule`, which can now be set to `true` to identify a VM by using scheduled patching. It means that VMs with this property set to `true` are no longer autopatched when the VMs don't have an associated maintenance configuration.
23
23
24
24
> [!IMPORTANT]
25
25
> For a continued scheduled patching experience, you must ensure that the new VM property, `BypassPlatformSafetyChecksOnUserSchedule`, is enabled on all your Azure VMs (existing or new) that have schedules attached to them by **June 30, 2023**. This setting ensures that machines are patched by using your configured schedules and not autopatched. Failing to enable by June 30, 2023, gives an error that the prerequisites aren't met.
26
26
27
-
## Schedule patching in an availability set
27
+
## Scheduled patching in an availability set
28
28
29
29
All VMs in a common [availability set](/azure/virtual-machines/availability-set-overview) aren't updated concurrently.
30
30
@@ -43,9 +43,9 @@ To identify the list of VMs with the associated schedules for which you have to
43
43
44
44
In the corresponding **Name** column, you can view the list of VMs to which you need to enable the `ByPassPlatformSafetyChecksOnUserSchedule` flag.
45
45
46
-
## Enable schedule patching on Azure VMs
46
+
## Enable scheduled patching on Azure VMs
47
47
48
-
To enable schedule patching on Azure VMs, follow these steps.
48
+
To enable scheduled patching on Azure VMs, follow these steps.
Scenario 1 | Yes | True | Yes | The schedule patch runs as defined by user. |
293
-
Scenario 2 | Yes | True | No | Autopatch and schedule patch don't run.|
294
-
Scenario 3 | Yes | False | Yes | Autopatch and schedule patch don't run. You get an error that the prerequisites for schedule patch aren't met.|
292
+
Scenario 1 | Yes | True | Yes | The scheduled patch runs as defined by user. |
293
+
Scenario 2 | Yes | True | No | Autopatch and scheduled patch don't run.|
294
+
Scenario 3 | Yes | False | Yes | Autopatch and scheduled patch don't run. You get an error that the prerequisites for scheduled patch aren't met.|
295
295
Scenario 4 | Yes | False | No | The VM is autopatched.|
296
-
Scenario 5 | No | True | Yes | Autopatch and schedule patch don't run. You get an error that the prerequisites for schedule patch aren't met. |
297
-
Scenario 6 | No | True | No | Autopatch and schedule patch don't run.|
298
-
Scenario 7 | No | False | Yes | Autopatch and schedule patch don't run. You get an error that the prerequisites for schedule patch aren't met.|
299
-
Scenario 8 | No | False | No | Autopatch and schedule patch don't run.|
296
+
Scenario 5 | No | True | Yes | Autopatch and schedule patch don't run. You get an error that the prerequisites for scheduled patch aren't met. |
297
+
Scenario 6 | No | True | No | Autopatch and scheduled patch don't run.|
298
+
Scenario 7 | No | False | Yes | Autopatch and scheduled patch don't run. You get an error that the prerequisites for scheduled patch aren't met.|
299
+
Scenario 8 | No | False | No | Autopatch and scheduled patch don't run.|
300
300
301
301
## Next steps
302
302
303
-
- Learn more about [Dynamic scope](dynamic-scope-overview.md), an advanced capability of schedule patching.
303
+
- Learn more about [Dynamic scope](dynamic-scope-overview.md), an advanced capability of scheduled patching.
304
304
- Follow the instructions on how to [manage various operations of Dynamic scope](manage-dynamic-scoping.md)
305
305
- Learn on how to [automatically installs the updates according to the created schedule both for a single VM and at scale](scheduled-patching.md).
306
306
- Learn about [pre and post events](pre-post-scripts-overview.md) to automatically perform tasks before and after a scheduled maintenance configuration.
Copy file name to clipboardExpand all lines: articles/update-manager/scheduled-patching.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,12 +24,12 @@ Update Manager uses a maintenance control schedule instead of creating its own s
24
24
## Prerequisites for scheduled patching
25
25
26
26
1. See [Prerequisites for Update Manager](prerequisites.md).
27
-
1. Patch orchestration of the Azure machines should be set to **Customer Managed Schedules**. For more information, see [Enable schedule patching on existing VMs](prerequsite-for-schedule-patching.md#enable-schedule-patching-on-azure-vms). For Azure Arc-enabled machines, it isn't a requirement.
27
+
1. Patch orchestration of the Azure machines should be set to **Customer Managed Schedules**. For more information, see [Enable schedule patching on existing VMs](prerequsite-for-schedule-patching.md#enable-scheduled-patching-on-azure-vms). For Azure Arc-enabled machines, it isn't a requirement.
28
28
29
29
> [!NOTE]
30
30
> If you set the patch mode to **Azure orchestrated** (`AutomaticByPlatform`) but do not enable the **BypassPlatformSafetyChecksOnUserSchedule** flag and do not attach a maintenance configuration to an Azure machine, it's treated as an [automatic guest patching](/azure/virtual-machines/automatic-vm-guest-patching)-enabled machine. The Azure platform automatically installs updates according to its own schedule. [Learn more](prerequisites.md).
31
31
32
-
## Schedule patching in an availability set
32
+
## Scheduled patching in an availability set
33
33
34
34
All VMs in a common [availability set](/azure/virtual-machines/availability-set-overview) aren't updated concurrently.
0 commit comments