VMware vCenter Update Manager Administration …

1 VMware vCenter Update ManagerAdministration GuidevCenter Update Manager document supports the version of each product listed andsupports all subsequent versions until the document is replacedby a new edition. To check for more recent editions of thisdocument, see vCenter Update Manager Administration Guide2 VMware , can find the most up-to-date technical documentation on the VMware Web site at: VMware Web site also provides the latest product you have comments about this documentation, submit your feedback 2009, 2010 VMware , Inc. All rights reserved. This product is protected by and international copyright andintellectual property laws. VMware products are covered by one or more patents listed at is a registered trademark or trademark of VMware , Inc.

2 In the United States and/or other jurisdictions. All other marksand names mentioned herein may be trademarks of their respective , Hillview Alto, CA Information 7 About This Book 9 1 Understanding Update Manager 11 Security Best Practices 12 Advantages of Compliance 12 Compliance and Security Best Practices 12 Update Manager Client Overview 12 About the Update Manager Process 13 Configuring the Update Manager Patch Download Source 14 Downloading Patches and Patch Metadata 14 Creating Baselines and Baseline Groups 15 Attaching Baselines and Baseline Groups to vSphere Objects 15 Scanning Selected vSphere Objects 15 Reviewing Scan Results 16 Staging Patches for Hosts 16 Remediating Selected vSphere Objects 17 Using Baselines and Baseline Groups 17 Baseline Types 18 Update Manager Default Baselines 18 Baseline Groups 19 Baseline

3 Attributes 19 Update Manager Settings 20 2 Setting Up, Installing, and Upgrading Update Manager 21 Update Manager Hardware Requirements 21 Preparing the Update Manager Database 22 Supported Database Formats 22 Configure an Oracle Database 23 Configure a Microsoft SQL Server Database 25 Maintaining Your Update Manager Database 27 Installing and Uninstalling Update Manager 27 Installing Update Manager 27 Installing the Guest Agent 30 Uninstalling Update Manager 30 Upgrading Update Manager 31 Upgrade Update Manager Server 32 Upgrade Update Manager Client 33 Update Manager Best Practices and Recommendations 33 Update Manager Deployment Configurations 33 Update Manager Deployment Models and Their Usage 35 VMware , Inc.

4 3 3 Installing, Setting Up, and Using the Update Manager Download Service 37 Installing the Update Manager Download Service 38 Install the Update Manager Download Service 38 Set Up the Update Manager Download Service 39 Download Patches Using the Update Manager Download Service 39 Download Third-Party Patches for ESX/ESXi Hosts 39 Export the Downloaded Updates 40 4 Configuring Update Manager 41 Configure Update Manager Network Connectivity Settings 42 Configuring Update Manager Patch Download Sources 43 Configure Update Manager to Use the Internet as a Patch Download Source 43 Add a Third-Party Patch Download Source for ESX Hosts 44 Use a Shared Repository as a Patch Download Source 44 Configure Update Manager Proxy Settings

5 45 Configure Checking for Patches 46 Take Snapshots Before Remediation 46 Configure How Update Manager Responds to Failure to Put Hosts in Maintenance Mode 47 Configure Smart Rebooting 48 Configure Update Manager Patch Download Location 48 Configure Mail Sender Settings 49 Restart the Update Manager Service 49 Run the VMware vCenter Update Manager Update Download Task 50 5 Working with Baselines and Baseline Groups 51 Creating Baselines 52 Create a Patch Baseline 52 Filter the Patches in the New Baseline Wizard 54 Create a Host Upgrade Baseline 55 Create a Virtual Appliance Upgrade Baseline 57 Creating Baseline Groups 58 Create a Host Baseline Group 59 Create a Virtual Machine and Virtual Appliance Baseline Group 59 Add Baselines to a Baseline Group 60 Remove Baselines from a Baseline Group 60 Attach Baselines and Baseline Groups to Objects 61 Filter the Baselines and Baseline Groups Attached to an object 62 Detach Baselines and Baseline Groups from Objects 62 Edit a Patch Baseline 63 Edit a Host Upgrade Baseline 63 Edit a Virtual Appliance Upgrade Baseline 64 Edit a Baseline Group 64 Delete Baselines 64 Delete Baseline Groups 65 6 Scanning vSphere Objects and Viewing Scan Results 67 Manually Initiate a Scan of ESX/ESXi Hosts 67 VMware vCenter Update Manager Administration Guide4 VMware .

6 Initiate a Scan of Virtual Machines and Virtual Appliances 68 Schedule a Scan 68 Viewing Scan Results and Compliance States for vSphere Objects 69 View Compliance Information for vSphere Objects 69 Compliance View 70 Review Baseline or Baseline Group Compliance with vSphere Objects 71 Viewing Patch Details 71 Viewing Upgrade Details 72 7 Remediating vSphere Objects 73 Orchestrated Upgrades of Hosts and Virtual Machines 73 Remediation of Hosts 74 Remediation Specifics of ESX Hosts 74 Remediation Specifics of ESXi Hosts 75 Remediation of Templates 75 Rolling Back to a Previous Version 76 Rebooting Virtual Machines After Patch Remediation 76 Stage Patches for ESX/ESXi Hosts 76 Manually Remediating Hosts, Virtual Machines and Virtual Appliances 77 Manually Remediate Hosts Against Upgrade and Patch Baselines 77 Manually Remediate Virtual Machines and Virtual Appliances 78 Scheduling Remediation for Hosts.

7 Virtual Machines and Virtual Appliances 79 Schedule Host Remediation Against Upgrade and Patch Baselines 80 Schedule Virtual Machine and Virtual Appliance Remediation 81 8 View Update Manager Events 83 View Tasks and Events for a Selected object 83 Update Manager Events 84 9 Patch Repository 91 View Available Patches 91 Add and Remove Patches from a Baseline 92 Search for Patches in the Patch Repository 92 10 Common User Scenarios 93 Orchestrated Datacenter Upgrades Scenarios 93 Orchestrated Upgrade of Hosts Scenario 94 Orchestrated Upgrade of Virtual Machines Scenario 94 Upgrade and Apply Patches to Hosts Using Baseline Groups Scenario 95 Apply Patches to Hosts Scenario 96 Apply Patches to Virtual Machines Scenario 97 Upgrade Virtual Appliances Scenario 98 Keep the vSphere Inventory Up to Date Scenario 99 Generating Common Database Reports 100 Generate Common Reports Using Microsoft Office Excel 2003 100 Generate Common Reports Using Microsoft SQL Server Query 101 ContentsVMware, Inc.

8 511 Troubleshooting 103 Connection Loss with Update Manager Server or vCenter Server 103 Gather Update Manager Log Files 105 Gather Update Manager and vCenter Server Log Files 105 Log Files Are Not Generated 105No Baseline Updates Available 106 All Updates in Compliance Reports Are Not Applicable 106 All Updates in Compliance Reports Are Unknown 106 Remediated Updates Continue to Be Noncompliant 107 Remediating Virtual Machines with All Patches or All Critical Patches Fails 107 VMware Tools Upgrade Fails if VMware Tools Is Not Installed 108 ESX/ESXi Hosts Scanning Fails 109 ESXi Host Upgrade Fails 109 Incompatible Compliance State 109 12 Database Views 113 VUMV_VERSION 114 VUMV_UPDATES 114 VUMV_HOST_UPGRADES 114 VUMV_VA_UPGRADES 115 VUMV_PATCHES 115 VUMV_BASELINES 115 VUMV_BASELINE_GROUPS 116 VUMV_BASELINE_GROUP_MEMBERS 116 VUMV_PRODUCTS 116 VUMV_BASELINE_ENTITY 117 VUMV_UPDATE_PATCHES 117 VUMV_UPDATE_PRODUCT 117 VUMV_ENTITY_SCAN_HISTORY 117 VUMV_ENTITY_REMEDIATION_HIST 118 VUMV_UPDATE_PRODUCT_DETAILS 118 VUMV_BASELINE_UPDATE_DETAILS 118 VUMV_ENTITY_SCAN_RESULTS 119 VUMV_VMTOOLS_SCAN_RESULTS 119 VUMV_VMHW_SCAN_RESULTS 119 VUMV_VA_APPLIANCE 120 VUMV_VA_PRODUCTS 120 Index 121 VMware vCenter Update Manager Administration Guide6 VMware .

9 InformationThis VMware vCenter Update Manager Administration Guide is updated with each release of the product or table provides the Update history of the VMware vCenter Update Manager Administration 1. RevisionDescriptionEN-000139-04 Table Update Manager Events, on page 84 now contains information that if youwant to remediate a host running a virtual machine on which Update Manager orvCenter Server are installed, the machine must be manually migrated to another Configure a Microsoft SQL Server Database, on page 25 now includes arequirement for SQL Server databases to be in the default dbo Create a New Data Source (ODBC), on page 25 now contains updatedinformation about database connection Installing Update Manager , on page 27 now contains updated informationabout system account and database connection Supported Database Formats, on page 22 now includes additionaldatabase formats supported by Update Installing and Uninstalling Update Manager , on page 27 and Install UpdateManager Server, on page 28 now reflect the support of Windows XP 3, Installing, Setting Up, and Using the Update Manager DownloadService, on page 37 is updated to exclude shared folders as a valid mechanismfor transferring patches to Update Use a Shared Repository as a Patch Download Source.

10 On page 44 now reflectsthat Update Manager does not support the usage of folders located on a networkshare as a shared Installing and Uninstalling Update Manager , on page 27 now reflects thesupport of Windows Server 7 in the task Install Update Manager Server, on page 28 now reflects thatif the DSN uses Windows NT authentication, the fields for the user name andpassword can be left the order of the topics in Chapter 3, Installing, Setting Up, and Using theUpdate Manager Download Service, on page Export the Downloaded Updates, on page 40 to fix an incorrectcommand line and added a "What to do next" Use a Shared Repository as a Patch Download Source, on page 44 withexamples of the shared repository , Inc.