here you can find detailed documentation for Automatic VM Guest Patching
And for your question yes Trusted Launch VM s support Automatic patching option you can manage it under management tab,.
Ubuntu and Windows Server versions supported but Windows 10 and Windows 11 is not supported
Currently you can use Windows Automatic by OS option for these operating systems
in the future Azure-orchastrated option may be added. You need to track the following link for the changes.
https://learn.microsoft.com/en-us/azure/virtual-machines/automatic-vm-guest-patching
https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch#unsupported-features