azure VM patching using powershell script Update management center

Azuretech 90

we have to patch multiple azure VM parallelly using updatemanagment center.

we are trying to use below https://learn.microsoft.com/en-us/azure/update-center/manage-vms-programmatically?tabs=cli%2Cazurepowershell

if we use one time update , then it will first complete patch on one vm then apply in others. if any vm take more then 1 hour then powershell script (running on azure automation runbook) will take lot of time.

next approach ,If i select schedule , then there is no option to create one time schedule . Please let us know what is the best way to patch multiple VMS using update management center using programmatically (powershell based runbook)

tbgangav-MSFT 10,386

Hi @Azuretech,

Try below approach and see if it helps. In this approach, recurevery parameter of New-AzMaintenanceConfiguration cmdlet is not used, which means that the maintenance configuration will run only once.

# Define the parameters for the maintenance configuration
$ResourceGroupName = "myMaintenanceRG"
$MaintenanceConfigurationName = "myConfig"
$MaintenanceScope = "InGuestPatch"
$Location = "eastus"
$TimeZone = "Pacific Standard Time"
$Duration = "04:00"
$StartDateTime = "2022-11-01 00:00"

# Use the New-AzMaintenanceConfiguration cmdlet to create the maintenance configuration
New-AzMaintenanceConfiguration -ResourceGroupName $ResourceGroupName `
  -Name $MaintenanceConfigurationName `
  -MaintenanceScope $MaintenanceScope `
  -Location $Location `
  -StartDateTime $StartDateTime `
  -TimeZone $TimeZone `
  -Duration $Duration

# Define the Azure VMs that you want to patch
$VMs = @("VM1", "VM2", "VM3")

# Loop through each Azure VM
foreach ($VM in $VMs) {
  # Define the resource ID of the Azure VM
  $ResourceId = "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/Microsoft.Compute/virtualMachines/$VM"

  # Define the name of the configuration assignment
  $ConfigurationAssignmentName = "$VM-MaintenanceConfiguration"

  # Define the payload for the REST API request
  $Payload = @{
    "properties" = @{
      "maintenanceConfigurationId" = "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/Microsoft.Maintenance/maintenanceConfigurations/$MaintenanceConfigurationName"
    },
    "location" = "<location>"
  } | ConvertTo-Json
  
  # Use the Invoke-AzRestMethod cmdlet to assign the maintenance configuration to the Azure VM
  Invoke-AzRestMethod -Path "$ResourceId/providers/Microsoft.Maintenance/configurationAssignments/$ConfigurationAssignmentName?api-version=2021-09-01-preview" -Method PUT -Payload $Payload
}

tbgangav-MSFT 10,386 Reputation points

2023-03-12T16:00:51.0633333+00:00

Hi @Azuretech,

Did you get chance to look at above response? Was it helpful or do you have any follow up questions w.r.t it?

Sedat SALMAN 13,165

$vmNames = @("vm1", "vm2", "vm3") # List of VM names to patch
$rgName = "myResourceGroup" # Resource group containing the VMs
$updateScheduleName = "MyUpdateSchedule" # Name of the Update Management schedule

# Create the Update Management schedule (if it doesn't already exist)
if (!(Get-AzAutomationUpdateManagementSchedule -ResourceGroupName $rgName -AutomationAccountName "MyAutomationAccount" -Name $updateScheduleName -ErrorAction SilentlyContinue)) {
    New-AzAutomationUpdateManagementSchedule -ResourceGroupName $rgName -AutomationAccountName "MyAutomationAccount" -Name $updateScheduleName -StartTime (Get-Date) -DurationInSeconds 3600
}

# Start a PowerShell job to update each VM in parallel
foreach ($vmName in $vmNames) {
    $jobScript = {
        # Import the Update Management module and start the update process
        Import-Module Az.UpdateManagement
        $update = Start-AzVMUpdate -ResourceGroupName $using:rgName -VMName $using:vmName -UpdateConfigurationName $using:updateScheduleName -NoReboot
        Write-Output "$vmName: $($update.Status)"
    }
    Start-Job -ScriptBlock $jobScript
}

# Wait for all jobs to complete
Get-Job | Wait-Job

# Display the output from each job
Get-Job | Receive-Job