azure VM patching using powershell script Update management center

Question

azure VM patching using powershell script Update management center

Azuretech 90

we have to patch multiple azure VM parallelly using updatemanagment center.

we are trying to use below https://learn.microsoft.com/en-us/azure/update-center/manage-vms-programmatically?tabs=cli%2Cazurepowershell

if we use one time update , then it will first complete patch on one vm then apply in others. if any vm take more then 1 hour then powershell script (running on azure automation runbook) will take lot of time.

next approach ,If i select schedule , then there is no option to create one time schedule . Please let us know what is the best way to patch multiple VMS using update management center using programmatically (powershell based runbook)

tbgangav-MSFT 10,426 Moderator

Hi @Azuretech,

Try below approach and see if it helps. In this approach, recurevery parameter of New-AzMaintenanceConfiguration cmdlet is not used, which means that the maintenance configuration will run only once.

# Define the parameters for the maintenance configuration
$ResourceGroupName = "myMaintenanceRG"
$MaintenanceConfigurationName = "myConfig"
$MaintenanceScope = "InGuestPatch"
$Location = "eastus"
$TimeZone = "Pacific Standard Time"
$Duration = "04:00"
$StartDateTime = "2022-11-01 00:00"

# Use the New-AzMaintenanceConfiguration cmdlet to create the maintenance configuration
New-AzMaintenanceConfiguration -ResourceGroupName $ResourceGroupName `
  -Name $MaintenanceConfigurationName `
  -MaintenanceScope $MaintenanceScope `
  -Location $Location `
  -StartDateTime $StartDateTime `
  -TimeZone $TimeZone `
  -Duration $Duration

# Define the Azure VMs that you want to patch
$VMs = @("VM1", "VM2", "VM3")

# Loop through each Azure VM
foreach ($VM in $VMs) {
  # Define the resource ID of the Azure VM
  $ResourceId = "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/Microsoft.Compute/virtualMachines/$VM"

  # Define the name of the configuration assignment
  $ConfigurationAssignmentName = "$VM-MaintenanceConfiguration"

  # Define the payload for the REST API request
  $Payload = @{
    "properties" = @{
      "maintenanceConfigurationId" = "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/Microsoft.Maintenance/maintenanceConfigurations/$MaintenanceConfigurationName"
    },
    "location" = "<location>"
  } | ConvertTo-Json
  
  # Use the Invoke-AzRestMethod cmdlet to assign the maintenance configuration to the Azure VM
  Invoke-AzRestMethod -Path "$ResourceId/providers/Microsoft.Maintenance/configurationAssignments/$ConfigurationAssignmentName?api-version=2021-09-01-preview" -Method PUT -Payload $Payload
}

tbgangav-MSFT 10,426 Reputation points Moderator

2023-03-12T16:00:51.0633333+00:00

Hi @Azuretech,

Did you get chance to look at above response? Was it helpful or do you have any follow up questions w.r.t it?

Sedat SALMAN 14,180 MVP

$vmNames = @("vm1", "vm2", "vm3") # List of VM names to patch
$rgName = "myResourceGroup" # Resource group containing the VMs
$updateScheduleName = "MyUpdateSchedule" # Name of the Update Management schedule

# Create the Update Management schedule (if it doesn't already exist)
if (!(Get-AzAutomationUpdateManagementSchedule -ResourceGroupName $rgName -AutomationAccountName "MyAutomationAccount" -Name $updateScheduleName -ErrorAction SilentlyContinue)) {
    New-AzAutomationUpdateManagementSchedule -ResourceGroupName $rgName -AutomationAccountName "MyAutomationAccount" -Name $updateScheduleName -StartTime (Get-Date) -DurationInSeconds 3600
}

# Start a PowerShell job to update each VM in parallel
foreach ($vmName in $vmNames) {
    $jobScript = {
        # Import the Update Management module and start the update process
        Import-Module Az.UpdateManagement
        $update = Start-AzVMUpdate -ResourceGroupName $using:rgName -VMName $using:vmName -UpdateConfigurationName $using:updateScheduleName -NoReboot
        Write-Output "$vmName: $($update.Status)"
    }
    Start-Job -ScriptBlock $jobScript
}

# Wait for all jobs to complete
Get-Job | Wait-Job

# Display the output from each job
Get-Job | Receive-Job

Your answer

tbgangav-MSFT 10,426 Reputation points Moderator

2023-03-02T04:46:17.6733333+00:00

Hi @Azuretech,

Try below approach and see if it helps. In this approach, recurevery parameter of New-AzMaintenanceConfiguration cmdlet is not used, which means that the maintenance configuration will run only once.

# Define the parameters for the maintenance configuration $ResourceGroupName = "myMaintenanceRG" $MaintenanceConfigurationName = "myConfig" $MaintenanceScope = "InGuestPatch" $Location = "eastus" $TimeZone = "Pacific Standard Time" $Duration = "04:00" $StartDateTime = "2022-11-01 00:00" # Use the New-AzMaintenanceConfiguration cmdlet to create the maintenance configuration New-AzMaintenanceConfiguration -ResourceGroupName $ResourceGroupName ` -Name $MaintenanceConfigurationName ` -MaintenanceScope $MaintenanceScope ` -Location $Location ` -StartDateTime $StartDateTime ` -TimeZone $TimeZone ` -Duration $Duration # Define the Azure VMs that you want to patch $VMs = @("VM1", "VM2", "VM3") # Loop through each Azure VM foreach ($VM in $VMs) { # Define the resource ID of the Azure VM $ResourceId = "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/Microsoft.Compute/virtualMachines/$VM" # Define the name of the configuration assignment $ConfigurationAssignmentName = "$VM-MaintenanceConfiguration" # Define the payload for the REST API request $Payload = @{ "properties" = @{ "maintenanceConfigurationId" = "/subscriptions/<subscription_id>/resourceGroups/<resource_group_name>/providers/Microsoft.Maintenance/maintenanceConfigurations/$MaintenanceConfigurationName" }, "location" = "<location>" } | ConvertTo-Json # Use the Invoke-AzRestMethod cmdlet to assign the maintenance configuration to the Azure VM Invoke-AzRestMethod -Path "$ResourceId/providers/Microsoft.Maintenance/configurationAssignments/$ConfigurationAssignmentName?api-version=2021-09-01-preview" -Method PUT -Payload $Payload }
tbgangav-MSFT 10,426 Reputation points Moderator

2023-03-12T16:00:51.0633333+00:00

Hi @Azuretech,

Did you get chance to look at above response? Was it helpful or do you have any follow up questions w.r.t it?
Sedat SALMAN 14,180 Reputation points MVP

2023-03-20T01:52:50.4733333+00:00

$vmNames = @("vm1", "vm2", "vm3") # List of VM names to patch $rgName = "myResourceGroup" # Resource group containing the VMs $updateScheduleName = "MyUpdateSchedule" # Name of the Update Management schedule # Create the Update Management schedule (if it doesn't already exist) if (!(Get-AzAutomationUpdateManagementSchedule -ResourceGroupName $rgName -AutomationAccountName "MyAutomationAccount" -Name $updateScheduleName -ErrorAction SilentlyContinue)) { New-AzAutomationUpdateManagementSchedule -ResourceGroupName $rgName -AutomationAccountName "MyAutomationAccount" -Name $updateScheduleName -StartTime (Get-Date) -DurationInSeconds 3600 } # Start a PowerShell job to update each VM in parallel foreach ($vmName in $vmNames) { $jobScript = { # Import the Update Management module and start the update process Import-Module Az.UpdateManagement $update = Start-AzVMUpdate -ResourceGroupName $using:rgName -VMName $using:vmName -UpdateConfigurationName $using:updateScheduleName -NoReboot Write-Output "$vmName: $($update.Status)" } Start-Job -ScriptBlock $jobScript } # Wait for all jobs to complete Get-Job | Wait-Job # Display the output from each job Get-Job | Receive-Job

Share via

azure VM patching using powershell script Update management center

Your answer