Manage Update configuration settings

Applies to: ✔️ Windows VMs ✔️ Linux VMs ✔️ On-premises environment ✔️ Azure Arc-enabled servers.

The article describes how to configure update settings from Update management center (preview) in Azure, to control the update settings on your Azure VMs and Arc-enabled servers for one or more machines.

Screenshot Viewing the update management center manage update settings option.

Configure settings on single VM

To configure update settings on your machines on a single VM, follow these steps:

Note

You can schedule updates from the Overview or Machines blade in update management center (preview) page or from the selected VM.

  1. Sign in to the Azure portal.

  2. In Update management center, select Overview, select your Subscription, and select Update settings.

  3. In Change update settings, select the update settings that you want to change for your machine and select Next.

    Highlighting the Update settings to change option in the Azure portal.

    The following update settings are available for configuration for the selected machine(s):

    • Periodic assessment - enable periodic Assessment to run every 24 hours.

    • Hot patching - for Azure VMs, you can enable hot patching on supported Windows Server Azure Edition Virtual Machines (VMs) don't require a reboot after installation. You can use update management center (preview) to install patches with other patch classifications or to schedule patch installation when you require immediate critical patch deployment.

    • Patch orchestration option provides the following:

      • Automatic by operating system - When the workload running on the VM doesn't have to meet availability targets, operating system updates are automatically downloaded and installed. Machines are rebooted as needed.

      • Azure-orchestrated - Patch orchestration set to Azure-orchestrated for an Azure VM (not applicable for Arc-enabled server) has two different implications depending on whether customer schedule is attached to it or not.

        Patch orchestration type Description
        Azure-orchestrated with no schedule attached Machine is enabled for automatic VM guest patching. It implies that the available Critical and Security patches are downloaded and applied automatically on the Azure VM. This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.
        Azure-orchestrated with schedule attached Patching will happen according to the schedule and automatic VM guest patching will not take effect on the machine. Patch orchestration set to Azure-orchestrated is a necessary pre-condition for enabling schedules. You cannot enable a machine for custom schedule unless you set Patch orchestration to Azure-orchestrated.
      • Available Critical and Security patches are downloaded and applied automatically on the Azure VM using automatic VM guest patching. This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.

      • Manual updates - Configures the Windows Update agent by setting configure automatic updates.

      • Image Default - Only supported for Linux Virtual Machines, this mode honors the default patching configuration in the image used to create the VM.

  4. In Machines, select the checkbox for your machine and Select Next to continue.

  5. In Review and change, verify your selected resources and the update settings and select Review and change.

A notification appears to confirm that the update settings are successfully changed.

Configure settings at scale

To configure update settings on your machines at scale, follow these steps:

Note

You can schedule updates from the Overview or Machines blade.

  1. Sign in to the Azure portal.

  2. In Update management center, select Overview, select your Subscription and select Update settings.

  3. In Change update settings, select the update settings that you want to change for your machines follow the procedure from step 3 listed in From Overview blade of Configure settings on single VM.

A notification appears to confirm that the update settings are successfully changed.

Next steps