Share via

  • Article

Managing Fabric Updates in VMM

 

Updated: May 13, 2016

Applies To: System Center 2012 SP1 - Virtual Machine Manager, System Center 2012 R2 Virtual Machine Manager, System Center 2012 - Virtual Machine Manager

The procedures in this scenario explain how to set up update management in Virtual Machine Manager (VMM) and how to perform updates on servers that are managed by VMM.

For information about Windows Server Update Service (WSUS) requirements, see the followings:

Why should you manage fabric updates through VMM?

Fabric servers include the following physical computers managed by VMM: Hyper-V hosts and Hyper-V clusters, library servers, Pre-Boot Execution Environment (PXE) servers, the Windows Server Update Management (WSUS) server, and the VMM management server.

VMM supports on demand compliance scanning and remediation of the fabric. Administrators can monitor the update status of the servers. They can scan for compliance and remediate updates for selected servers. Administrators also can exempt resources from installation of an update.

VMM supports orchestrated updates of Hyper-V host clusters. When a VMM administrator performs update remediation on a host cluster, VMM places one cluster node at a time in maintenance mode and then installs updates. If the cluster supports live migration, intelligent placement is used to migrate virtual machines off the cluster node. If the cluster does not support live migration, VMM saves state for the virtual machines.

Managing the update server

After you add a WSUS server to VMM, you should not manage the WSUS using the WSUS console. In VMM, an administrator updates the properties of the update server to configure a proxy server for synchronizations and to change the update categories, products, and supported languages that are synchronized by the WSUS server.

If you add the update server to VMM in Single Sockets Layer (SSL) mode, you can update proxy server credentials for synchronization in the update server properties. If the update server is not added to VMM in SSL mode, proxy server credentials are managed in the WSUS Administration Console.

For more information, see How to Update WSUS Settings in VMM.

User roles and update management

In VMM, administrators and delegated administrators manage fabric updates. Only administrators can manage the update server and synchronize updates. Delegated administrators can scan and remediate updates on computers that are within the scope of their user roles. Delegated administrators can use baselines created by administrators and other delegated administrators. But delegated administrators cannot modify or delete baselines created by others.For more information about user roles, see Creating User Roles in VMM.

In This Section

Follow these procedures to install a WSUS update server, add the update server to VMM, configure update baselines, scan computers for compliance, and perform update remediations. The final procedure demonstrates how to orchestrate updates within a Hyper-V host cluster.

Procedure Description
How to Install a WSUS Server for VMM Describes requirements for installing a dedicated WSUS server to use with VMM.
How to Add an Update Server to VMM Describes how to enable update management in VMM by adding a WSUS server to VMM.
How to Configure Update Baselines in VMM Describes how to edit a built-in update baseline and how to create new updates baselines for your VMM environment.
How to Scan for Update Compliance in VMM Describes how to scan managed computers for update compliance in Compliance view of the VMM console.
Performing Update Remediation in VMM Describes how to perform update remediations on stand-alone Hyper-V hosts that are managed by VMM and how to orchestrate updates on a Hyper-V host cluster in VMM.
How to Create and Remove Update Exemptions for Resources in VMM Describes how to create an update exemption to prevent installation of an update on a resource and how to remove an update exemption and then return the resource to update compliance.
How to Perform On-Demand WSUS Synchronizations in VMM Describes how to use the Synchronize action in the Fabric workspace to synchronize updates in VMM.
How to Update WSUS Settings in VMM Describes how to configure a proxy server for synchronization and how to change the update classifications, products, and supported languages that WSUS synchronizes by updating the properties of the update server in VMM.
How to Integrate Fabric Updates with Configuration Manager Describes how to configure VMM to use a WSUS server that is part of a Microsoft System Center Configuration Manager environment.
Using Infrastructure Servers in VMM Describes how, as of System Center 2012 R2, you can add infrastructure servers such as DHCP servers to VMM. After you add infrastructure servers, you can manage updates to them through VMM.