{"id":3768,"date":"2017-06-19T00:00:00","date_gmt":"2017-06-19T00:00:00","guid":{"rendered":""},"modified":"2025-06-20T04:54:06","modified_gmt":"2025-06-20T11:54:06","slug":"managing-updates-for-your-azure-vm","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/managing-updates-for-your-azure-vm\/","title":{"rendered":"Managing updates for your Azure VM"},"content":{"rendered":"\n

In this blog post, I will talk about how to use Update Management solution to manage updates for your Azure VMs. Right from within your Azure VM you can quickly assess the status of available updates, initiate the process of installing required updates, and review deployment results to verify that updates were applied successfully to the VM.<\/p>\n\n\n\n

This feature is currently in private preview.<\/strong> If you\u2019re interested in giving it a try, please sign up<\/a>!<\/p>\n\n\n\n

Enabling Update Management<\/h2>\n\n\n\n

From your VM, you can select \u201cManage Updates\u201d<\/strong> on the virtual machines blade, under Automation + Control<\/strong>. After selecting it, validation is performed to determine if the Update Management solution is enabled for this VM. If it is not enabled, you will have the option to enable the solution.<\/p>\n\n\n\n

The solution enablement process can take up to 15 minutes, and during this time you should not close the browser window. Once the solution is enabled and log data starts to flow to the workspace, it can take more than 30 minutes for data to be available for analysis in the dashboard described in the next section. We expect this timing to significantly improve in the future.<\/p>\n\n\n\n

Review update assessment<\/h2>\n\n\n\n

From the Manage Updates dashboard, you can review the update compliance state of the VM from the Missing updates by severity<\/strong> tile, which displays a count and graphical representation of the number of updates missing on the VM. The table below shows how the tile categorizes the updates missing by update classification.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

To create an update deployment and bring the VM into compliance, you configure a deployment that follows your release schedule and service window. This entails what update types to include in the deployment, such as only critical or security updates, or if you want to exclude certain updates.<\/p>\n\n\n\n

Create a new Update Deployment for the VM by clicking the \u201cSchedule deployment for this VM\u201d<\/strong> button at the top of the blade and specify the required values. <\/p>\n\n\n\n

After you have completed configuring the schedule, click the \u201cOK\u201d<\/strong> button and you return to the status dashboard. You will notice that the Scheduled<\/strong> table shows the deployment schedule you just created.<\/p>\n\n\n\n

View update deployment state<\/h2>\n\n\n\n

When the scheduled deployment executes, you see the status appear for that deployment under the Completed and in-progress<\/strong> table. Double-clicking the completed update deployment takes you to the detailed deployment status page.<\/p>\n\n\n\n


To review all detailed activities performed as part of the update deployment, select \u201cAll Logs and Output tiles\u201d<\/strong>. This will show the job stream of the runbook responsible for managing the update deployment on the target VM.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

OS support<\/h2>\n\n\n\n