Patch Management

A "Patch" for a Managed OS v2 VM contains a set of OS updates, collected over a defined period of time (patch cycle) to be executed and installed on a specific point in time (patching window).

The combination of these two processes takes care of the actuality of all tools, configurations and definitions included in your OS.

A patch cycle occurs every month. At the start of each patch cycle, the list of patches will be refreshed (snapshot of patches).

During one patch cycle the list of patches remains consistent, even if the OS-vendor may release new patches. This allows you to keep all your servers in an identical release mode, even if they are updated on separate dates (patching window).

A patching window defines the definite point in time WHEN the patch will be installed. The patching window is defined by its starting point and lasts exactly 2 hours. Within this timeframe, the patch will be applied and – if required by the OS – the server will be rebooted automatically.

This is an information message

Patching suspension

Patching Windows are valid in all OS States. VMs will continue to patch regularly even in Temp admin mode aswell as in customermaintenance mode. If you want your machine to temporarly not patch you need to set a patching suspension with the day 2 action.

Using the Manage Patching Extension/Suspension day-2 action one can suspend the automated patching for up to 60 days, measured from the last time the system was patched. If the last patch installation was longer than 60 days ago, it is not possible to suspend automated patching process without patching the system first. One can use the day-2 action Manage Patching Extension/On Demand Patching to immediately patch a system. This action can be executed in all states of the machine. Please note that to prevent accidental patching, it is not allowed to run On Demand Patching while the machines automated patching is suspended. One needs to disable the patching suspension (Using the Manage Patching Extension/Suspension action) first.

Define Patching Window

When a new Managed OS v2 VM is requested, it is necessary to initially define a patching window.

Change Patching Window

The patching window for a Managed OS v2 VM can be changed.

1. Select the VM for which you want to change the patching window in the portal
2. Under Actions you can choose Manage Patching Extension
3. Under Patching Window Select the desired patching window in the drop-down menu and click Submit

This is an information message

Note

Usually during each Patching Window the server will be rebooted. In case the patches are installed outside the Patching Window using the Day 2 Action Manage Patching Extension/On Demand Patching, then also use the Day 2 Action Manage Patching Extension/Suspension to prevent automated patching and therefore the server to be rebooted.