Patch Management

A "Patch" for a Managed OS VM contains a set of OS updates, collected over a defined period of time (patch cycle) to be executed and installed on a specific point in time (patching window).

The combination of these two processes takes care of the actuality of all tools, configurations and definitions included in your OS.

A patch cycle occurs every month. At the start of each patch cycle, the list of patches will be refreshed (snapshot of patches).

During one patch cycle the list of patches remains consistent, even if the OS-vendor may release new patches. This allows you to keep all your servers in an identical release mode, even if they are updated on separate dates (patching window).

A patching window defines the definite point in time WHEN the patch will be installed. The patching window is defined by its starting point and lasts exactly 2 hours. Within this timeframe, the patch will be applied and – if required by the OS – the server will be rebooted automatically.

With the day-2 action "Update Patching Suspension" one can suspend the automated patching for up to 60 days (Windows) or 120 days (RHEL), measured from the last time the system was patched. If the last patch installation was longer than 60/120 days ago, it is not possible to suspend automated patching process without patching the system first. One can use the day-2 action "Run On Demand Patching" to immediately patch a system. This action can be executed in all states of the machine. Please note that to prevent accidental patching, it is not allowed to run on demand patching while the machines automated patching is suspended. One needs to disable the patching suspension (Using the "Update Patching Suspension" action) first.

Define Patching Window

When a new Managed OS VM is requested, it is necessary to initially define a patching window.

Change Patching Window

The patching window for a Managed OS VM can be changed.

1. Select the VM for which you want to change the patching window in the portal
2. Under Actions you can choose Update Patching Window
3. Select the desired patching window in the drop-down menu and click Update Patching Window

This is an information message

Note

Usually during each Patching Window the server will be rebooted. In case the patchings are installed outside the Patching Window using the Day 2 Action Run On Demand Patching, then also use the Day 2 Action Update Patching Suspension to prevent automated patching and therefore the server to be rebooted.