Managing Fabric Updates in VMM
Applies To: System Center 2012 SP1 - Virtual Machine Manager, System Center 2012 R2 Virtual Machine Manager, System Center 2012 - Virtual Machine Manager
The procedures in this scenario explain how to set up update management in Virtual Machine Manager (VMM) and how to perform updates on servers that are managed by VMM.
For information about Windows Server Update Service (WSUS) requirements, see the followings:
For VMM in System Center 2012 or System Center 2012 SP1: System Requirements: Update Management in System Center 2012 and in System Center 2012 SP1.
For VMM in System Center 2012 R2: Preparing your environment for System Center 2012 R2 Virtual Machine Manager.
Fabric servers include the following physical computers managed by VMM: Hyper-V hosts and Hyper-V clusters, library servers, Pre-Boot Execution Environment (PXE) servers, the Windows Server Update Management (WSUS) server, and the VMM management server.
VMM supports on demand compliance scanning and remediation of the fabric. Administrators can monitor the update status of the servers. They can scan for compliance and remediate updates for selected servers. Administrators also can exempt resources from installation of an update.
VMM supports orchestrated updates of Hyper-V host clusters. When a VMM administrator performs update remediation on a host cluster, VMM places one cluster node at a time in maintenance mode and then installs updates. If the cluster supports live migration, intelligent placement is used to migrate virtual machines off the cluster node. If the cluster does not support live migration, VMM saves state for the virtual machines.
After you add a WSUS server to VMM, you should not manage the WSUS using the WSUS console. In VMM, an administrator updates the properties of the update server to configure a proxy server for synchronizations and to change the update categories, products, and supported languages that are synchronized by the WSUS server.
If you add the update server to VMM in Single Sockets Layer (SSL) mode, you can update proxy server credentials for synchronization in the update server properties. If the update server is not added to VMM in SSL mode, proxy server credentials are managed in the WSUS Administration Console.
For more information, see How to Update WSUS Settings in VMM.
In VMM, administrators and delegated administrators manage fabric updates. Only administrators can manage the update server and synchronize updates. Delegated administrators can scan and remediate updates on computers that are within the scope of their user roles. Delegated administrators can use baselines created by administrators and other delegated administrators. But delegated administrators cannot modify or delete baselines created by others.For more information about user roles, see Creating User Roles in VMM.
Follow these procedures to install a WSUS update server, add the update server to VMM, configure update baselines, scan computers for compliance, and perform update remediations. The final procedure demonstrates how to orchestrate updates within a Hyper-V host cluster.
Describes requirements for installing a dedicated WSUS server to use with VMM.
Describes how to enable update management in VMM by adding a WSUS server to VMM.
Describes how to edit a built-in update baseline and how to create new updates baselines for your VMM environment.
Describes how to scan managed computers for update compliance in Compliance view of the VMM console.
Describes how to perform update remediations on stand-alone Hyper-V hosts that are managed by VMM and how to orchestrate updates on a Hyper-V host cluster in VMM.
Describes how to create an update exemption to prevent installation of an update on a resource and how to remove an update exemption and then return the resource to update compliance.
Describes how to use the Synchronize action in the Fabric workspace to synchronize updates in VMM.
Describes how to configure a proxy server for synchronization and how to change the update classifications, products, and supported languages that WSUS synchronizes by updating the properties of the update server in VMM.
Describes how to configure VMM to use a WSUS server that is part of a Microsoft System Center Configuration Manager environment.
Describes how, as of System Center 2012 R2, you can add infrastructure servers such as DHCP servers to VMM. After you add infrastructure servers, you can manage updates to them through VMM.