ESX4 Patch Management Guide
o Bulletin - grouping of one or more VIBs (vSphere Installation Bundle).
o Depot - logical grouping of VIBs – online.
o Offline Bundle zip - archive that encapsulates VIBs.
o Patch - bulletin that groups one or more VIBs together to address a particular issue or enhancement.
o Roll-up - collection of patches that is grouped for ease of download and deployment.
o Update - periodic release of an ESX image.
o VIB - single software package.
o A record of each installed VCP-410 exam questions bulletin is written to the /etc/vmware/esxupdate
o Four basic modes of esxupdate:
o Inspection mode
o esxupdate query - display a list of bulletins installed.
o esxupdate info - display information on the contents of one or more bulletins.
o Scan mode - determines which bulletins are applicable.
o Test mode - go through all installation operations without installing.
o Update mode - installs bulletins.
o The installation process is recorded in the esxupdate.log file. By default, this file is located in the /var/log/vmware directory.
o esxupdate never reboots your host.
Optional vSphere Products and Modules
vCenter Update Manager Administration Guide
o Update Manager can:
o Scan for compliance & apply updates for guests, appliances, & hosts.
o Directly upgrade hosts, VM hardware, VMware Tools, & virtual appliances.
o Update third-party software on hosts.
o Update Manager requires network connectivity with vCenter. Each installation of the Update Manager must be associated (registered) with a
single vCenter instance
o The Update Manager Client has two main views, Administrator's view & Compliance view.
o Administrator's view you can:
o Configure the Update Manager VCP-410 study guide settings
o Create & manage baselines & baseline groups
o View Update Manager events
o Review the patch repository & add or remove patches from a baseline
o Compliance view you can:
o View compliance & scan results for each selected inventory object
o Attach & detach baselines & baseline groups from a selected inventory object
o Scan a selected inventory object
o Stage patches for hosts
o Remediate a selected inventory object
o The Update Manager process begins by downloading information about a set of security patches. One or more of these patches are
aggregated to form a baseline. Multiple baselines can be added to a baseline group. A baseline group is a composite object that consists of a
set of non-conflicting baselines. You can use baseline groups to combine different types of baselines & then scan & remediate an inventory
object against all of them as a whole. If a baseline group contains both upgrade & patch baselines, the upgrade executes first.
o A collection of VMs, virtual appliances, & ESX/ESXi hosts or individual inventory objects can be scanned for compliance with a baseline or a
baseline group & later remediated (updated). You can initiate these processes manually or through scheduled tasks.
o You can configure the Update Manager server to download patches either from the Internet or from a shared repository.
o Types of scan:
o Patch scan – ESX 3.0.3 & later, ESX 3i version 3.5 & later, VMs running Windows or Linux.
o Host upgrade scan – ESX 3.0.0 VCP-410 questions & later & ESX 3i version 3.5 & later.
o VMware Tools scan –Windows or Linux.
o VM hardware upgrade scan.
o Virtual appliance upgrade scan –VMware Studio registered Red Hat, Ubuntu, SUSE, & CentOS Linux virtual appliances.
o Staging patches for ESX/ESXi 4.0 hosts allows you to download the patches from the Update Manager server to the ESX/ESXi hosts without
applying the patches immediately.
o Remediation applies patches & upgrades after a scan is complete.
o Baselines can be:
o Upgrade
o Bulletin - grouping of one or more VIBs (vSphere Installation Bundle).
o Depot - logical grouping of VIBs – online.
o Offline Bundle zip - archive that encapsulates VIBs.
o Patch - bulletin that groups one or more VIBs together to address a particular issue or enhancement.
o Roll-up - collection of patches that is grouped for ease of download and deployment.
o Update - periodic release of an ESX image.
o VIB - single software package.
o A record of each installed VCP-410 exam questions bulletin is written to the /etc/vmware/esxupdate
o Four basic modes of esxupdate:
o Inspection mode
o esxupdate query - display a list of bulletins installed.
o esxupdate info - display information on the contents of one or more bulletins.
o Scan mode - determines which bulletins are applicable.
o Test mode - go through all installation operations without installing.
o Update mode - installs bulletins.
o The installation process is recorded in the esxupdate.log file. By default, this file is located in the /var/log/vmware directory.
o esxupdate never reboots your host.
Optional vSphere Products and Modules
vCenter Update Manager Administration Guide
o Update Manager can:
o Scan for compliance & apply updates for guests, appliances, & hosts.
o Directly upgrade hosts, VM hardware, VMware Tools, & virtual appliances.
o Update third-party software on hosts.
o Update Manager requires network connectivity with vCenter. Each installation of the Update Manager must be associated (registered) with a
single vCenter instance
o The Update Manager Client has two main views, Administrator's view & Compliance view.
o Administrator's view you can:
o Configure the Update Manager VCP-410 study guide settings
o Create & manage baselines & baseline groups
o View Update Manager events
o Review the patch repository & add or remove patches from a baseline
o Compliance view you can:
o View compliance & scan results for each selected inventory object
o Attach & detach baselines & baseline groups from a selected inventory object
o Scan a selected inventory object
o Stage patches for hosts
o Remediate a selected inventory object
o The Update Manager process begins by downloading information about a set of security patches. One or more of these patches are
aggregated to form a baseline. Multiple baselines can be added to a baseline group. A baseline group is a composite object that consists of a
set of non-conflicting baselines. You can use baseline groups to combine different types of baselines & then scan & remediate an inventory
object against all of them as a whole. If a baseline group contains both upgrade & patch baselines, the upgrade executes first.
o A collection of VMs, virtual appliances, & ESX/ESXi hosts or individual inventory objects can be scanned for compliance with a baseline or a
baseline group & later remediated (updated). You can initiate these processes manually or through scheduled tasks.
o You can configure the Update Manager server to download patches either from the Internet or from a shared repository.
o Types of scan:
o Patch scan – ESX 3.0.3 & later, ESX 3i version 3.5 & later, VMs running Windows or Linux.
o Host upgrade scan – ESX 3.0.0 VCP-410 questions & later & ESX 3i version 3.5 & later.
o VMware Tools scan –Windows or Linux.
o VM hardware upgrade scan.
o Virtual appliance upgrade scan –VMware Studio registered Red Hat, Ubuntu, SUSE, & CentOS Linux virtual appliances.
o Staging patches for ESX/ESXi 4.0 hosts allows you to download the patches from the Update Manager server to the ESX/ESXi hosts without
applying the patches immediately.
o Remediation applies patches & upgrades after a scan is complete.
o Baselines can be:
o Upgrade
