Patching Azure VMSS using Azure update mangement

Azure-learning 56

How to do patching on a azure VMSS using Azure update management , What is the process to do it , we are patching VM's using update management , is it possible to patch VMSS also , and what are the things that we need to take care.

3 answers

Technanosoft Technologies 101 Reputation points

2023-01-06T06:06:53.81+00:00

Azure VMSS is a massive Azure cloud service that allows administrators to manage and monitor their Azure VM instances. Recently, Microsoft released a new Azure VMSS update introducing some security vulnerabilities. If attackers could exploit these vulnerabilities, they could control an affected AzureVM instance completely. To protect your AzureVM instance from attack, you should patch it as soon as possible.
Please sign in to rate this answer.
Matthew Mckenzie 5 Reputation points

2024-10-31T03:56:09.31+00:00

Don't care about the service. Care about the VM's
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Luke Murray 11,091 Reputation points MVP

2023-01-06T06:28:21.867+00:00

The general (and preferred) view for Virtual Machine Scale sets is to update the image every month and then push out the image update to the VMSS.

https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade

If you need to, you can add the VM scale set servers to Azure Update Management and patch them; just make sure they are on different schedules, to install.
Please sign in to rate this answer.
Azure-learning 56 Reputation points

2023-01-09T08:12:15.573+00:00

@Luke Murray - as per microsoft Update management doesnt support VMSS patching ,

Update Management does not support automating update management across all instances in an Azure virtual machine scale set. Automatic OS image upgrades is the recommended method for managing OS image upgrades on your scale set.

https://learn.microsoft.com/en-us/azure/automation/update-management/operating-system-requirements?tabs=os-win%2Csr-win

Please let me know if my understanding is not correct

Luke Murray 11,091 Reputation points MVP

2023-01-09T08:19:19.94+00:00

Correct, Update Management should be able to patch the servers but it isn't VMSS aware, so won't automatically drain connections etc when it restarts and it may mean the servers end up in different patch states if the image isn't updated.

Azure-learning 56 Reputation points

2023-01-10T07:58:31.967+00:00

@Luke Murray What are the suggested ways to patch VMSS servers in periodic and planned way ,

Luke Murray 11,091 Reputation points MVP

2023-01-10T09:15:43.62+00:00

Update the custom image of your VSS scaleset and update the image version across the scaleset.

Or enable automatic upgrade on the VMSS and let the scripts do the install of your apps etc as per your provisioning process, as the OS disk (not days disk) will be replaced.

https://learn.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
OngHongTeck 1 Reputation point

2024-02-25T11:01:59.4833333+00:00

How to add the VMSS to Azure update manager, i cant find my VMSS there.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Patching Azure VMSS using Azure update mangement

3 answers

Your answer