Time
14 hours 13 minutes
Difficulty
Intermediate
CEU/CPE
20

Video Description

Patch Management Part 1 This lesson focuses on patch management and offers a breakdown of what will be covered in the module:

  • Description of the update manager
  • List install steps
  • Create and attach a baseline
  • Scan inventory object
  • Participate inventory object

The update manager provides centralized and automated patch and version information for ESXi hosts, VM hardware, VMware tools and virtual appliances. It also reduces security risks, keeps systems running smoothly and reduces boots after VMware tools updates.

Video Transcription

00:04
Hello. I'm Dean. Camp Yulia. Welcome to Cyberia. Were in the virtual ization configuration installation and management class finally getting to the last module nodule 13. And this module will be talking about the update. Manager Patch management is really the main focus here for the update Manager is how we accomplish this.
00:21
So we'll talk about what it is. Some of the installation steps that are needed
00:27
and in the second or third part of this lesson will look at what's involved with creating a baseline and attaching that
00:34
to an inventory object. Also doing a scan of an inventory object and what that means.
00:40
Then we'll re mediate the object and finally wrap up by doing lab number 22.
00:47
So, update manager, this gives you a way to centralize all of your patch and version ing requirements for various things in your environment. Your E S X I hosts,
00:57
uh, we could manage 3.54 dot axe and five dot exe
01:00
as far as the different. Yes, Xie versions could also manage upgrades between four x and five x,
01:07
and we have a patch is available for virtual hardware Veum, where tools
01:12
and virtual appliances
01:15
So notice update Manager does not patch the guest a less of your operating systems.
01:22
It used to several versions ago, but that's that functionality was split off as a separate product.
01:26
So unless you've got another solution for patching your guest OS, you need to deal with the patching of those systems like you would any other host.
01:37
So setting up automatic updates or whatever you think is best
01:42
so just applies to these components here, not the guest OS.
01:46
So because we can manage our patches inversion ing centrally and because its automated this reduces our security risks just stands to reason
01:55
you're keeping your systems patch regularly.
01:57
This also helps with reducing system diversity, and what we mean by that is,
02:02
if you've got a bunch of different
02:05
hosts in your environment of much of different
02:07
versions of a virtual hardware, you contrive to slowly get those unified. So you're all running the same version and you're all more or less synchronized. So that's what we mean by reducing diversity. That's a good thing,
02:19
because when you're
02:21
hosts are mostly the same as the other hosts in the environment or your virtual hardware is most of the same,
02:25
then it becomes much more easy to manage all of that.
02:30
We can also keep our systems running smoothly, especially as it relates to Vienna, where tools,
02:35
if the M or tools, is corrupted or not running.
02:38
Or maybe it's out of date. That may cause performance problems on those virtual machines, so having them synchronized with Update manager provides a lot of benefit.
02:49
And then, lastly, with the newest versions of Update Manager as a version 5.0, I believe
02:55
we don't have to reboot after a via more tools update any longer,
03:00
so this is a huge benefit.
03:01
Previously, when you you needed to update all of your virtual machines, you had to coordinate a reboot window for each of your VMS. And that could be a challenging
03:10
ah prospect if you have a large environment.
03:14
Okay, so what are some of the components in the update manager?
03:17
First, we have the option to have the updates manager server be a separate
03:23
show,
03:23
or it could be running on the same server as V Center
03:28
and the lab environment that I've set up my V Center is running as a virtual appliance, so I don't really have this option, so I'm gonna run it as a separate server. But you do have the option. If you're running the centre on a dedicated host,
03:40
we also have options with the database. You can either use the same database as the V Central servers, using
03:46
which is fine. Or you can install a brand new sequel Server 2005 database,
03:53
which is basically an embedded database with the update manager product itself.
04:00
We have a plug in that is used by the the center.
04:04
I'm sorry, the V sphere client,
04:06
and when we do the lab, you'll see what's involved with and getting the plug it installed. It's very easy.
04:12
And this integrates the update manager functionality into the vic
04:16
so that you can see the proper screens where you're using the V's fair client to manager environment.
04:21
We also can install agents on your guest operating systems
04:26
and this will, um,
04:29
I'm sorry I installed it on the VM is not on the guest operating system,
04:31
and this will help keep those VM synchronized with any patches that are applicable to that level of virtual hardware
04:39
s o. The PM's can then scan themselves and re mediate
04:43
as needed, depending on what patches are required.
04:46
And then, lastly,
04:47
we can set up a download server. So if, for instance, your V Center servers an environment where you can't or you don't allow Internet access, you can create a download server
04:59
outside that network to get the patches from the various girls that you configure the M wear or other vendors that you use.
05:05
Then, once those patch
05:09
patches are downloaded to the download server, now you can use a USB drive or DVD or something to move them over to the update manager
05:16
to to update your repositories, your patch repositories.
05:20
So there is a way to get
05:23
the patch repositories updated, even if the update manager cannot access the Internet directly.
05:29
Lastly,
05:30
we have the update, manager download service or U M. D. S.
05:34
And what this does is let you configure multiple girls
05:39
to get your patches.
05:40
Some of those might be from Vienna, where some might be from other vendors whose products you have in your environment,
05:45
and you set up the download you are Ellie. There are several that are provided by default,
05:49
or you can get the appropriate girl by just going to the company's website
05:54
and, you know, copying and pasting that into the update manager configuration.
05:59
You can also restrict downloads,
06:00
meaning that if I don't want,
06:03
uh, anything but critical patches, Aiken, Aiken restrict everything else, just gets just giving the critical ones, and that makes my job easier. That might be an extreme example, but you get the idea.
06:15
Okay, so we'll start to talk a little bit about what's required for installation and then in the next portion of this lesson, will cover more of the configuration
06:24
settings.
06:25
So we must be running on a 64 bit version of Windows.
06:29
Could be Server 2008 sober 2012 were not. What have you
06:33
When you do the installation? We need to know the V Center host name
06:38
because the update manager needs to talk to the central server and orchard coordinated activities.
06:43
We also need a username and password to do. The installation,
06:46
which typically would be the admin password for V Center, just depends on how you have that set up.
06:51
You need to make your decision on whether or not you want the embedded or the external database. So I was mentioning here. You either use the external database that maybe you're the central server uses or you in bed the sequel server 2005.
07:05
Then you decide which ports you'd like to use. Or if you're using a proxy, you would define the credentials for the proxy.
07:12
The port. You can leave that default unless they conflict with something in your environment.
07:15
The proxy would only be needed if if you have a proxy
07:18
to go from the update manager to the Internet.
07:21
If that's not needed, then don't worry about then you pick your destination folder
07:26
Pretty basic stuff.
07:28
If the update manager is on a separate system, you only need to gig of RAM. That's a pretty low requirement.
07:33
If the update MANDER shares a server with be center, then you need at least four Gig of RAM.
07:40
You probably would have four gig or more of RAM on V Center anyway, so this should be a sort of take care of itself a little bit.
07:46
Okay, so to recap,
07:48
we talked about what Update Manager does,
07:51
and the kinds of objects in your inventory that could be updated. Our hosts virtual machine hardware via more tools and appliances reduces our risks because we have automated, centralized management patches and upgrades,
08:05
keeps our systems running smoothly. And with the newest version of the M or tools, you no longer require all those reboots
08:11
that we looked at our different components, where the where the database can be. Is it embedded or is an external
08:16
Do we want to share the V Central Server or not? These are the choices you have to think about.
08:22
And then we looked a little bit at how to deal with the fact that your update manager may not be on the Internet
08:28
so you can get the patches in the repositories through other means.
08:31
And then, lastly, we talked a little about some of the requirements for installation, some minimum member requirements.
08:37
Eso after we're done with the second portion, or the third portion of this lab will talk about doing Lab 22.
08:45
Thank you

Up Next

Virtualization Management

Our self-paced online Virtualization Management training class focuses on installing, configuring and managing virtualization software. You?ll learn how to work your way around the cloud and how to build the infrastructure for it.

Instructed By

Instructor Profile Image
Dean Pompilio
CEO of SteppingStone Solutions
Instructor