Azure Update Manager
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 0978932 · +23 −29 lines · also on GitHub
⋯ 11 unchanged lines
1212
1313
# About Azure Update Manager
1414
15
−> [!Important]
16
−> Both Azure Automation Update Management and the Log Analytics agent it uses [have been retired on 31st August 2024](https://azure.microsoft.com/updates/were-retiring-the-log-analytics-agent-in-azure-monitor-on-31-august-2024/). Therefore, if you are using the Automation Update Management solution, we recommend that you move to Azure Update Manager for your software update needs. Follow the [guidance](guidance-migration-automation-update-management-azure-update-manager.md#migration-scripts) to move your machines and schedules from Automation Update Management to Azure Update Manager.
17
−> For more information, see the [FAQs on retirement](update-manager-faq.md#impact-of-log-analytics-agent-retirement).
18
−
19
−
20
−Update Manager is a unified service to help manage and govern updates for all your machines (running a server operating system). You can monitor Windows and Linux update compliance across your machines in Azure, and on-premises or other cloud environments (connected by [Azure Arc](/azure/azure-arc/)) from a single pane of management. You can also use Update Manager to make real-time updates or schedule them within a defined maintenance window.
15
+Update Manager is a unified service to help manage and govern updates for all your machines (running a server operating system). You can monitor Windows and Linux update compliance across your machines in Azure, and on-premises or other cloud environments (connected by [Azure Arc](/azure/azure-arc/)) from a single pane of management. You can also use Update Manager to make real-time updates or schedule them within a defined maintenance window.
2116
22
−You can use Azure Update Manager for:
17
+You can use Azure Update Manager for :
2318
2419
- **Unified Update Management** - Monitor update compliance across Windows and Linux machines (running a server operating system) from a single dashboard, including machines in Azure, and on-premises or other cloud environments (connected by Azure Arc).
2520
- **Flexible patching options**:
2621
- Schedule updates within [customer-defined maintenance ](https://aka.ms/umc-scheduled-patching), for both Azure and Arc-connected machines.
27
− - [Apply updates in real-time](deploy-updates.md)
28
− - Use [Automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching), to automatically apply updates to Azure VMs without requiring manual intervention.
22
+ - [Apply updates in real-time](deploy-updates.md)
23
+ - Use [Automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching), to automatically apply updates to Azure VMs without requiring manual intervention.
2924
- Use [hotpatching](/windows-server/get-started/hotpatch), to apply critical updates to Azure VMs without requiring a reboot, minimizing downtime
30
−- **Security and Compliance tracking** - Apply security and critical patches with enhanced security measures and compliance tracking.
31
−- **Periodic update Assessments** - Enable [periodic assessments](https://aka.ms/umc-periodic-assessment-policy) to check for updates every 24 hours.
32
−- **Dynamic Scoping** - Group machines based on criteria and apply updates at scale.
33
−- **Custom Reporting and Alerts** - Build custom dashboards to report update status and [configure alerts](manage-alerts.md) to notify you of update statuses and any issues that arise.
34
−- **Granular Access Control** - Use role-based access control (RBAC) to delegate permissions for patch management tasks at a per-resource level.
35
−- **Software updates including application updates**:
36
− - That are available in Microsoft updates.
37
− - That are available in Linux packages.
38
− - That are published to [Windows Server Update Services (WSUS)](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus).
39
−- Patching diverse resources
40
− - Azure Virtual Machines (VMs): both Windows and Linux VMs in Azure (including SQL servers). VMs also include the ones which are created by Azure Migrate, Azure Backup, and Azure Site Recovery.
41
− - [Hybrid machines](/azure/azure-arc/servers/) (including SQL Arc servers) and Windows IoT Enterprise on Arc enabled servers.
25
+- **Security and Compliance tracking** - Apply security and critical patches with enhanced security measures and compliance tracking.
26
+- **Periodic update Assessments** - Enable [periodic assessments](https://aka.ms/umc-periodic-assessment-policy) to check for updates every 24 hours.
27
+- **Dynamic Scoping** - Group machines based on criteria and apply updates at scale.
28
+- **Custom Reporting and Alerts** - Build custom dashboards to report update status and [configure alerts](manage-alerts.md) to notify you of update statuses and any issues that arise.
29
+- **Granular Access Control** - Use role-based access control (RBAC) to delegate permissions for patch management tasks at a per-resource level.
30
+- **Software updates including application updates**:
31
+ - That are available in Microsoft Updates
32
+ - That are available in Linux packages
33
+ - That are published to [Windows Server Update Services (WSUS)](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus)
34
+- Patching diverse resources
35
+ - Azure Virtual Machines (VMs): both Windows and Linux VMs in Azure (including SQL servers).
36
+ - [Hybrid machines](/azure/azure-arc/servers/) (including SQL Arc servers) and Windows IoT Enterprise on Arc enabled servers
4237
- [VMware machines](/azure/azure-arc/vmware-vsphere/)
43
− - [System Center Virtual Machine Manager (SCVMM) machines](/azure/azure-arc/system-center-virtual-machine-manager/)
38
+ - [System Center Virtual Machine Manager (SCVMM) machines](/azure/azure-arc/system-center-virtual-machine-manager/)
4439
- [Azure Local clusters](/azure/azure-local/)
4540
- [Cross-subscription-patching](cross-subscription-patching.md)
4641
47
−These features make Azure Update Manager a powerful tool for maintaining the security and performance of your IT infrastructure.
42
+These features make Azure Update Manager a powerful tool for maintaining the security and performance of your IT infrastructure.
4843
4944
## Key benefits
5045
⋯ 4 unchanged lines
5550
- No dependency on Log Analytics and Azure Automation.
5651
- Azure [Policy support](https://aka.ms/aum-policy-support).
5752
- Availability in most [Azure virtual machines and Azure Arc regions](https://aka.ms/aum-supported-regions).
58
−- Works with Azure roles and identity.
59
− - Granular access control at the per-resource level instead of access control at the level of the Azure Automation account and Log Analytics workspace.
53
+- Works with Azure roles and identity.
54
+ - Granular access control at the per-resource level instead of access control at the level of the Azure Automation account and Log Analytics workspace.
6055
- Update Manager has Azure Resource Manager-based operations. It allows [role-based access control](../role-based-access-control/overview.md) and roles based on Azure Resource Manager in Azure.
6156
- Offers enhanced flexibility
6257
- Take immediate action either by [installing updates immediately](https://aka.ms/on-demand-patching) or [scheduling them for a later date](https://aka.ms/umc-scheduled-patching).
6358
- [Check updates automatically](https://aka.ms/aum-policy-support) or [on demand](https://aka.ms/on-demand-assessment).
6459
- Secure machines with new ways of patching such as [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching) in Azure, [hotpatching](/azure/automanage/automanage-hotpatch) or [custom maintenance schedules](https://aka.ms/umc-scheduled-patching).
65
− - Sync patch cycles in relation to **patch Tuesday** the unofficial term for Microsoft's scheduled security fix release on every second Tuesday of each month.
60
+ - Sync patch cycles in relation to **patch Tuesday** the unofficial term for Microsoft's scheduled security fix release on every second Tuesday of each month.
6661
- Reporting and alerting
67
− - Build custom reporting dashboards through [Azure Workbooks](manage-workbooks.md) to monitor the update compliance of your infrastructure.
68
− - [Configure alerts](https://aka.ms/aum-alerts) on updates/compliance to be notified or to automate action whenever something requires your attention.
69
−
62
+ - Build custom reporting dashboards through [Azure Workbooks](manage-workbooks.md) to monitor the update compliance of your infrastructure.
63
+ - [Configure alerts](https://aka.ms/aum-alerts) on updates/compliance to be notified or to automate action whenever something requires your attention.
7064
7165
## Next steps
7266
- [How Update Manager works](workflow-update-manager.md)
⋯ 8 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:51 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.