Azure Update Manager
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-docs · commit 0f9d3a7 · +62 −49 lines · also on GitHub
11
---
2
−title: Azure Update Manager overview
3
−description: This article tells what Azure Update Manager in Azure is and the system updates for your Windows and Linux machines in Azure, on-premises, and other cloud environments.
2
+title: Azure Update Manager Overview
3
+description: This article describes features and benefits of Azure Update Manager for updating Windows and Linux machines in Azure, on-premises, and in other cloud environments.
44
ms.service: azure-update-manager
55
ms.custom: linux-related-content, ignite-2024
66
author: habibaum
77
ms.author: v-uhabiba
88
ms.date: 02/03/2025
99
ms.topic: overview
10
−# Customer intent: As an IT administrator managing diverse server environments, I want to use Azure Update Manager to monitor and automate software updates, so that I can ensure compliance and enhance the security of my Windows and Linux machines across Azure and on-premises environments.
10
+# Customer intent: As an IT administrator who manages diverse server environments, I want to use Azure Update Manager to monitor and automate software updates so that I can ensure compliance and enhance the security of my Windows and Linux machines across Azure and on-premises environments.
1111
---
1212
13
−# About Azure Update Manager
13
+# What is Azure Update Manager?
1414
15
−Update Manager is a unified service to help manage and govern updates for all your machines (running a server operating system). You can monitor Windows and Linux update compliance across your machines in Azure, and on-premises or other cloud environments (connected by [Azure Arc](/azure/azure-arc/)) from a single pane of management. You can also use Update Manager to make real-time updates or schedule them within a defined maintenance window.
15
+Azure Update Manager is a unified service to help manage and govern updates for all your machines that run a server operating system. With Update Manager, you can monitor Windows and Linux update compliance across your machines in Azure, on-premises, or in other cloud environments (connected by [Azure Arc](/azure/azure-arc/)) from a single pane of management. You can also use Update Manager to make real-time updates or schedule updates within a defined maintenance window.
1616
17
−You can use Azure Update Manager for:
17
+## Features
1818
19
−- **Unified Update Management** - Monitor update compliance across Windows and Linux machines (running a server operating system) from a single dashboard, including machines in Azure, and on-premises or other cloud environments (connected by Azure Arc).
19
+You can use Update Manager for:
20
+
21
+- **Unified update management**: Monitor update compliance across Windows and Linux servers from a single dashboard.
22
+
2023
- **Flexible patching options**:
21
− - Schedule updates within [customer-defined maintenance ](https://aka.ms/umc-scheduled-patching), for both Azure and Arc-connected machines.
22
− - [Apply updates in real-time](deploy-updates.md)
23
− - Use [Automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching), to automatically apply updates to Azure VMs without requiring manual intervention.
24
− - Use [hotpatching](/windows-server/get-started/hotpatch), to apply critical updates to Azure VMs without requiring a reboot, minimizing downtime
25
−- **Security and Compliance tracking** - Apply security and critical patches with enhanced security measures and compliance tracking.
26
−- **Periodic update Assessments** - Enable [periodic assessments](https://aka.ms/umc-periodic-assessment-policy) to check for updates every 24 hours.
27
−- **Dynamic Scoping** - Group machines based on criteria and apply updates at scale.
28
−- **Custom Reporting and Alerts** - Build custom dashboards to report update status and [configure alerts](manage-alerts.md) to notify you of update statuses and any issues that arise.
29
−- **Granular Access Control** - Use role-based access control (RBAC) to delegate permissions for patch management tasks at a per-resource level.
30
−- **Software updates including application updates**:
31
− - That are available in Microsoft Updates
32
− - That are available in Linux packages
33
− - That are published to [Windows Server Update Services (WSUS)](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus)
34
−- Patching diverse resources
35
− - Azure Virtual Machines (VMs): both Windows and Linux VMs in Azure (including SQL servers).
36
− - [Hybrid machines](/azure/azure-arc/servers/) (including SQL Arc servers) and Windows IoT Enterprise on Arc enabled servers
37
− - [VMware machines](/azure/azure-arc/vmware-vsphere/)
38
− - [System Center Virtual Machine Manager (SCVMM) machines](/azure/azure-arc/system-center-virtual-machine-manager/)
39
− - [Azure Local clusters](/azure/azure-local/)
40
− - [Cross-subscription-patching](cross-subscription-patching.md)
24
+ - Schedule updates within [customer-defined maintenance](https://aka.ms/umc-scheduled-patching) for both Azure virtual machines (VMs) and Azure Arc-connected machines.
25
+ - [Apply updates in real time](deploy-updates.md).
26
+ - Use [automatic guest patching](/azure/virtual-machines/automatic-vm-guest-patching) to automatically apply updates to Azure VMs without requiring manual intervention.
27
+ - Use [hotpatching](/windows-server/get-started/hotpatch) to apply critical updates to Azure VMs without requiring a restart, minimizing downtime.
4128
42
−These features make Azure Update Manager a powerful tool for maintaining the security and performance of your IT infrastructure.
29
+- **Security and compliance tracking**: Apply security and critical patches with enhanced security measures and compliance tracking.
4330
31
+- **Periodic update assessments**: Enable [periodic assessments](https://aka.ms/umc-periodic-assessment-policy) to check for updates every 24 hours.
32
+
33
+- **Dynamic scoping**: Group machines based on criteria and apply updates at scale.
34
+
35
+- **Custom reports and alerts**: Build custom dashboards to report update status, and [configure alerts](manage-alerts.md) to notify you of update statuses and any problems that arise.
36
+
37
+- **Granular access control**: Use role-based access control (RBAC) to delegate permissions for patch management tasks at a per-resource level.
38
+
39
+- **Software updates, including application updates**:
40
+ - Apply updates that are available in Microsoft Update.
41
+ - Apply updates that are available in Linux packages.
42
+ - Apply updates that are published to [Windows Server Update Services (WSUS)](/windows-server/administration/windows-server-update-services/get-started/windows-server-update-services-wsus).
43
+
44
+- **Patching diverse resources**:
45
+ - Patch Windows and Linux VMs in Azure (including SQL servers).
46
+ - Patch [hybrid machines](/azure/azure-arc/servers/), including deployments of SQL Server enabled by Azure Arc and Windows IoT Enterprise on Azure Arc-enabled servers.
47
+ - Patch [VMware machines](/azure/azure-arc/vmware-vsphere/).
48
+ - Patch [System Center Virtual Machine Manager machines](/azure/azure-arc/system-center-virtual-machine-manager/).
49
+ - Patch [Azure Local clusters](/azure/azure-local/).
50
+ - Perform [cross-subscription patching](cross-subscription-patching.md).
51
+
52
+- **Reports and alerts**:
53
+ - Build custom reporting dashboards through [Azure Workbooks](manage-workbooks.md) to monitor the update compliance of your infrastructure.
54
+ - [Configure alerts](https://aka.ms/aum-alerts) on updates and compliance to notify you or to automate action whenever something requires your attention.
55
+
56
+These features make Update Manager a powerful tool for maintaining the security and performance of your IT infrastructure.
57
+
4458
## Key benefits
4559
46
−Update Manager offers many new features and provides enhanced and native functionalities. Following are some of the benefits:
60
+Here are some of the benefits of Update Manager:
4761
48
−- Provides native experience with zero on-boarding.
49
− - Built as native functionality on Azure virtual machines and Azure Arc for Servers platforms for ease of use.
62
+- Provides native experience with zero onboarding:
63
+ - Built as native functionality on Azure VMs and Azure Arc-enabled servers for ease of use.
5064
- No dependency on Log Analytics and Azure Automation.
51
− - Azure [Policy support](https://aka.ms/aum-policy-support).
52
− - Availability in most [Azure virtual machines and Azure Arc regions](https://aka.ms/aum-supported-regions).
53
−- Works with Azure roles and identity.
65
+ - [Azure Policy support](https://aka.ms/aum-policy-support).
66
+ - Availability in most [Azure VMs and Azure Arc regions](https://aka.ms/aum-supported-regions).
67
+
68
+- Works with Azure roles and identity:
5469
- Granular access control at the per-resource level instead of access control at the level of the Azure Automation account and Log Analytics workspace.
55
− - Update Manager has Azure Resource Manager-based operations. It allows [role-based access control](../role-based-access-control/overview.md) and roles based on Azure Resource Manager in Azure.
56
− - Offers enhanced flexibility
57
− - Take immediate action either by [installing updates immediately](https://aka.ms/on-demand-patching) or [scheduling them for a later date](https://aka.ms/umc-scheduled-patching).
70
+ - Azure Resource Manager-based operations. Update Manager allows [role-based access control](../role-based-access-control/overview.md) and roles based on Resource Manager in Azure.
71
+ - Enhanced flexibility:
72
+ - Take immediate action by either [installing updates immediately](https://aka.ms/on-demand-patching) or [scheduling them for a later date](https://aka.ms/umc-scheduled-patching).
5873
- [Check updates automatically](https://aka.ms/aum-policy-support) or [on demand](https://aka.ms/on-demand-assessment).
59
− - Secure machines with new ways of patching such as [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching) in Azure, [hotpatching](/azure/automanage/automanage-hotpatch) or [custom maintenance schedules](https://aka.ms/umc-scheduled-patching).
60
− - Sync patch cycles in relation to **patch Tuesday** the unofficial term for Microsoft's scheduled security fix release on every second Tuesday of each month.
61
−- Reporting and alerting
62
− - Build custom reporting dashboards through [Azure Workbooks](manage-workbooks.md) to monitor the update compliance of your infrastructure.
63
− - [Configure alerts](https://aka.ms/aum-alerts) on updates/compliance to be notified or to automate action whenever something requires your attention.
74
+ - Secure machines with new ways of patching, such as [automatic VM guest patching](/azure/virtual-machines/automatic-vm-guest-patching) in Azure, [hotpatching](/azure/automanage/automanage-hotpatch), or [custom maintenance schedules](https://aka.ms/umc-scheduled-patching).
75
+ - Sync patch cycles in relation to *patch Tuesday*, the unofficial term for Microsoft's scheduled release of security fixes on the second Tuesday of each month.
6476
65
−## Next steps
77
+## Related content
78
+
6679
- [How Update Manager works](workflow-update-manager.md)
6780
- [Prerequisites of Update Manager](prerequisites.md)
68
−- [View updates for a single machine](view-updates.md).
69
−- [Deploy updates now (on-demand) for a single machine](deploy-updates.md).
70
−- [Enable periodic assessment at scale using policy](https://aka.ms/aum-policy-support).
71
−- [Schedule recurring updates](scheduled-patching.md)
72
−- [Manage update settings via the portal](manage-update-settings.md).
73
−- [Manage multiple machines by using Update Manager](manage-multiple-machines.md).
81
+- [Check update compliance with Update Manager](view-updates.md)
82
+- [Deploy updates now and track results with Update Manager](deploy-updates.md)
83
+- [Automate assessment at scale by using Azure Policy](https://aka.ms/aum-policy-support)
84
+- [Schedule recurring updates for machines by using the Azure portal and Azure Policy](scheduled-patching.md)
85
+- [Manage update configuration settings](manage-update-settings.md)
86
+- [Manage multiple machines with Update Manager](manage-multiple-machines.md)
7487
- [Plan deployment for updating Windows VMs in Azure](/azure/architecture/example-scenario/wsus#azure-update-manager)
Microsoft's Markdown source from MicrosoftDocs/azure-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 9 Oct 22:51 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.