Azure Update Manager

• To automatically patch servers or VMs

Example:

We have 100 VMs

• Security fixes (CVE)
• Patching (OS)
• Updates

Without Update Manager:

Admin needs to log in to each machine individually to:

• Patch VM
• Update OS
• Check logs
• Check patch status and verify if any packages failed

With Update Manager:

• All VMs in one dashboard
• Automatic patches
  • Linux
  • Windows
  • Mac
• Compliance reports
• Scheduling
• Maintenance window (e.g., Sunday 2 AM)
• Reboot control (no reboot on prod servers)
• Support for:
  • Azure VMs
  • Servers
  • On-premises VMs (via Azure Arc)

Let Me Create 2 VMs

Windows — Install Nginx

Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))

choco install nginx -y

New-NetFirewallRule -DisplayName "Allow HTTP" -Direction Inbound -LocalPort 80 -Protocol TCP -Action Allow

Schedule

Scope:

• Subscription
• Resource Group
• Tag-based

OS Type:

• Linux
• Windows