Manage update configuration settings

Sign in to the Azure portal.

In Azure Update Manager, select Overview, select your Subscription, and select Update settings.

In Change update settings, select +Add machine to select the machine for which you want to change the update settings.

In Select resources, select the machine and select Add.

In the Change update settings page, you will see the machine classified as per the operating system with the list of following updates that you can select and apply.

The following update settings are available for configuration for the selected machines:

• Periodic assessment: The periodic assessment is set to run every 24 hours. You can either enable or disable this setting.

• Patch orchestration option provides:

  • Customer Managed Schedules—enables schedule patching on your existing VMs. The new patch orchestration option enables the two VM properties - Patch mode = Azure-orchestrated and BypassPlatformSafetyChecksOnUserSchedule = TRUE on your behalf after receiving your consent.
  • Azure Managed - Safe Deployment—for a group of virtual machines undergoing an update, the Azure platform will orchestrate updates. (not applicable for Arc-enabled server). The VM is set to automatic VM guest patching.(i.e), the patch mode is AutomaticByPlatform. There are different implications depending on whether customer schedule is attached to it or not. For more information, see the user scenarios.
    • Available Critical and Security patches are downloaded and applied automatically on the Azure VM using automatic VM guest patching. This process kicks off automatically every month when new patches are released. Patch assessment and installation are automatic, and the process includes rebooting the VM as required.
  • Windows Automatic Updates (AutomaticByOS) - When the workload running on the VM doesn't have to meet availability targets, the operating system updates are automatically downloaded and installed. Machines are rebooted as needed.
  • Manual updates - This mode disables Windows automatic updates on VMs. Patches are installed manually or using a different solution.
  • Image Default - Only supported for Linux Virtual Machines, this mode uses the default patching configuration in the image used to create the VM.

After you make the selection, select Save.

Sign in to the Azure portal.

In Azure Update Manager, select Overview, select your Subscription and select Update settings.

In Change update settings, select the update settings that you want to change for your machines. Follow the procedure from step 3 listed in From Overview blade of Configure settings on single VM.