Hi All ...
In the twentieth part of our series, we'll go through vSphere Update Manager. This supplementary component is so similar to Windows WSUS; a component inside your virtual infrastructure which is responsible for updating any ESXi host, VM or virtual appliance in your environment.
Credits:
- Jase McCarty
Now, Let's Start...
1. Update Manager Port List:
The following table summarize all ports required for Update Manager components:
Port: | Usage: |
80 | Connection between UM server and vCenter server. |
443 (SSL) | Connection between UM and vmware.com to download metadata. |
902 | Connection between UM server and vSphere hosts. |
8084 | Connection between UM plug-in and UM server. |
9084 | Connection between UM Web server and vSphere hosts. |
9087 (SSL) | Connection between UM Web server and vSphere hosts to upload upgrade files. |
9000-9100 | Reserve range is used for communication when any of the previous port is in use by another software. |
2. Upgrading ESXi Hosts using Update Manager 5.x:
It’s not supported to update from ESX 3.x to ESXi 5.x directly using Update Manager. Alternatively, either install a fresh installation of ESXi 5.x or upgrade first to ESX 4.x, then use Update Manager to upgrade to ESXi 5.x.
Steps: 1-) Configure Update Manager and the cluster settings.
2-) Import an ESXi image with the required version & drivers in .iso format.
3-) Create a new upgrade baseline.
4-) Attach the required container (cluster, folder or datacenter) to the newly created baseline.
5-) Scan the container.
6-) Review scan results.
7-) Remediate the container.
3. Update Manager Download Service (UMDS):
This service is used when UM server isn’t connected to internet, instead another web server is connected to internet and used to download updates for UM server. The following step-by-step guide written by Jase McCarty describes clearly how to install it with Web server based on Windows 2k8R2:
http://www.jasemccarty.com/blog/?page_id=5
4. Update Manager PowerCLI:
To enable UM VMware PowerCLI commands:
1-) Install VMware PowerCLI on a machine and set Power Shell Execution Policy to Remote Signed.
2-) Connect to vCenter Server.
3-) Run the following command: Get-Command -PSSnapin -VUMAutomation.
5. Update Manager Basic Troubleshooting:
1-) UM service can’t be installed on a Domain controller. The following KB article from VMware describes it clearly:
2-) Check database connectivity and functionality.
3-) Check Internet connectivity with UM server or UMDS server.
4-) Check availability of free space (> 10mb) on vSphere hosts while updating, as updates and patches are staged first on ESXi host local disk before being installed (/tmp directory).
5-) Check for conflicting updates and patches before updating hosts.
6-) Changing default download location (Patch Repository) for UM Server to another local location is described in this step-by-step guide by VMware:
7-) Check all required Firewall ports are opened, like: http Client (80,443) & VMware UM (80).
Share the knowledge ....
Previous: vSphere 5.x Notes & Tips - Part XIX: