Patching Hyper-V Hosts with SCVMM 2012 R2 – Part 3: Update Baselines

In the last post we performed additional configurations. In this post we will create and configure Update Baselines to apply updates to our Hyper-V cluster.

SCVMM Update Baselines

Launch the VMM console, if it isn’t already open, and navigate to Library > Update Catalog and Baselines Update Baselines.

Config Baselines - 01 - Update Baselines

You should see two built-in baselines named Sample Baseline for Security Updates and Sample Baseline for Critical Updates.

Config Baselines - 02 - Sample Baselines

Click on the Sample Baseline for Security Updates.

In the top menu, click Properties.

Config Baselines - 03 - Baseline Properties

In the Baseline Properties dialog, select the Updates menu from the left. This will list the updates that are a part of this baseline. From here you can Add/Remove Updates.

Config Baselines - 04 - Baseline Properties - Updates

Next, click on the Assignment Scope menu on the left. From here you can select host groups, host clusters, and computers to add to the baseline. After you have made your changes/assignments, click OK.

Config Baselines - 05 - Baseline Properties - Assigment Scope

You can also create your own Baseline, by clicking on Create > Baseline from the top menu.

Config Baselines - 06 - Create Baseline

Hyper-V Host Compliance

Now that we have a Baseline assigned to our Hyper-V Host, let’s examine the Host’s compliance.

Navigate to Fabric > Host Group > and select a Host.

Config Baselines - 07 - Fabric - Host Group

Config Baselines - 08 - Fabric - Host

Click on the Compliance button in the top menu, and then click Scan to initiate the compliance check.

Config Baselines - 09 - Host Scan

Once the Compliance Scan has completed, the console will show the Compliance Status for the Host(s) scanned.

In my Lab example, my Host is showing as “Non Compliant”.

Config Baselines - 10 - Scan Results

At this point, you can click on the Remediate button from the top menu. This will launch the Update Remediation dialog. Within this dialog, you can select the Update(s) to apply to Host(s) to bring it into compliance, and then click Remediate.

Config Baselines - 11 - Update Remediation

SCVMM will now initiate its automated workflow that will do the following:

  1. Start Maintenance Mode on the Host, which will Live Migrate the VMs to another node in the Hyper-V Cluster
  2. Install any updates required to become Compliant
  3. Reboot the Host
  4. Re-check if the Host computer is now compliant
  5. Stop Maintenance Mode on the Host
  6. Repeat all 5 steps on each node in the cluster

Config Baselines - 12 - Remediation Complete

This concludes this series on Patching Hyper-V Hosts with SCVMM 2012. As always, if this post helped you in any way, and you would like to show your appreciation, please rate it, comment on it, and share it with others. Also, feel free to contact me (via the About Me page) with requests for future articles.

%d bloggers like this: