Azure Update Manager provides centralized patch management for VMs in Azure, on-premises, and multi-cloud. The service is free and replaces the deprecated Update Management in Azure Automation.
What is Azure Update Manager?
Azure Update Manager is Microsoft’s modernized solution for OS patch management across all Azure VMs and Arc-enabled servers. The service offers Assessment (scan for missing updates), Deployment (installation of updates), Scheduling (maintenance windows), and Compliance reporting at no additional cost.
Unlike the legacy Update Management service, Azure Update Manager requires no Log Analytics Workspace and no Azure Automation Accounts. The new architecture is simpler, faster, and free. Supported are Windows Server 2012 R2+ and common Linux distributions (Ubuntu, RHEL, SUSE, etc.).
Typical Use Cases
Automatic Windows Update for Azure VMs
Configure automatic patch installation for Windows VMs outside business hours. Maintenance windows prevent updates during peak traffic. Safety checks restart VM after update failure.
Compliance Reporting for Security Updates
Central overview of all VMs with missing security updates. Filters critical updates. Azure Policy can report non-compliance. Meets audit requirements.
Hybrid Cloud Patch Management with Azure Arc
Manage updates for on-premises VMs and other clouds via Azure Arc. Unified patch management across all infrastructures. Reduces tool sprawl.
Frequently Asked Questions about Azure Update Manager
What does Azure Update Manager cost?
Completely free. No additional costs beyond VM compute charges. Unlike Update Management (legacy), no Log Analytics costs.
What is the difference from Update Management?
Update Manager is the successor to Update Management (legacy in Azure Automation). Advantages: no Log Analytics/Automation Account needed, free, faster assessment, modern UI. Microsoft recommends migration to Update Manager.
Does Update Manager support Linux?
Yes, Ubuntu, RHEL, CentOS, SUSE, Debian, Oracle Linux. Uses native package managers (apt, yum, zypper). Configurable update classifications (Security, Critical, Other).
Can I patch on-premises VMs?
Yes, via Azure Arc-enabled Servers. Install Azure Arc agent on on-premises VMs, then they appear in Update Manager. Also works for AWS/GCP VMs.
How do maintenance windows work?
Define Maintenance Configurations with start time, duration, recurrence pattern. Assign VMs. Updates are only installed during maintenance windows. Prevents updates during business hours.
Integration with innFactory
As a Microsoft Solutions Partner, innFactory supports you in implementing Azure Update Manager for centralized patch management across Azure, on-premises, and multi-cloud environments.
Contact us for a non-binding consultation on Azure Update Manager and Microsoft Azure.
