Choosing customer managed while creating the VM itself

Hi Anurag,

but manual update is not customer manged right ?

I am looking for patch orchestration has to be customer manager during vm creation , is it possible?

Varma, thank you for the reply.

Yes, you are right. Setting the "customer managed schedule" is not available when creating VM from portal. Instead, the steps is to select patch mode to "Azure-orchestrated" and then set it to "Customer Managed" from Azure Update Manager.

Or, you could use ARM template with the following settings when creating VM, which essentially means "Customer managed" schedule:

{ 
  "location":"<location>", 
  "properties": { 
    "osProfile": { 
      "windowsConfiguration": { 
        "provisionVMAgent": true, 
        "enableAutomaticUpdates": true, 
        "patchSettings": { 
          "patchMode": "AutomaticByPlatform", 
          "automaticByPlatformSettings":{ 
            "bypassPlatformSafetyChecksOnUserSchedule":true 
          } 
        } 
      } 
    } 
  } 
}

For details, see Enable schedule patching on Azure VMs.

Hope this helps.

If the answer did not help, please add more context/follow-up question for it. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.

Varma, Following-up to check if you had a chance to review the answer provided.

If the answer did not help, please add more context/follow-up question for it. Else, if the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.

Hi Anurag,

Thank you for the response and follow up.

Please clarify my following follow up questions:

1. what exactly meany by azure orchestration below highlighted? why azure orchestration came in to picture when we are talking patch orchestration?

2.Do you mean using ARM template can we create the VM with customer managed?

3.what exactly Patch mode = Azure-orchestrated ?

4.and during VM creation if we select manual mode , does it mean we have to log in to the vm and then we apply patches apply , right? and we can not place that machine under maintenance configuration, am i right?

Varma, thank you for the reply. Please find below the response to your questions:

1. Patch Orchestration refers to the method used to apply patches to Azure virtual machines and Arc-enabled servers. It determines how the patches are applied and managed. **AutomaticByPlatform (**or Azure-orchestrated patching) means that the patching of the VMs is taken care by the Azure platform (considering some of the scenarios as mentioned here - Availability-first Updates). Azure orchestration in this case means that Azure will be coordinating among all the required components to get the patching done based on certain criteria.
2. Yes, based on the documentation.
3. Azure-orchestrated (or AutomaticByPlatform)'s details are available here - AutomaticByPlatform (Azure-orchestrated patching)
4. Yes, you are correct. Manual means that you would have to manually apply the updates. Neither Azure nor OS will apply the patch automatically/based on schedule.

Hope this helps.

If the answer helped, please click Accept answer so that it can help others in the community looking for help on similar topics.