update vmware with VUM

I upgraded one of our vmware cluster with customised HP ESXi ISO to the esxi 6.5 build:8294253 ( this is the latest HP custom ISO that is provided). Because this is not the latest version and I can see that there are several updates after this release I need to patch my servers now. I will use the VUM, but in VUM I can see all updates for version 6.5 and I am a little bit confused how to create my baseline, what to include in this baseline, which patches should I add.
dedriAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
There are 3 updates available since  build:8294253, the latest is ESXi-6.5.0-20181004001-standard (Build 10175896).

You should be able to add these patches and re mediate or stage.
0
dedriAuthor Commented:
Could you specify how to do it, I am a little bit confused. Here is a screenshot of the VUM and filtered patches for esxi 6.5. What should I include in the baseline from this patches.  Or should I do it with some other way. As I can see some of the patches are repeated.
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You should include the  latest patch in the base line.

Please see my EE Article as a guide

HOW TO: Update (Patch) VMware ESXi 6.0.0 GA to ESXi 6.0.0b with VMware Update Manager (VUM)
0
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

dedriAuthor Commented:
Hello Andrew,
can you see the attached screenshot. Should I choose only first two patches from 2 October 2018, or I should choose all patches released after Update2( in a picture from 28 June to 02 october). My current build is esxi 6.5 build:8294253
VMWareUpdates.png
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
All patches are cumulative.

So you need to look at the  Web Link - BG document, and apply the latest patch. (which can usually be found on the date)

otherwise, you will be applying build x, and then build y, and build z....

when you only need to apply build z.
0
dedriAuthor Commented:
Hi Andrew,
As I understand you correctly I need to apply first two patches from 02 October from the picture that I attached.
Also I need to apply patches "cpu-microcode VIB" and "esxi-ui VIB" from 14 September.
Is this correct?
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dedriAuthor Commented:
very good article Andrew.
So I understand you correctly, I need to apply first two patches from 02 October seen in VUM and additionally patches "cpu-microcode VIB" and "esxi-ui VIB" from 14 September.
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Yes, but also be very cautious, and understand the Rollups and Patches and what they do.... and also if they require vCenter Server to be updated first, otherwise you could end up updating the hosts, and then having no management of them, because VC should have been done first.

and also following all the Spectre, Meltdown, T1 security issues and also maybe updating Host Firmware and BIOS!
0
dedriAuthor Commented:
thanks for reminder, I've already update the vcenter server, firmware and BIOS of the hosts.
Also you told me about the T1 process of patching the host in my other question.
Till now I haven't used the customised ISO. In the past I always install vmware image, and my patching process is to download the latest iso from vmware site, upload it in vmware update manager, create a baseline on this imported image, and remediate hosts, because I know that they are cumulative. And now I am confused with this customised iso, should i patch the sever with vum patches, should i use my old way of performing patch process. I am wondering if i download the latest iso from vmware and patch the hosts, what happens to HP drivers installed with the hp iso, are they gone. With vmware update manager you don't have an options what to choose "install" or "update", as you can do with the command line. this is still not clear to me even though i wrote the article
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Install the OEM HPE version, and then patch....

you can also add the HPE depot for patches as well.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.