Patching both of the ESXi 5.5 running in the UCS server to the latest security patch

thaungtunzaw · ‎10-12-2017

Hello,

I would like to check that we are planning to patch both of the ESXi 5.5 running in the UCS server to the latest security patch, would it have any impact or compatibility issues with your current ESA and SMA that is currently on version 10.

Thanks,

Regards,

Thaung

dmccabej · ‎10-12-2017

Hello,

You can review the Cisco Content Security Virtual Appliance Installation Guide for any needed information regarding ESXi version compatibility and supported features.

Thanks!

-Dennis M.

thaungtunzaw · ‎10-13-2017

Hi Dennis,

Thanks for your reply. When I checked this document, there is no mention for security patches of ESXi5.5.

We have to do patching the latest security patches of ESXi 5.5 and how can I verify it?

Thanks,

Regards,

Thaung

dmccabej · ‎10-13-2017

Hello,

I'm not sure what you mean. ESXi 5.5 is supported, so this would include any updates to 5.5. If these updates require a shutdown and/or reboot of the ESXi host, then of course you'll need to make proper plans to shutdown any devices on the ESXi host itself. This should not cause any negative impact though or cause it to become 'unsupported'.

Thanks!

-Dennis M.

thaungtunzaw · ‎10-19-2017

Hi Dennis,

Thanks for your reply. Appreciate your help. Could you please share a document for the upgrade?

Thanks,

Regards,

Thaung

dmccabej · ‎10-20-2017

Hello,

Can you elaborate a bit further? An upgrade of what, the ESA?

Thanks!

-Dennis M.

thaungtunzaw · ‎10-22-2017

Hi Dennis,

I planned to upgrade the lastest security patch of ESXi 5.5. There are two virtual ESA as cluster mode in one of UCS server and one virtual SMA in one of UCS server.

Thanks,

Thaung

dmccabej · ‎10-23-2017

You'll need to go through the VMware docs to confirm how to update your ESXi environment. This would not be information that we're able to provide. Regarding the ESA or SMA, assuming this is your only ESXi host, you'll simply need to shut them down prior to the update if the ESXi host needs to be in maintenance mode or if it requires a reboot. Once completed, you can then power the appliances back on. You could also migrate these devices to another ESXi host if you have one prior to performing the update to avoid the downtime.

Thanks!

-Dennis M.

thaungtunzaw · ‎10-25-2017

Hi Dennis,

Thanks for your help to reply. I would like to ask one more question as do I need to run suspendlistener before shut down the ESA/SMA.

Thanks,
Regards,
Thaung

dmccabej · ‎10-26-2017

You're very welcome! :) That is typically the recommended action, yes. Suspend the listeners and make sure there's no current buildup on the ESA/SMA. This can be done by using the workqueue status and tophosts command(s) from the CLI respectively. Once drained, you can shutdown the appliances as needed to proceed with your ESXi updates. Then, when you power everything back on all you need to remember to do is resume the listeners.

Thanks!

-Dennis M.