If your SDDC Manager appliance has a connection to the internet (either directly or through a proxy server), you can run the Async Patch Tool from the SDDC Manager appliance to download and enable an async patch. Once the patch is successfully enabled, you can use the SDDC Manager UI to apply the patch to all workload domains.
Prerequisites
- Refer to KB 88287 to ensure that the async patch is supported with your version of VMware Cloud Foundation. Contact VMware Support if you have questions about the available async patches and which versions of VMware Cloud Foundation support them.
- You must have the latest version of the Async Patch Tool.
Note: If an existing or older version of the Async Patch Tool exists in the directory, you will need to remove these files before downloading the latest version of the Async Patch Tool.
rm -r /home/vcf/asyncPatchTool
rm -r <outputdirectory>
The default directory is /home/vcf/apToolBundles if outputDirectory was not specified when the Async Patch Tool was previously run.
- Configure TCP keepalive in your SSH client to prevent socket connection timeouts when using the Async Patch Tool for long-running operations.
- The Async Patch Tool is supported with VMware Cloud Foundation 4.2.1 and later. This release also supports ESXi and VxRail Manager patching of VMware Cloud Foundation on VxRail.
Procedure
What to do next
For versions of VMware Cloud Foundation earlier than 5.2, new workload domains will not include async patch versions of vCenter Server or NSX Manager. Use this procedure to apply the async patch(es) to the new workload domain.
Note: After you update the hosts in a workload domain to an async patch version of ESXi, any new hosts that you add to the workload domain must use the async patch version of ESXi and not the version listed in the
VMware Cloud Foundation BOM.