You can use Update Manager to keep your vSphere inventory updated with the most recent patches.
You can change the frequency of the checks for updates and patches, create dynamic patch baselines, attach the baselines to the objects in the inventory, and perform regular scans and scheduled remediation, to keep your vSphere inventory of hosts and virtual machines updated.
This workflow describes the overall process to keep the hosts and virtual machines in your vSphere inventory updated with the most recent patches.
Configure the patch download schedule.
Update Manager checks for patches at regular intervals. You can modify the schedule for checking and downloading patch data. For a detailed description of the procedure, see Configure Checking for Updates.
Create dynamic patch baselines.
The contents of dynamic patch baselines are updated when new patches that meet the criteria become available. For information about creating dynamic patch baselines, see Create a Dynamic Patch Baseline.
Attach the baselines to a container object.
To scan and remediate the objects in your vSphere inventory, attach the baselines to selected objects in the inventory. For a detailed description of the procedure, see Attach Baselines and Baseline Groups to Objects.
Schedule a scan.
You can schedule periodic scans of the hosts in your vSphere inventory. For a detailed description of the procedure, see Schedule a Scan.
Schedule remediation for the hosts.
Schedule remediation tasks at times convenient for you for the hosts in your vSphere inventory. For more information about scheduling remediation, see Scheduling Remediation for Hosts, Virtual Machines, and Virtual Appliances.