VMware regularly releases patches for the vCenter Server Appliance that might be related to third-party products in the platform, core product functionality, or both. You can use the Appliance Management Interface or the appliance shell to apply patches to a vCenter Server Appliance that contains a vCenter Server with an embedded Platform Services Controller, a vCenter Server with an external Platform Services Controller, or a Platform Services Controller.

VMware distributes the available patches in two forms, one for ISO-based and one for URL-based models of patching.

  • You can download the patch ISO images from https://my.vmware.com/group/vmware/patch.

    VMware publishes two types of ISO images that contain patches.

    Download Filename

    Description

    VMware-vCenter-Server-Appliance-product_version-build_number-patch-TP.iso

    Third-party patch for the vCenter Server Appliance and Platform Services Controller appliance, which contains only the fixes related to security and third-party products (e.g. JRE, tcServer, and Photon OS components).

    VMware-vCenter-Server-Appliance-product_version-build_number-patch-FP.iso

    Full product patch for the vCenter Server Appliance and Platform Services Controller appliance, which contains the VMware software patches and the fixes related to security and third-party products (e.g. JRE, tcServer, and Photon OS components).

  • You can configure the vCenter Server Appliance and Platform Services Controller appliance to use a repository URL as a source of available patches. The appliance is preset with a default VMware repository URL.

    You can download the patches in ZIP format from the VMware Web site at https://my.vmware.com/web/vmware/downloads and build a custom repository on a local Web server. The download filename is VMware-vCenter-Server-Appliance-product_version-build_number-updaterepo.zip.

When there are available patches, you can select to apply only the third-party patches that are related to security and third-party products (e.g. JRE, tcServer, and Photon OS components), or you can apply all VMware software patches together with the third-party patches.

Important:

Third-party patches usually belong to the security category. You must always apply at least the patches related to security.

Before you update a vCenter Server Appliance with an external Platform Services Controller, you must apply the patches to the Platform Services Controller and its replicating partners, if any in the vCenter Single Sign-On domain. For more information, see Update sequence for vSphere 6.0 and its compatible VMware products.