VMware regularly releases patches for the vCenter Server Appliance that might be related to third-party products in the platform, core product functionality, or both. You can use the Appliance Management Interface or the appliance shell to apply patches to a vCenter Server Appliance that contains a vCenter Server with an embedded Platform Services Controller, a vCenter Server with an external Platform Services Controller, or a Platform Services Controller.
VMware distributes the available patches in two forms, one for ISO-based and one for URL-based models of patching.
You can download the patch ISO images from https://my.vmware.com/group/vmware/patch.
VMware publishes two types of ISO images that contain patches.
Third-party patch for the vCenter Server Appliance and Platform Services Controller appliance, which contains only the fixes related to security and third-party products (for example, JRE, tcServer, and Photon OS components).
Full product patch for the vCenter Server Appliance and Platform Services Controller appliance, which contains the VMware software patches and the fixes related to security and third-party products (for example, JRE, tcServer, and Photon OS components).
You can configure the vCenter Server Appliance and Platform Services Controller appliance to use a repository URL as a source of available patches. The appliance is preset with a default VMware repository URL.
You can download the patches in ZIP format from the VMware website at https://my.vmware.com/web/vmware/downloads and build a custom repository on a local Web server. The download filename is VMware-vCenter-Server-Appliance-product_version-build_number-updaterepo.zip.
When patches are available, you can apply only the third-party patches that are related to security and third-party products (for example, JRE, tcServer, and Photon OS components), or you can apply all VMware software patches together with the third-party patches.
Third-party patches usually belong to the security category. You must always apply at least the patches related to security.
Before you update a vCenter Server Appliance with an external Platform Services Controller, you must apply the patches to the Platform Services Controller and its replicating partners, if any in the vCenter Single Sign-On domain. For more information, see Update sequence for vSphere 6.5 and its compatible VMware products.