Please note the following:
Download the latest Async Patch Tool to a computer that has access to the internet and the SDDC Manager appliance.
Run the download from the AP Tool.
If you connect to the internet through a proxy server, use the --proxyServer, --ps
option to specify the FQDN and port of the proxy server. For example, --proxyServer FQDN:port
.
4.x Linux:
./vcf-async-patch-tool -d --patch ESX_HOST:7.0.3-23307199 --du customer_connect_email
4.x Windows:
vcf-async-patch-tool.bat -d --patch ESX_HOST:7.0.3-23307199 --du customer_connect_email
5.x Linux:
ESXi 8.0 U1d:
./vcf-async-patch-tool -d --patch ESX_HOST:8.0.1-23299997 --du customer_connect_email
ESXi 8.0 U2b:
./vcf-async-patch-tool -d --patch ESX_HOST:8.0.2-23305546 --du customer_connect_email
5.x Windows:
ESXi 8.0 U1d:
vcf-async-patch-tool.bat -d --patch ESX_HOST:8.0.1-23299997 --du customer_connect_email
ESXi 8.0 U2b:
./vcf-async-patch-tool -d --patch ESX_HOST:8.0.2-23305546 --du customer_connect_email
SSH into the SDDC Manager using the vcf user account and create the following directory:
mkdir /nfs/vmware/vcf/nfs-mount/apToolBundles
Copy the patch and set permissions.
a. Copy the entire output directory from the local computer (for example, apToolBundles) to the SDDC Manager appliance.
b. SSH in to the SDDC Manager appliance using the vcf user account.
c. Update the permissions on the apToolBundle directory.
chmod -R 755 /nfs/vmware/vcf/nfs-mount/apToolBundles && chown -R vcf:vcf /nfs/vmware/vcf/nfs-mount/apToolBundles
Copy the Async Patch Tool to the SDDC Manager appliance and configure it for use.
a. SSH in to the SDDC Manager appliance using the vcf user account.
Note:If an existing or older version of the Async Patch Tool exists in the directory, you will need to remove these files before downloading the latest version of the Async Patch Tool.
rm -r /home/vcf/asyncPatchTool
b. Create the asyncPatchTool directory.
mkdir /home/vcf/asyncPatchTool
c. Copy the Async Patch Tool file (vcf-async-patch-tool-<version>.tar.gz) that you downloaded in step 1 to the /home/vcf/asyncPatchTool directory.
d. Navigate to /home/vcf/asyncPatchTool and extract the contents of vcf-async-patch-tool-<version>.tar.gz.
cd /home/vcf/asyncPatchTool tar -xvf vcf-async-patch-tool-1.1.0.2.tar.gz
e. Set the permissions for the asyncPatchTool directory.
chmod -R 755 /home/vcf/asyncPatchTool && chown -R vcf:vcf /home/vcf/asyncPatchTool
Take a snapshot of the SDDC Manager VM
Enable the async patch with the relevant command below:
4.x VMware Cloud Foundation:
/home/vcf/asyncPatchTool/bin/vcf-async-patch-tool -e --patch ESX_HOST:7.0.3-23307199 --sddcSSOUser SSOuser --sddcSSHUser vcf --outputDirectory /nfs/vmware/vcf/nfs-mount/apToolBundles --it OFFLINE
5.x VMware Cloud Foundation:
ESXi 8.0 U1d:
/home/vcf/asyncPatchTool/bin/vcf-async-patch-tool -e --patch ESX_HOST:8.0.1-23299997 --sddcSSOUser SSOuser --sddcSSHUser vcf --outputDirectory /nfs/vmware/vcf/nfs-mount/apToolBundles --it OFFLINE
ESXi 8.0 U2b:
/home/vcf/asyncPatchTool/bin/vcf-async-patch-tool -e --patch ESX_HOST:8.0.2-23305546 --sddcSSOUser SSOuser --sddcSSHUser vcf --outputDirectory /nfs/vmware/vcf/nfs-mount/apToolBundles --it OFFLINE
Log in to the SDDC Manager UI and apply the async patch to all workload domains
After the async patch is successfully applied, use the Async Patch Tool to deactivate the patch.
a. SSH in to the SDDC Manager appliance using the vcf user account.
b. Run the following command and complete prompts:
/home/vcf/asyncPatchTool/bin/vcf-async-patch-tool --disableAllPatches --sddcSSOUser SSOuser --sddcSSHUser vcf
Async Patch Tool 1.1.0.2 - https://docs.vmware.com/en/VMware-Cloud-Foundation/services/ap-tool/GUID-49818DF1-94EA-4C85-8CB6-6EFFCE5F8060.html
VCF Async Patch Tool Options - https://docs.vmware.com/en/VMware-Cloud-Foundation/services/ap-tool/GUID-ED6AEE19-CB7D-44E7-A7D8-D54F8C5CC05D.html