Regarding Upgrade you have the following question if patches taken from PAM Patches page are different for platform
The patches are hypervisor neutral? – i.e. the same bin file is used to upgrade the appliance regardless of whether it runs on Esxi (VMware) or Azure.
No, they are not different, the patches taken from that PAM page can be installed on all PAM appliances.