Patching/Updating vCenter Server through vCenter Server Appliance Management Interface (VAMI)

Products

• VMware vCenter Server

Issue/Introduction

Use the vCenter Server Appliance Management Interface (VAMI) to install patches using one of the following two methods:

• Patching via URL: Uses a remote repository with the default VMware repository URL (requires an internet connection).
• Patching via CD: Uses a local repository by attaching an ISO image to the vCenter Server virtual machine (VM).

Environment

VMware vCenter Server 7.x

VMware vCenter Server 8.x

Resolution

Prerequisites

• Ensure a valid backup of the vCenter Server Appliance exists before attempting any updates. Appliance File-Based backups are recommended. For additional details, refer: Overview of Backup and Restore options in vCenter Server 6.x/7.0.x/8.0.
  
  
• Create an offline snapshot of the appliance while the vCenter Server virtual machine is powered off. If vCenters are in an Enhanced Linked Mode, refer: VMware vCenter in Enhanced Linked Mode pre-changes snapshot (online or offline) best practice.
  
  
• Ensure the root password is not expired. For more information, refer Resetting root password in vCenter Server Appliance 7.x / 8.x.
  
  
• Ensure the local SSO Administrator Credentials are available. For more information, refer Using vCenter Single Sign-On with vSphere.
  
  
• Ensure the vCenter Server update settings are up to date. For more information, refer VCF authenticated downloads configuration update instructions.

Option 1 - Patching via URL

1. Log in to the vCenter Server Appliance Management Interface (VAMI) at https://<appliance-IP-address-or-FQDN>:5480 as root.
   
   Note: For vSphere 7.x and 8.x, the vSphere SSO Administrator Credentials "[e-mail]" can be used for patching the appliance instead of the root account.
   
   
2. Click on the Update tab.
   
   
3. Ensure the update source is set to CD ROM + URL under the CHECK UPDATES menu.
   
   
4. Select the target vCenter Server build. For more information about vCenter build numbers, refer Build numbers and versions of VMware vCenter Server.
   
   
5. Click Stage and Install.
   
   Note: Select Stage Only to schedule the installation for a later time.
   
   
    
6. Read and accept the End user license Agreement (EULA).
   
   
7. Wait for the system pre-check to verify that the patches can be successfully installed.
   
   
8. Enter the vSphere SSO Administrator password when prompted.
   
   
   
   
9. Check the box to confirm that the vCenter Server has been backed up, then click Finish.
   
   
10. The patching process initiates and is complete when the system displays the "Installation succeeded" message.
    
    

Option 2 - Patching via CD

1. Download the patch ISO images from Broadcom Support Portal.
   
   
   1. For detailed download instructions, refer VMware vSphere downloads, OEM custom images, patches and addons in the Broadcom Support Portal.
   2. Ensure to download the correct vCenter patch ISO ending with "-FP.iso."
      
      
2. Via the vCenter Server UI, upload the ISO Image to a datastore.
   
   
   1. Identify the ESXi host where the vCenter Appliance virtual machine (VM) is running.
   2. Select a datastore mounted to that host with sufficient space for the ISO file.
   3. Browse the datastore and upload the ISO file.

   1. Note: If the ISO upload fails with the below error message, refer: The operation failed for an undetermined reason.

      The operation failed for an undetermined reason. Typically this problem occurs due to certificates that the browser does not trust. If you are using self-signed or custom certificates, open the URL below in a new browser tab and accept the certificate, then retry the operation.

      https://<target-IP>

    

3. Mount the ISO file to the vCenter Server virtual machine.
   
   
   1. Right click on the vCenter Server VM and click on Edit Settings.
   2. Expand CD/DVD Drive, select Datastore ISO File, and browse for the file.
   3. Select the file and click OK.
      
      
4. Log in to the vCenter Server Appliance Management Interface (https://appliance-IP-address-or-FQDN:5480) as root.
   
   
5. Click on Update tab.
   
   
6. Click CHECK UPDATES and select Check CD ROM.

  

Additional Information

In the event of a update/patch failure, collect a support log bundle from the failed node via SSH prior to restoring from a backup or reverting to a snapshot.

1. Open an SSH session to the vCenter Server and login as root
2. Enable the shell by entering: shell.set --enabled true
3. Access the shell by entering: shell
4. To export the logs to /storage/log/, run: vc-support -l

Note: For patching vCenter Server in a High Availability Environment, refer: Patching a vCenter High Availability Environment.