Security update procedure of Vmware components

Hello hotlineR,

Here is a link to a KB that maybe of assistance. https://dell.to/3HBg0S8

If it's External (a.k.a customer-suppliced ) vCenter from VxRail perspective, it is ok to update it by any supported method.

But if you are using VxRail managend vCenter (a.k.a Internal VC from VxRail perspective), it is not supported to update it other than VxRail official method because it may destroy supported configuration and validated design of VxRail.

If you would like to apply latest patch to vCenter, you can convert it from Internal to External so that you can update it manually, or you have to wait on a new release of VxRail which contains latest patch.

Fortunately, VxRail provides its code with policy of simship, which publish a new vmware patch with shortest delay.

I'm sure that VxRail releases a new patch within 2 weeks if it's emergency security patch.

Hi naoyuki, Tanks for you complete reply.
It's an internal VC. So the only supported way to update VxRail is from Vcenter Server UI - VmWare Cluster - configure - VxRail - Update. There is no other way. That's right ?

And do you now if I wait for a new update from VxRail, it can resolve this problem ?

Last question : 2 weeks for en emergency security patch. Isn't it too long ?

Hi Sam,

Thanks you for the link. I already check this. But it didn't said that if I can do this update : Vcenter Server UI - VmWare Cluster - Updates.

It's an internal VC. So the only supported way to update VxRail is from Vcenter Server UI - VmWare Cluster - configure - VxRail - Update. There is no other way. That's right ?

Yes, correct, unless you convert it to external VC.

And do you now if I wait for a new update from VxRail, it can resolve this problem ?

The newer VxRail version contains the newer vCenter version.

What version of vxrail are you currently running? and which patch version of vCenter is needed for your environment?

Last question : 2 weeks for en emergency security patch. Isn't it too long ?

Perhaps, VxRail engineering needs to do while system test for such a new emergency patch and rebuild the new version with it and publish on Dell web site. I think it may time reasonable time.

But VxRail FAQ doc states as below, so it is possible that the new release with emergency patch may be released in a few days. but this is not SLA, just SLO because, again, it depends on case by case situation.

Q. What is synchronous release?
A. VxRail software provides synchronous availability within 30 days of VMware software releases. This includes alignment for Update 1
releases, maintenance, and emergency patches. Best effort is given to emergency patches to deliver even more quickly (sometimes in
a few business days). View the knowledge base article for more information.