Skip to content

Associate a maintenance configuration#

Operational Excellence · Arc · Rule · Preview · 2023_06 · Important

Use a maintenance configuration for Arc-enabled servers.

Description#

Arc-enabled servers can be attached to a maintenance configuration which allows customer managed assessments and updates for machine patches within the guest operating system.

Recommendation#

Consider automatically managing and applying operating system updates with a maintenance configuration.

Examples#

Configure with Azure template#

To deploy Arc-enabled servers that pass this rule:

  • Deploy a Microsoft.Maintenance/configurationAssignments sub-resource (extension resource).
  • Set the properties.maintenanceConfigurationId property to the linked maintenance configuration resource Id.

For example:

Azure Template snippet
{
  "type": "Microsoft.Maintenance/configurationAssignments",
  "apiVersion": "2022-11-01-preview",
  "name": "[parameters('assignmentName')]",
  "location": "[parameters('location')]",
  "scope": "[format('Microsoft.HybridCompute/machines/{0}', parameters('name'))]",
  "properties": {
    "maintenanceConfigurationId": "[parameters('maintenanceConfigurationId')]"
  },
  "dependsOn": [
    "[resourceId('Microsoft.HybridCompute/machines', parameters('name'))]"
  ]
}

Configure with Bicep#

To deploy Arc-enabled servers that pass this rule:

  • Deploy a Microsoft.Maintenance/configurationAssignments sub-resource (extension resource).
  • Set the properties.maintenanceConfigurationId property to the linked maintenance configuration resource Id.

For example:

Azure Bicep snippet
resource config 'Microsoft.Maintenance/configurationAssignments@2022-11-01-preview' = {
  name: assignmentName
  location: location
  scope: arcServer
  properties: {
    maintenanceConfigurationId: maintenanceConfigurationId
  }
}

Notes#

Operating system updates with Update Managment center is a preview feature. Not all regions or operating systems are supported, check out the LINKS section for supported regions. Update management center doesn't support driver updates.

Comments