Installing patches on an ESXi 5.x/6.x host from the command line

1. Patches for VMware products can be obtained from the VMware Portal

2. Click the Download link below the patch Release Name to download the patch to your system.

3. Upload the patch to a datastore on your ESXi 5.x/6.x host using the Datastore Browser from vCenter or a direct connection to the ESXi 5.x/6.x host using the vSphere client.

Note: VMware recommends creating a new directory on the datastore and uploading the patch file to this directory.

4. Log into the local Tech Support Mode console of the ESXi 5.x/6.x host or using SSH

5. Migrate or power off the virtual machines running on the host and put the host into maintenance mode. The host can be put into maintenance mode from the command line with:

# vim-cmd hostsvc/maintenance_mode_enter 

6. Navigate to the directory on the datastore where the patch file was uploaded to and verify that the file exists:

# cd /vmfs/volumes/Datastore/DirectoryName
# ls 

Where Datastore is the datastore name where the patch file was uploaded to, and DirectoryName is the directory you created on the datastore.

7. Install or update a patch on the host using these esxcli commands:

Notes:

o To install or update a .zip file, use the -d option. To install or update a .vib file use the -v option.

o Using the update command is the recommended method for patch application. Using this command applies all of the newer contents in a patch, including all security fixes. Contents of the patch that are a lower revision than the existing packages on the system are not applied.

o Using the install command overwrites the existing packages in the system with contents of the patch you are installing, including installing new packages and removing old packages. The install command may downgrade packages on the system and should be used with caution. If required, the install command can be used to downgrade a system (only for image profiles) when the --allow-downgrade flag is set.

Caution: The install method has the possibility of overwriting existing drivers. If you are using 3rd party ESXi images, VMware recommends using the update method to prevent an unbootable state.

To Install:

o Using local setup:

# esxcli software vib install -d "/vmfs/volumes/Datastore/DirectoryName/PatchName.zip" 

Where PatchName.zip is the name of the patch file you uploaded to the datastore.

o Using http setup:

# esxcli software vib install -v viburl 

Where viburl is the URL to the http depot where VIB packages reside.


To Update:

o Using local setup:

# esxcli software vib update -d "/vmfs/volumes/Datastore/DirectoryName/PatchName.zip"

Where PatchName.zip is the name of the patch file you uploaded to the datastore.

Note: Alternatively, you can use the datastore's UUID instead of the DirectoryName.


o Using http setup:

# esxcli software vib update -v viburl 

Where viburl is the URL to the http depot where VIB packages reside.

8. Verify that the VIBs are installed on your ESXi host:

# esxcli software vib list 

For example:

# esxcli software vib list 

9. After the patch has been installed, reboot the ESX host:

# reboot 

10.   After the host has finished booting, exit maintenance mode and power on the virtual machines:

# vim-cmd hostsvc/maintenance_mode_exit

Source: VMware KB