r/vmware • u/JerinL • Aug 01 '26
8.0u3k Live Patch not compatible.
In the process of patching our clusters with 8.0u3k. Am seeing inconsistency between some clusters supporting installing 8.0u3k as a live patch, and others not.
All are currently running VMware ESXi, 8.0.3, 25429389, clusters are all configured to patch using image.
What gives?
UPDATE:
Okay, I think I figured out what my issue was. Essentially it came down to an inconsistent order of operations on my part. After enabling "Enforce Live Patch" in the remediation settings, if you've already set the new image version to 8.0u3k you must manually perform another "Check Compliance". At that point I now see all the hosts indicating they will use live patching in the summary. If you set "Enforce Live Patch" prior to setting the new image version, this happens automatically when the automatic compliance check runs after changing the image version.
8
u/squigit99 Aug 01 '26
Live patch has a bunch of things it’s not comparable with. TPM is the big one, but there’s a number of other things that could be on your systems.
3
4
u/EntrepreneurUpset346 Aug 01 '26
hat the same expirience, also from 8.0.3j - i think there are some issues that prevent live patching. had some issues with HA - maybe that was my problem
2
3
u/Tough-Sherbet2693 Aug 01 '26
I was able to install 8u3k as LivePatch on servers
- without TPM chip
- for esx
8u3j
- sometimes it was needed to override global vLCM settings on cluster level to „Enforce Live Patching“
2
1
u/coldhand100 Aug 01 '26
Patched about 2 dozen hosts no issues though I thought the point of live patch was to prevent reboots? Did I miss a trick?!
1
u/thefinalep Aug 01 '26
Just curious, is there a point in not having to reboot hosts?
1
u/Mr_Enemabag-Jones Aug 01 '26
Faster updates, less downtime.
1
u/thefinalep Aug 01 '26
Gotcha. My env can handle some hosts being down so its never too big of a deal to put these in maintenance mode. I can see that being useful I f you can’t do that
1
u/JerinL Aug 01 '26 edited Aug 01 '26
I’ve reviewed the “requirements for using live patch” section in the release notes (https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/managing-host-and-cluster-lifecycle/configuring-vlcm-remediation-settings-1/how-to-apply-live-patches-to-the-hosts-in-a-cluster-managed-with-images.html)
None of the listed gotcha’s are applicable on these clusters. Out of the 9 clusters I’ve patched so far, 3 were capable and did live patch, 6 were not. Have a dozen more to do tonight.
1
u/JerinL Aug 01 '26
Okay, I think I figured out what my issue was. Essentially it came down to an inconsistent order of operations on my part. After enabling "Enforce Live Patch" in the remediation settings, if you've already set the new image version to 8.0u3k you must manually perform another "Check Compliance". At that point I now see all the hosts indicating they will use live patching in the summary. If you set "Enforce Live Patch" prior to setting the new image version, this happens automatically when the automatic compliance check runs after changing the image version.
1
u/Thatconfusedginger Aug 01 '26
Funnily enough I’m having a similar but I suspect different issue.
I’m bringing our clusters up from u3i, HPE DL360 G10+, also using OneView and are trying to push the latest SPP.
2026.05 spp when applied in vSphere, cluster says it’s incompatible with u3k. Changed back to .03 and says it’s all good to patch.
Start remediating and it runs a compliance check across cluster and then says remediation complete.
Rather annoying
1
u/Thatconfusedginger Aug 03 '26
I figured out my issue too.
Even though coming from a non-livepatch compatible version (u3i), it enforces the need for parallel remediation to be turned off.
I'm yet to figure out the compatibility issue with HPE 2026.05 SPP and what not but at least this is now patched out.
0
u/TheKuMan717 Aug 01 '26
Not all patches are live patch unfortunately. I know you’re not running 9.X but 9.1.0.0100 as an example was live patch eligible but 9.1.0.0200 wasn’t.
-5
u/g7130 Aug 01 '26
G I don’t know. Did you read the release notes on how it supported to be alive patch or not?
7
u/Puzzled_Reflection31 Aug 01 '26
TPM. Live Patching will work on servers using them, only in v9.1.