Ivanti Security Controls is a tool that allows you to manage the installation of patches on VMware ESXi. According to the documentation[1] versions 6.0 and above are supported
In order to see if it will be possible to install patches specific to ESXi 6.0, a lab setup containing a domain controller, SQL server and Ivanti Security Controls server (virtual machines) was prepared, separately ESXi 6.0 as a virtual machine under the control of another virtualizer.
When both the Ivanti Security Controls server and the ESXi being scanned had access to the Internet, the scan was successful in revealing the missing patches:
Then the selected patch can be installed:
The installation is reported to the server, allowing you to see the installation log:
The installation is reported to the server, allowing you to see the installation log:
The list of fixes also includes information about the expected impact on the virtualizer's service provision. When it is necessary to enter Maintenance mode, information is shown with a choice of procedure (in a simple lab setup, migration of the VM was not possible):
It is worth noting that the log of the installation process contains, among other things, such records:
The ability to scan ESXi hosts and install patches on them is an interesting feature of Ivanti Security Controls.
[1] https://help.ivanti.com/iv/help/en_US/isec/94/Topics/vCenter_Server_and_ESXi_Hypervisor_Requirements.htm?Highlight=ESXi