Apply Latest OS Patches

01 Sign in to Azure Management Console.

02 Navigate to Azure Security Center blade at https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/.

03 In the navigation panel, under RESOURCE SECURITY HYGIENE, choose Recommendations to view the recommendations made available by the Azure Security Center for the cloud resources available in the current subscription. A recommendation represents an action for you to take in order to secure your Azure resources. Each Security Center recommendation consists of 1) a short description of what is being recommended, 2) the steps required to implement the recommendation, 3) the affected resource(s) that require the recommended actions and 4) the secure score impact if the recommendation is implemented.

04 On the Recommendations page, search for the Missing system updates recommendation entry. If there is no Missing system updates recommendation, the Security Center did not find any virtual machines that require the latest OS patches to be installed. If Missing system updates are available as recommendation, one or more Microsoft Azure virtual machines (Windows and/or Linux), provisioned within the current subscription, are missing the latest system updates (i.e. OS patches).

05 Repeat steps no. 2 – 4 for each Microsoft Azure subscription available in your account.

01 Sign in to Azure Management Console.

02 Navigate to Azure Security Center blade at https://portal.azure.com/#blade/Microsoft_Azure_Security/SecurityMenuBlade/.

03 In the navigation panel, under RESOURCE SECURITY HYGIENE, choose Recommendations to access the Azure Security Center recommendations made for the cloud resources available within the current subscription.

04 On the Recommendations page, click on the Missing system updates recommendation to open the list with the system (OS) updates that are missing from your Azure virtual machines (VMs).

05 On the Apply system updates dashboard, click on the missing system (OS) update that you want to install in order to remediate the security issue.

06 On the selected missing system security update, click on the Search button to open the search log with the Azure virtual machines that are missing the selected OS patch.

07 Select the Microsoft Azure virtual machine (VM) that you want to reconfigure in order to apply the required system update.

08 Connect to the selected Azure VM and install the missing security update based on the recommendations provided by the Azure Security Center.

09 Repeat step no. 7 and 8 to install the missing system security updates for the rest of the Azure virtual machines available on the list.

10 Repeat steps no. 5 – 9 to apply the rest of the missing system (OS) updates found by Security Center for the Azure VMs provisioned in the current subscription.

11 If required, repeat steps no. 2 – 10 for other subscriptions available within your Microsoft Azure account.