SOLVED

Unable to enable Update Management

%3CLINGO-SUB%20id%3D%22lingo-sub-1217557%22%20slang%3D%22en-US%22%3EUnable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1217557%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3EI'm%20trying%20to%20enable%20Update%20Managment%20on%20an%20Azure%20VM.%20But%20the%20select%20boxes%20are%20not%20populating.%3C%2FP%3E%3CP%3EAny%20idea%20what%20could%20be%20wrong.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture.PNG%22%20style%3D%22width%3A%20705px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F175927i788A2E82BD5A32D5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture.PNG%22%20alt%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1217557%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Log%20Analytics%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EUpdate%20Management%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1219179%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1219179%22%20slang%3D%22en-US%22%3E%3CP%3EMight%20have%20stumbled%20on%20the%20answer%20here%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fautomation%2Fhow-to%2Fregion-mappings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fautomation%2Fhow-to%2Fregion-mappings%3C%2FA%3E%3C%2FP%3E%3CP%3ENorth%20Europe%20isn't%20on%20the%20mapping%20list.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1246822%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1246822%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F577472%22%20target%3D%22_blank%22%3E%40PatrikHansson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHi%2C%3C%2FP%3E%0A%3CP%3EYes%20Update%20Management%20can%20be%20deployed%20in%20certain%20regions%20only.%20You%20can%20onboard%20though%20any%20Azure%20VM%20(not%20matter%20the%20region)%20to%20Update%20Management%20solution%20even%20if%20they%20are%20in%20different%20regions.%20Best%20is%20once%20you%20have%20deployed%20Update%20Management%20to%20go%20to%20the%20Automation%20account%20blade%20of%20where%20Update%20Management%20is%20deployed%20and%20from%20there%20you%20have%20Update%20Management%20blade.%20From%20that%20blade%20you%20can%20onboard%20any%20Azure%20VM%20in%20your%20tenant.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1248972%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1248972%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9172%22%20target%3D%22_blank%22%3E%40Stanislav%20Zhelyazkov%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%20thanks.%3C%2FP%3E%3CP%3EWill%20try%20that%2C%20saw%20yesterday%20that%20Maurice%20made%20a%20blogpost%20about%20Patch%20Management%20where%20he%20mention%20this%20as%20well.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.scconfigmgr.com%2F2020%2F03%2F23%2Fpatching-servers-in-a-modern-way-with-azure-security-center%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.scconfigmgr.com%2F2020%2F03%2F23%2Fpatching-servers-in-a-modern-way-with-azure-security-center%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1249361%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1249361%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F577472%22%20target%3D%22_blank%22%3E%40PatrikHansson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFound%20another%20problem%2C%20it's%20not%20only%20the%20automation%20account%20that%20needs%20to%20be%20in%20a%20supported%20region.%20The%20log%20analytics%20workspace%20also%20needs%20to%20be%20in%20a%20supported%20region.%3C%2FP%3E%3CP%3EAnd%20since%20the%20Azure%20VMs%20already%20are%20connected%20to%20a%20Log%20Workspace%20in%20North%20Europe%20they%20can't%20be%20enabled.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1249365%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1249365%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F577472%22%20target%3D%22_blank%22%3E%40PatrikHansson%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThat%20is%20I%20think%20documented%20that%20for%20Update%20Management%20you%20cannot%20dual%20home.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1254668%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20enable%20Update%20Management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1254668%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F9172%22%20target%3D%22_blank%22%3E%40Stanislav%20Zhelyazkov%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMost%20have%20missed%20that.%20But%20reconfigured%20the%20VMs%20to%20a%20new%20Workspace%20in%20West%20Europe%20and%20gotten%20it%20to%20work.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi

I'm trying to enable Update Managment on an Azure VM. But the select boxes are not populating.

Any idea what could be wrong.

Capture.PNG

6 Replies
Highlighted

Might have stumbled on the answer here:

https://docs.microsoft.com/en-us/azure/automation/how-to/region-mappings

North Europe isn't on the mapping list.

Highlighted
Solution

@PatrikHansson 

Hi,

Yes Update Management can be deployed in certain regions only. You can onboard though any Azure VM (not matter the region) to Update Management solution even if they are in different regions. Best is once you have deployed Update Management to go to the Automation account blade of where Update Management is deployed and from there you have Update Management blade. From that blade you can onboard any Azure VM in your tenant.

Highlighted

@Stanislav Zhelyazkov 

Hi, thanks.

Will try that, saw yesterday that Maurice made a blogpost about Patch Management where he mention this as well.
https://www.scconfigmgr.com/2020/03/23/patching-servers-in-a-modern-way-with-azure-security-center/

Highlighted

@PatrikHansson 

Found another problem, it's not only the automation account that needs to be in a supported region. The log analytics workspace also needs to be in a supported region.

And since the Azure VMs already are connected to a Log Workspace in North Europe they can't be enabled. 

 

Highlighted

@PatrikHansson 

That is I think documented that for Update Management you cannot dual home.

Highlighted

@Stanislav Zhelyazkov 

Most have missed that. But reconfigured the VMs to a new Workspace in West Europe and gotten it to work.