It is essential that when VMs are first provisioned, the virtual machine template to be used is up to date. This will reduce the downtime for the end consumer of the VM when they come to patch, and reduce system-wide vulnerabilities.
Follow these steps to patch a VM template:
To patch a VM template, convert it into a VM, provide an IP, and make sure it can reach the VCM server.
The agent installer should be available on each template.
Once the agent has been installed, license the machine in VCM and perform a collection.
The machine should be a part of a machine group called Template Patching. Perform on-demand patching.
After patches have been installed and the VM rebooted and validated by VCM for the patch status, uninstall the agent.
Purge the VM in VCM.
Convert the VM back into a template.