From dda722c0dbb5183504e55a9db7443a1fe52521e9 Mon Sep 17 00:00:00 2001 From: tiaraquan Date: Tue, 17 Dec 2024 09:37:25 -0800 Subject: [PATCH] Added VBS and ARM64-CHPE information --- .../manage/windows-autopatch-hotpatch-updates.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md index f59aeefc45..c4c4038b35 100644 --- a/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md +++ b/windows/deployment/windows-autopatch/manage/windows-autopatch-hotpatch-updates.md @@ -1,7 +1,7 @@ --- title: Hotpatch updates description: Use Hotpatch updates to receive security updates without restarting your device -ms.date: 11/19/2024 +ms.date: 12/17/2024 ms.service: windows-client ms.subservice: autopatch ms.topic: how-to @@ -35,9 +35,12 @@ Hotpatch updates are [Monthly B release security updates](/windows/deployment/up To benefit from Hotpatch updates, devices must meet the following prerequisites: - Operating System: Devices must be running Windows 11 24H2 or later. -- VBS (Virtualization-based security): VBS must be enabled to ensure secure installation of Hotpatch updates. +- VBS (Virtualization-based security): VBS must be enabled to ensure secure installation of Hotpatch updates. For more information on how to set and detect if VBS is enabled, see [Virtualization-based Security](/windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity). - Latest Baseline Release: Devices must be on the latest baseline release version to qualify for Hotpatch updates. Microsoft releases Baseline updates quarterly as standard cumulative updates. For more information on the latest schedule for these releases, see [Release notes for Hotpatch](https://support.microsoft.com/topic/release-notes-for-hotpatch-in-azure-automanage-for-windows-server-2022-4e234525-5bd5-4171-9886-b475dabe0ce8?preview=true). +> [!NOTE] +> Hotpatch is available on Windows Server. For more information, see [Hotpatch for Windows Server Azure Edition](/windows-server/azure-edition/hotpatch). + ## Ineligible devices Devices that don't meet one or more prerequisites automatically receive the Latest Cumulative Update (LCU) instead. Latest Cumulative Update (LCU) contains monthly updates that supersede the previous month's updates containing both security and nonsecurity releases. @@ -45,7 +48,7 @@ Devices that don't meet one or more prerequisites automatically receive the Late LCUs requires you to restart the device, but the LCU ensures that the device remains fully secure and compliant. > [!NOTE] -> If devices aren't eligible for Hotpatch updates, these devices are offered the LCU. The LCU keeps your configured Update ring settings, it doesn't change the settings. +> If devices aren't eligible for Hotpatch updates, these devices are offered the LCU. The LCU keeps your configured Update ring settings, it doesn't change the settings.

For **ARM64 devices**, Compiled Hybrid PE Usage (CHPE) is turned on by default. You must turn off CHPE to receive regular LCU to keep your ARM64 device compliant and secure.

## Release cycles