ESXi 5.5 u3b Compatibility
We came across an unexpected situation recently at a customer site that I wanted to briefly discuss. Typically, when applying ESXi host updates, you're safe to install whatever patches are available for your current version of ESXi. The December 2015 patch, ESXi550-201512001, as described in this VMware blog entry , does not fall into that category. You may have heard about the POODLE exploit; this patch updates the openSSL implementation and disables SSL version 3 in order to block that vulnerability. Blocking vulnerabilities is well and good, but this patch requires many vsphere administrators to modify their normal patching workflow. If you just apply the available ESXi updates, your ESXi hosts will lose their connection to vCenter and enter an unmanaged state. The proper way to apply this update is to update vCenter first, then apply updates to the ESXi hosts. That workflow is well understood, when updating ESXi versions (say, from 5.1 to 5.5 o...