someone here may be able to confirm but when you select the baseline it should show the updates that are "non compliant", review this list and check the category column. If there are any upgrades to version 8 then you'll want to avoid this baseline. However, if they are just bug fixes, security updates and enhancements then you should be fine.
Original Message:
Sent: Mar 13, 2025 10:59 AM
From: azuser
Subject: 2-Node ROBO
I have a two-node ROBO (Remote Office/Branch Office) cluster with a witness appliance. The ESXi build is 21686933. The hardware is somewhat old and is not on the ESXi 8 Hardware Compatibility List (HCL). I would like to apply a security patch and keep it with ESXi ver7.*. We have vLCM and I noticed there is a vSAN cluster ROBO baseline. I do not want to remediate using that baseline before consulting with experts. I suspect that if I attempt to remediate with that baseline, it will try to perform an upgrade to version8.*, which I do not want. What is the best way to apply the security patch?