- go to VMware ESXi Patch Tracker and check for the latest ImageProfile e.g.
ESXi-6.5.0-20170404001-standard - Shut down all VMs and turn on maintenance mode
- allow outbound firewall requests
esxcli network firewall ruleset set -e true -r httpClient
- execute the update:
esxcli software profile update -p ESXi-6.5.0-20170404001-standard -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml
- Disable firewall ports
esxcli network firewall ruleset set -e false -r httpClient
- Disable maintenance mode
- Reboot