# Update ESXi host via CLI

Enable Maintenance mode and SSH on the host
Login via SSH
Open local firewall ports to access the internet

esxicli
esxcli network firewall ruleset set -e true -r httpClient

Search for the latest patch

esxicli
esxcli software sources profile list -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml

Patch the host

esxicli
esxcli software profile update -p <the patch you want to install from step 4> -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml

Reboot the host after the patch is installed
Close the local firewall ports

esxicli
esxcli network firewall ruleset set -e false -r httpClient

Disable SSH and Maintenance mode