October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk10 min

How to roll back a problematic VMware ESXi patch safely

A safe VMware ESXi patch rollback starts with a configuration backup, maintenance mode, and console access. Reboot, press Shift+R while the progress bar loads, confirm the intended previous build with Y, then verify the host—or reinstall and restore when no image is offered.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For an eligible in-place rollback, reboot the ESXi host and press Shift+R while the hypervisor progress bar is loading. If the recovery screen shows the intended previous build, press Y, then Enter. This boots the retained previous image; it cannot select an arbitrary older build. Back up the configuration first and prepare a reinstall-and-restore path in case the previous image is unavailable.

What the ESXi rollback actually does

ESXi keeps a previous boot image after many updates. The Shift+R operation switches the host to that retained image at boot; it is not a general downgrade command and does not browse a repository of older builds. Broadcom describes the retained copy as the previous bootbank image, normally the immediately preceding version (n-1). A later update or reboot-required change can discard the older n-2 copy, leaving nothing for Shift+R to load. See Broadcom’s procedure for the supported environments and exceptions: Reverting to a previous version of ESXi.

As an Amazon Associate I earn from qualifying purchases.

The method can apply after VIB or image-profile installation or removal, VMware Update Manager updates, and ISO-based updates, but eligibility depends on what changed on the particular host. A rollback also does not return every component to its former state: Broadcom specifically warns that the tools-light VIB version is not reverted.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Before you touch the host

Confirm the failure and the target build

  • Record the current ESXi version, build number, image profile, patch method, and the build you intend to restore.
  • Check the release notes and interoperability for the target build and for your storage, network, firmware, vCenter, and cluster configuration.
  • Determine whether the host has rebooted since the patch and whether anyone has installed or removed VIBs, profiles, drivers, or agents afterward. Those actions can remove the retained rollback copy.

Do not proceed merely because a patch was the last change you remember. The boot menu reflects the host’s current bootbank state, not an operator’s change log.

Back up configuration and protect workloads

Back up the ESXi host configuration before patching or recovery. A rollback can expose inventory or device differences, and a reinstall will require that backup to restore the host. For the normal maintenance workflow, migrate resident virtual machines to other hosts when possible, or shut them down, and place the host in maintenance mode. Broadcom’s command-line guidance covers these preparation requirements: Upgrading, updating or applying a patch to ESXi host using esxcli command.

Use a physical console or a remote management console that remains available while ESXi reboots. Do not rely solely on a disconnected vCenter session to catch a timing-sensitive boot prompt.

Step-by-step: use Shift+R to return to the retained image

  1. Put the host in a controlled state. Migrate or shut down its VMs, enter maintenance mode, and confirm that the configuration backup is accessible. If the host is part of a cluster, follow your site’s evacuation and admission-control procedures.
  2. Reboot the host. Use the normal ESXi restart path or the remote/physical console. Keep the console visible from the beginning of the boot sequence.
  3. Watch for the hypervisor progress bar. The timing is critical: press Shift+R while the bar is loading, not after it has completed. Broadcom documents this key sequence in Reverting to a previous version of ESXi.
  4. Read the recovery prompt. It should identify the previous build or image. Stop if the displayed build is not the one you have approved. Shift+R does not provide a menu for arbitrary older builds.
  5. Confirm the switch. Press Y at the prompt, then press Enter to continue booting the displayed image.
  6. Allow the host to start fully. Do not interrupt storage discovery, network initialization, or management-agent startup. The host may take longer than a routine reboot while devices and services are reinitialized.

Verify the host after rollback

Verification is a separate operational task; seeing a login prompt does not prove that the host is ready for production.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Confirm the running ESXi version and build from the DCUI, vCenter, or the host command line and compare it with the build shown by the recovery prompt.
  • Check management connectivity, DNS, NTP, certificates, and vCenter responsiveness.
  • Confirm that every expected datastore is mounted and that paths, multipathing, VMFS volumes, and storage adapters are healthy.
  • Check physical and distributed-switch uplinks, vmkernel interfaces, VLAN reachability, and the management network.
  • Review the VM inventory, virtual hardware compatibility, snapshots, and any alarms before powering workloads back on.
  • Verify required vendor drivers, agents, and monitoring components. Do not assume the tools-light VIB returned to its former version; Broadcom says a previous-build rollback does not revert that VIB.
  • Inspect host and vCenter events for missing devices, incompatible VIBs, or inventory registration problems. Symptoms vary by hardware and by the difference between the two images.

Only after these checks should you exit maintenance mode and return workloads to the host. If the rollback was performed to contain a production incident, preserve logs and record the exact build and bootbank selected before making another change.

Rank #2
Sale
VMware vSphere For Dummies
  • Used Book in Good Condition

When Shift+R is unavailable

If no previous build is offered, the prompt appears but the image will not boot, or the host repeatedly falls back to the new image, stop treating the boot switch as an available rollback. The retained image may have been removed, corrupted, or made unusable by a later VIB/profile operation or by a version transition.

Reinstall the compatible ESXi image

Broadcom’s patching guidance recommends reinstalling the desired older ESXi version and restoring the host configuration from the preparation backup when the previous image cannot be used. Select the image appropriate to the server hardware, including a hardware-vendor custom image when the vendor supplies one. The reinstall procedure itself depends on the boot device, remote-install tooling, storage layout, and your organization’s security settings; document those prerequisites before wiping or reimaging the host.

  1. Collect the target ESXi installer or vendor-custom image, license details, host configuration backup, network and storage settings, and any required driver or firmware packages.
  2. Evacuate or shut down workloads and place the host in the required maintenance state.
  3. Install the target version on the intended boot device, taking care not to overwrite VMFS or other data volumes that must be preserved.
  4. Restore the saved configuration using the supported restore workflow for that ESXi release.
  5. Reapply only the drivers, VIBs, licenses, certificates, networking, storage mappings, and security settings that are compatible with the target build.
  6. Re-run the post-install verification, then reintroduce the host to vCenter and the cluster according to your normal admission procedure.

A reinstall is more disruptive than Shift+R, but it is the documented recovery route when no usable previous boot image remains. Broadcom’s command-line patching article describes the configuration-backup and reinstall fallback: Patching ESXi host using Command Line.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Version transitions that change rollback eligibility

Do not promise a rollback until you have checked both the source and target releases. Boot-device partition changes can make a previous installation layout inaccessible even when an administrator expects the older build to remain.

Transition or state What the documented guidance says Operational implication
Upgrade to ESXi 7.0, then attempt to return to an earlier version Broadcom says this is not possible because of boot-device partition changes. Back up the boot device before the upgrade, or plan a reinstall of the desired version instead of relying on Shift+R.
Transitions among ESXi 7.0, 8.0, and 9.0 Broadcom’s article says reversion among these versions is possible because those versions do not introduce partition changes between them. Verify the exact release, build, installation path, and current host state; the statement does not guarantee that every patch or VIB history remains rollback-eligible.
Any update followed by another reboot-requiring change The later change can discard the retained previous copy. Check the actual recovery prompt. Do not infer availability from the date of the original patch.

These limits are documented in Broadcom’s ESXi reversion article. Release-specific behavior can change, so confirm the current article and the host’s exact versions before scheduling downtime.

HA and VIB changes can silently remove the safety net

A documented vSphere 8 case occurs after a 7.0-to-8.0 upgrade: leaving maintenance mode can install the ESXi 8 FDM VIB, which removes the older rollback copy. Broadcom describes disabling vSphere HA before that particular upgrade as a workaround and lists configuration backup and restore as another path. This is a workflow-specific caveat, not a reason to disable HA indiscriminately. Read the case details at Cannot revert ESXi version when upgrading from 7.0 to 8.0.

More generally, installing software VIBs, changing an image profile, or performing another reboot-required operation after the update can commit a new bootbank state. If rollback matters, capture the configuration, record the boot image state, and avoid unrelated changes until the patch has been accepted or rejected.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not confuse boot rollback with profile commands

Shift+R is a boot-time selection of a retained image. It is different from applying an offline bundle at the ESXi command line. Treating a profile command as a substitute can remove drivers or other VIBs.

Operation Purpose and behavior Risk when used as a rollback
esxcli software profile update -d <offline_bundle.zip> -p <profile_name> Applies newer VIB content from the named profile while leaving installed VIBs that are absent from that profile untouched. Broadcom calls update the recommended method for applying patches. It is a patching operation, not a bootbank rollback; the resulting image still depends on the bundle and profile you select.
esxcli software profile install -d <offline_bundle.zip> -p <profile_name> Overwrites the host profile and can remove installed VIBs that are not included in the target profile. OEM or third-party drivers may disappear. Never use it as a routine downgrade without comparing the target profile’s VIB set and hardware requirements.
esxcli software vib update or install Older VIB-level forms used in prior workflows. For ESXi upgrades and updates, Broadcom says these forms are no longer supported starting with ESXi 8.0 Update 2. Use the documented profile-based method for supported releases.

For the full command-line scope and version qualifications, see Patching ESXi host using Command Line and Upgrading, updating or applying a patch to ESXi host using esxcli command. A profile update normally requires a reboot after the operation completes; that reboot is part of patch application, not the Shift+R recovery sequence.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Choosing the recovery path

Situation Preferred action Downtime and preparation
The prompt offers the approved previous build and the version transition supports reversion Use Shift+R, confirm the build, and verify the host. Planned host reboot; workloads must be migrated or stopped and configuration backup should already exist.
The prompt is absent after subsequent VIB, profile, HA, or reboot-required activity Use a compatible reinstall and restore the configuration. Host reimage and post-install validation; preserve data volumes and collect the correct vendor image.
The source/target versions cross a documented boot-partition boundary Do not depend on Shift+R; reinstall the desired version. Plan for reinstall, restore, driver compatibility, and broader maintenance.
The prompt shows an unexpected build Cancel the rollback and investigate the bootbank and change history. No image switch; avoid booting an unapproved state.
The previous image boots but storage, networking, or inventory is broken Keep the host isolated from production, collect logs, and choose between correcting compatibility issues and reinstalling. Additional troubleshooting or a clean rebuild; do not return workloads until validation passes.

Troubleshooting the common failure modes

Shift+R does nothing

The most common cause is timing. Reboot again with a directly observed console and press the keys while the progress bar is loading. If the prompt still never appears, assume that no retained image is available until the host’s bootbank state and update history prove otherwise.

The prompt shows no usable previous build

A later reboot-required VIB or profile change may have replaced the retained copy, or the version transition may not support reversion. Do not force a different profile from the command line as a shortcut. Move to the compatible reinstall-and-restore plan.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The host boots but VMs or datastores are missing

Keep workloads stopped while checking storage adapter visibility, VMFS mounts, networking, and inventory registration. A previous image may contain different drivers or management components. Compare the running build and VIB set with the configuration backup and target hardware requirements before making further changes.

Tools or guest integration reports a version mismatch

That can be expected because the tools-light VIB is not reverted by the previous-build rollback. Validate the component’s compatibility with the running ESXi build and follow the vendor’s supported remediation rather than assuming that Shift+R failed.

The host will not boot the retained image

Stop repeated boot attempts if they risk storage or configuration damage. Use the supported installer for the target release, restore the configuration backup, and validate drivers and firmware before reconnecting the host to production.

A safer rollback policy for future patches

  • Before every patch, save a current host configuration and record the installed image profile and VIB inventory.
  • Confirm that the intended recovery release is supported for the boot-device layout and the hardware vendor’s custom image.
  • Schedule the first reboot with console access and verify the retained image before making unrelated VIB, HA, or profile changes.
  • Keep a tested reinstall-and-restore runbook, not just an assumption that Shift+R will always be offered.
  • After patching, test management, storage, networking, VM inventory, monitoring, and guest integration before declaring the host recovered.

The practical decision is simple: use Shift+R only when the prompt offers the correct retained build and the version transition is eligible. Otherwise, protect the workloads, reinstall a compatible image, and restore the configuration from backup.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.