# US 2025/0147797 A1 · Just-in-time assembly for managed virtual machines

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2025/0147797 A1
- Document ID: US20250147797A1
- Status: Published application
- Kind: A1
- Application number: 19/020,365
- Filed: 2025-01-14
- Published: 2025-05-08
- Earliest claimed: 2021-04-30
- Assignees: Omnissa, LLC
- Applicants: Omnissa, LLC
- Inventors: Stephen Jonathan Parry-Barwick; Maxwell Christopher Fox; Paul Adam Ryman; Yingfeng Ou
- Web page: https://patentgrep.com/patent/US20250147797A1

## CPC

- G06F 9/45558: {Hypervisor-specific management and integration aspects}
- G06F 8/65: Updates (security arrangements therefor G06F21/57)
- G06F 9/44505: {Configuring for program initiating, e.g. using registry, configuration files}
- G06F 9/4451: {User profiles; Roaming}
- G06F 9/54: Interprogram communication
- G06F 9/547: {Remote procedure calls [RPC]; Web services}
- G06F 2009/45562: {Creating, deleting, cloning virtual machine instances}
- G06F 2009/45575: {Starting, stopping, suspending or resuming virtual machine instances}
- G06F 2009/45587: {Isolation or security of virtual machine instances}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Examples of enterprise management using managed virtual machines (VMs) are described. In one example, a virtual machine base image is validated to comply with a plurality of managed virtual machine packaging rules of a management service. Managed virtual machine configuration parameters are written to a managed virtual machine configuration file of a managed virtual machine. The managed virtual machine includes a management component that implements instructions from a management service. A managed virtual machine package file is generated to include the managed virtual machine configuration file and enterprise-specific enterprise resources identified from the management service based on the enterprise identifier.

## Claims

### Claim 1

A method of updating a managed virtual machine enrolled for management by a management service, the method comprising:
executing the managed virtual machine on a host desktop hypervisor on a host computing device, the host computing device including a host operating system executing a host management agent, the managed virtual machine including a guest operating system executing a guest management agent;
receiving, by the guest management agent from the management service over a network connection, a command to update a user context configuration of the managed virtual machine;
in response to receiving the command to update the user context configuration of the managed virtual machine, establishing an inter-process communication (IPC) channel on the host computing device between the guest management agent and the host management agent;
transferring the command to update the user context configuration of the managed virtual machine from the guest management agent to the host management agent over the IPC channel on the host computing device;
issuing, by the host management agent to the host desktop hypervisor, a command to take the managed virtual machine offline;
applying, by the host management agent, one or more updates to the user context of the offline managed virtual machine based on the command; and
issuing, by the host management agent to the host desktop hypervisor, a command to relaunch the managed virtual machine that includes the one or more updates to the user context configuration.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
after relaunching the managed virtual machine, transmitting a notification from the guest management agent to the host management agent over the IPC channel, the notification indicating that the command to update the user context configuration was successfully implemented.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
after relaunching the managed virtual machine, transmitting a notification from the guest management agent to the management service over the network connection, wherein the notification indicates that the command to update the user context configuration was successfully implemented and the management service forwards the notification to the host management agent over the network connection.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
receiving, by the guest management agent, a managed virtual machine user context configuration from the management service;
transferring the managed virtual machine user context configuration from the guest management agent to the host management agent over the IP channel; and
storing, by the host management agent, the managed virtual machine user context configuration on the host computing device outside of the managed virtual machine, wherein the one or more updates are implemented based on the stored managed virtual machine user context configuration.

### Claim 5 (depends on 4)

The method of claim 4, further comprising:
deleting, by the host virtual machine management agent, the managed virtual machine user context configuration once the command to update the user context configuration is implemented.

### Claim 6 (depends on 1)

The method of claim 1, wherein the command to update the user context configuration of the managed virtual machine comprises at least one network location to download at least one portion of a managed virtual machine user context configuration.

### Claim 7 (depends on 1)

The method of claim 1, wherein the managed virtual machine is enrolled for management by the management service and wherein the host computing device is not enrolled for management by the management service.

### Claim 8

A non-transitory computer-readable medium embodying instructions executable by at least one computing device wherein the instructions, when executed, cause the at least one computing device to at least:
execute a managed virtual machine on a host desktop hypervisor on a host computing device, the host computing device including a host operating system executing a host management agent, the managed virtual machine including a guest operating system executing a guest management agent;
receive, by the guest management agent from a management service over a network connection, a command to update a user context configuration of the managed virtual machine;
in response to receiving the command to update the user context configuration of the managed virtual machine, establish an inter-process communication (IPC) channel on the host computing device between the guest management agent and the host management agent;
transfer the command to update the user context configuration of the managed virtual machine from the guest management agent to the host management agent over the IPC channel on the host computing device;
issue, by the host management agent to the host desktop hypervisor, a command to take the managed virtual machine offline;
apply, by the host management agent, one or more updates to the user context of the offline managed virtual machine based on the command; and
issue, by the host management agent to the host desktop hypervisor, a command to relaunch the managed virtual machine that includes the one or more updates to the user context configuration.

### Claim 9 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, further cause the at least one computing device to at least:
after relaunching the managed virtual machine, transmit a notification from the guest management agent to the host management agent over the IPC channel, the notification indicating that the command to update the user context configuration was successfully implemented.

### Claim 10 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, further cause the at least one computing device to at least:
after relaunching the managed virtual machine, transmit a notification from the guest management agent to the management service over the network connection, wherein the notification indicates that the command to update the user context configuration was successfully implemented and the management service forwards the notification to the host management agent over the network connection.

### Claim 11 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein the instructions, when executed, further cause the at least one computing device to at least:
receive, by the guest management agent, a managed virtual machine user context configuration from the management service;
transfer the managed virtual machine user context configuration from the guest management agent to the host management agent over the IP channel; and
store, by the host management agent, the managed virtual machine user context configuration on the host computing device outside of the managed virtual machine, wherein the one or more updates are implemented based on the stored managed virtual machine user context configuration.

### Claim 12 (depends on 11)

The non-transitory computer-readable medium according to claim 11, wherein the instructions, when executed, further cause the at least one computing device to at least:
delete, by the host virtual machine management agent, the managed virtual machine user context configuration once the command to update the user context configuration is implemented.

### Claim 13 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein the command to update the user context configuration of the managed virtual machine comprises at least one network location to download at least one portion of a managed virtual machine user context configuration.

### Claim 14 (depends on 8)

The non-transitory computer-readable medium according to claim 8, wherein the managed virtual machine is enrolled for management by the management service and wherein the host computing device is not enrolled for management by the management service.

### Claim 15

A system, comprising:
a host computing device; and
instructions accessible by the host computing device, wherein the instructions are executed causing the at least one computing device to at least:
execute a managed virtual machine on a host desktop hypervisor on the host computing device, the host computing device including a host operating system executing a host management agent, the managed virtual machine including a guest operating system executing a guest management agent;
receive, by the guest management agent from a management service over a network connection, a command to update a user context configuration of the managed virtual machine;
in response to receiving the command to update the user context configuration of the managed virtual machine, establish an inter-process communication (IPC) channel on the host computing device between the guest management agent and the host management agent;
transfer the command to update the user context configuration of the managed virtual machine from the guest management agent to the host management agent over the IPC channel on the host computing device;
issue, by the host management agent to the host desktop hypervisor, a command to take the managed virtual machine offline;
apply, by the host management agent, one or more updates to the user context of the offline managed virtual machine based on the command; and
issue, by the host management agent to the host desktop hypervisor, a command to relaunch the managed virtual machine that includes the one or more updates to the user context configuration.

### Claim 16 (depends on 15)

The system according to claim 15, wherein the instructions, when executed, further cause the at least one computing device to at least:
after relaunching the managed virtual machine, transmit a notification from the guest management agent to the host management agent over the IPC channel, the notification indicating that the command to update the user context configuration was successfully implemented.

### Claim 17 (depends on 15)

The system according to claim 15, wherein the instructions, when executed, further cause the at least one computing device to at least:
after relaunching the managed virtual machine, transmit a notification from the guest management agent to the management service over the network connection, wherein the notification indicates that the command to update the user context configuration was successfully implemented and the management service forwards the notification to the host management agent over the network connection.

### Claim 18 (depends on 15)

The system according to claim 15, wherein the instructions, when executed, further cause the at least one computing device to at least:
receive, by the guest management agent, a managed virtual machine user context configuration from the management service;
transfer the managed virtual machine user context configuration from the guest management agent to the host management agent over the IP channel; and
store, by the host management agent, the managed virtual machine user context configuration on the host computing device outside of the managed virtual machine, wherein the one or more updates are implemented based on the stored managed virtual machine user context configuration.

### Claim 19 (depends on 18)

The system according to claim 18, wherein the instructions, when executed, further cause the at least one computing device to at least:
delete, by the host virtual machine management agent, the managed virtual machine user context configuration once the command to update the user context configuration is implemented.

### Claim 20 (depends on 15)

The system according to claim 15, wherein the managed virtual machine is enrolled for management by the management service and wherein the host computing device is not enrolled for management by the management service.
