How to patch vmware-esxi via vcenter

Our company is using a single vmware-esxi host (vmware-esxi v6.5) which hasn’t been patched since installation. The VMs are a windows server and a vcenter appliance.

Using Update Manager I attached the baseline “critical host patches (predefined)” and many patches are listed, but it doesn’t seem possible to install them. Almost all require maintenance mode on the host.

To put the host in maintenance mode I have to power down the VMs – including vcenter!

Is it possible to patch this host via VCenter? Thanks for any ideas.