If you push an update from SIM HP SUM can be used (this is an option during config for the push). If you go to the server to pull an update you need the VCA. The VCA and SMH will be discontinued in favor of the ILO4 and AMS monitoring and HP SUM for updating. The VCA and SMH has had security issues as it uses open SSL.