Dell Hybrid Cloud System for Microsoft Cloud Platform System (CPS) Standard Version 1.5.
Revisions Date July 2016 August 2016 August 2016 October 2016 November 2016 December 2016 January 2017 February 2017 March 2017 May 2017 May 2017 June 2017 August 2017 September 2017 October 2017 November 2017 January 2018 January 2018 March 2018 April 2018 May 2018 June 2018 July 2018 August 2018 September 2018 October 2018 November 2018 December 2018 January 2019 March 2019 April 2019 April 2019 June 2019 January 2020 March 2020 June 2020 Description Initial release 1605 Release 1606 Release 1607 Release
Table of contents Revisions ........................................................................................................................................................................ 2 Overview of the Patch and Update framework ................................................................................................................ 4 Update 2003—Summary........................................................................................................................................
Overview of the Patch and Update framework The Dell Hybrid Cloud System for Microsoft includes the Patch and Update (P&U) framework. This framework enables you to easily update the infrastructure components of the Dell Hybrid Cloud System for Microsoft stamp with minimal or no disruption to tenant workloads. The framework automates the installation of software, driver, and firmware updates on the physical hosts and the infrastructure VMs. Note: The P&U framework does not update tenant VMs.
Update 2003—Summary Update 2003 for CPS Standard includes updates for Windows Server. This update includes the following components: • 2003 update. This is the main package. It can contain Windows Server, System Center, and SQL Server updates. (See payload details in Appendix A.) IMPORTANT: Update 1905 is a prerequisite for installing this update. IMPORTANT: The OEM OOB (Out-of-Band Management) web interface may not work correctly after applying P&U 1706 (or higher).
4. Open a browser on the laptop or external host and enter the iDRAC IP of one of the file server cluster hosts. 5. Enter the credentials to log in to the file server cluster host iDRAC. session.
6. In the left-hand panel, navigate to Overview > Storage > Physical Disks. Make sure you can see the hard drives on JBODs here. You should be able to see the SSDs you are about to update firmware on. 7. In the left-hand panel, navigate to Overview > iDRAC Settings > Update and Rollback. 8. Click on Browse. Go to the laptop or external host, select the DUP that is downloaded on step 1, and click Open. Click on Upload.
9. In the Update Details window, select the check mark to select the DUP. Click on Install and Reboot. 10. A System Alert window displays. Click on Job Queue to open the Job Queue window. 11. Update jobs will start. Wait until all the firmware update related jobs are completed successfully.
12. In the left-hand panel, navigate to Overview > Storage > Physical Disks. Make sure the SSDs are update with D417 firmware. 13. Once everything is completed, you can bring the stamp and cluster up. Steps on how to start up the stamp can be found in the DHCS Administrator Guide. Contact Dell EMC Support if you have any issues or failures. If the drive has already failed due to this issue or additional help is required, please contact Dell EMC Support.
How to check which update package is installed To check the version of the update package that is currently installed on the stamp, do the following: 1. On the Console VM, open the DeploymentManifest.xml file at the path: C:\Program Files\Microsoft Cloud Solutions\DeployDriver\Manifests. 2. At the top of the file, look for the following entries: • • “Version=”: This is the version of the Dell-provided update package.
2003 Patch and Update Prerequisites You must do the following in order to run the P&U successfully. Prepare the patching environment You must first prepare the environment. To do this, you verify that you have an account that has the required permissions to run the framework, extract the P&U package to the correct share on the stamp, and verify that Group Policy settings will not block any driver updates by blocking the mounting of USB virtual disks (if the package contains firmware/driver updates).
Step 4: Ensure that LaJollaDeploymentService is not running in the background on the Console VM You can ensure that the service LaJollaDeploymentService is stopped by doing the following: 1. On the Console VM, open up the services MMC console that is located under Control Panel>System and Security->Administrative Tools->Services. 2. Look for LaJollaDeploymentService. 3. Ensure that Status is Stopped.
Step 6: (Optional): Exclude external SOFS storage clusters from P&U IMPORTANT: This procedure applies only if you attached external Scale-Out File Server (SOFS) storage clusters to the CPS Standard stamp. If you attached external Scale-Out-File-Server (SOFS) storage clusters to the CPS Standard stamp (for additional workload capacity), you must exclude them from P&U. If you do not, P&U will fail. To exclude external storage clusters, do the following: 1. Open the VMM console. 2.
2003 Patch and Update Process IMPORTANT: Be sure to follow the prerequisites listed in the previous section before you run the 2003 Patch and Update process. You must first prepare the environment. This section covers the preparation steps. In the "Update the computers" section of the CPS Standard Administrators Guide, complete "Step 1: Restart the Console VM" and "Step 2: Run a health check and fix any discovered issues." This includes functionality to check for and disable any running backup jobs.
\\CON01\PUShare\PU_DellEMC2003\PU\Framework\PatchingUpgrade\InvokePURun .ps1 -PUCredential (Get-Credential) -ScomAlertAction "Continue" 4. When prompted, enter the account credentials of the account that you used to log into the ConsoleVM. 5. The Invoke-PURun script performs a one-time environment setup and may prompt you to restart Windows PowerShell on its for invocation, for example: PowerShell environment settings have changed. Please restart the PowerShell console before proceeding.
update for a while. You can use the following steps to view the progress of cluster updates in Failover Cluster Manager. i. Open Failover Cluster Manager. ii. Connect to the cluster. a. In the navigation pane, right-click Failover Cluster Manager, and then click Connect to Cluster. b. In the Select Cluster dialog box, click Browse. c. Click the desired cluster, and then click OK two times. iii.
Step 2: Upgrade the Intel NIC Driver IMPORTANT: You must manually upgrade the NIC driver on all your physical servers. Failure to do so could result in Blue Screen of Death Errors. 1. Extract the NIC driver from the zip package a. Unzip the NIC drivers from the file Network_Driver_M1P35_WN64_18.8.0_A00_01.zip which is located in the folder C:\PUShare\DellEMC2003\Payload\PatchingUpdates\DellUpdate\CAUHotfix_All\Binaries to the folder C:\PUShare\NIC 2. Replicate the Intel NIC drivers to all the servers a.
d. Verify that the driver was successfully updated i. Go back to the PowerShell window and run the following commands: ii. Enter-PSSession C iii. Get-WmiObject Win32_PnPSignedDriver | Select-Object -Property devicename, driverversion | Where devicename -like 'Intel(R) Ethernet*' Note: The driver version should now be 3.14.78.0 e. Repeat steps a through d on every Compute cluster node in the stamp. 4. Upgrade the Intel NIC Driver on the File Servers a.
Step 3: Run the 2003 Microsoft P&U package (DHCS_Update_2003_Run_Second) IMPORTANT: You must run the DHCS_Update_2003_Run_First package before you run the 2003 Microsoft P&U package (DHCS_Update_2003_Run_Second). Because of the size of this package, estimates for deployment duration are 12 to 18 hours. Run the 2003 Microsoft P&U update package by doing the following: 1.
6. DPM agents on the DPM servers are in an enabled state. If this is the case, the health check output indicates that you must run the Set-DPMBackupMode script to cancel the jobs and disable the agents. The PowerShell output looks similar to the following screenshot: 7. To cancel the jobs and disable the agents, do the following: a. From an elevated Windows PowerShell session, run the following commands. Press Enter after each command: cd \\CON01\PUShare\\PU\Framework\PatchingUpg
In the ClusterName – Cluster-Aware Updating dialog box, click the Log of Updates in Progress tab to monitor what is happening. Note: After Cluster-Aware Updating (CAU) completes, you can click Generate a report on past Updating Runs to view details about what was installed through CAU. iv. • If you have the VMM console open, and it reconnects, patching of the VMM server may be in progress. This is expected behavior. 2.
4. If you disabled DPM agents on the DPM servers earlier, do the following to restart any canceled jobs and enable the DPM agents: a. On the Console VM, make sure that you are logged on as the account that is a member of -Setup-Admins. b. Open an elevated Windows PowerShell session, and run the following commands. Press Enter after each command. cd "\\CON01\PUShare\\PU\Framework\PatchingUpgrade" Import-Module .\PatchingUpgrade\DPM.
Run an optional compliance scan If you want to run a compliance scan, pass the following flag: \\SU1_InfrastructureShare1\Framework\PatchingUpgrade\InvokePURun.ps1 -PUCredential $cred -ComplianceScanOnly The compliance scan output is written to the following location, the place where the update package was extracted. For example, the following shows output written to: "PURoot"\MissingUpdates.
2. Verify that the SMA MPs are updated in the SCOM Operations Console a. In the Management Pack list (Administration | Management Packs) verify the version of these files has been updated to 7.2.102.0 b. The updated MPs should show with the names of “Microsoft System Center Service Management Automation Library”, “Microsoft System Center Service Management Automation Dashboards”, and “Microsoft System Center 2012 R2 Service Management Automation”. The version should be 7.2.102.
IMPORTANT: We recommend that you leave the latest update package in the PUShare in case diagnostics or debugging is needed. Also, do not remove the artifacts that were created during patching; for example, the VMM artifacts such as custom resources, and any associated log files, Windows Installer packages (.msi files), or patch files (.msp files).
Microsoft payload for Update 2003 Payload for Update 2003 Update Details KB Number 890830 4535104 4537759 4541509 26 Title Windows Malicious Software Removal Tool x64 March 2020 2020-01 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.
Troubleshooting the P&U process Issue 1 Symptoms: The P&U install process fails with an SMA MAX Timeout Error: Exception calling "InvokeRunbook" with "2" argument(s): "Max Timeout reached for SMA runbook 'Import-OmManagementPack'. P&U fails after a two-hour timeout waiting for the Runbook to complete. Description: SMA Service is hanging when processing runbooks for P&U, specifically the “Import-OmManagementPack” Runbook.
Issue 2 Symptoms: The P&U process updates the console, including reboots, but does not finish final P&U processing. Description: This can include examining the Deployment Manifest and running compliance checks. Detection: Run the following script (updating the $prefix variable before running with the prefix of your stamp) $prefix = "" (Get-SmaVariable -WebServiceEndpoint ("https://{0}APA01" -f $prefix) -Name PUSubsystemVersions).Value If any of the values for “MicrosoftVersion” are not "1.0.2003.
Detection: 1. Open Failover Cluster Manager. 2. Right-click on the CCL cluster and choose More Actions, and then choose Cluster-Aware Updating. 3. Once the Cluster-Aware Updating dialog opens, select Analyze cluster updating readiness.
4. The analyzer runs for a minute or two, and then shows you the results, as illustrated by the following graphic: Under the Title “A firewall rule that allows remote shutdown should be enabled on each node in the failover cluster” you should see a green ‘Passed’ result. If there are any compute nodes that are members of this CCL cluster listed as having failed this test, you have run into this issue. Resolution: Reboot the affected nodes.
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384_P384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA25 6_P256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P2 56" 2. Reboot the console VM after deleting the “Functions” value, which will return the Console VM to the default Windows cipher suites.
Dell EMC payload for Update 2003 Dell EMC Update 2003 for CPS Standard includes the following driver and firmware updates: WARNING: Once the Intel NIC firmware is updated to 18.8.x, do not downgrade to previous A-Rev versions below 18.8.x. WARNING: Do not turn off your computer or disconnect your power source while updating the BIOS or you may harm your computer. During the update, your computer will restart and you will briefly see a black screen. • Dell Server PowerEdge BIOS R630/R730/R730XD Version 2.
- Fixed an issue with iDRAC firmware update from the OS failing with an error about virtual device being unreachable because of BitLocker or other security software - Fixed an issue with repository update job displaying as failed in the job queue eventhough all firmware updates that are included in the repository are successful - Fixed an issue with firmware update failing when only IPv6 address is provided in Lifecycle Controller GUI - Fixed an issue with Firmware update using the action Simple Update with
• Dell PERC H330 Mini/Adapter RAID Controllers firmware version 25.5.5.0005 Fixes & Enhancements o Fixes -Fixed an issue where congested "I2C 4 PID 10 TIMEOUT but stop sent!" PERC debug TTY log events are reported in 14G server systems.
o o • Intel NIC Family Version 18.8.0 Drivers for Windows 64-bit Operating Systems Fixes & Enhancements o o • o Fixes - Removal of unnecessary debug prints - Optimization of storport calls, resulting in reduced Windows log activity in the RTTRACE log - Fixed an issue where a removed SATA drive might remain visible to Windows for up to five minutes Enhancements - NA Dell 12Gbps HBA firmware version 16.17.00.
o 36 rebooted Improved device error recovery logic.
