Update 1703b for Cloud Platform System (CPS) Standard Dell Hybrid Cloud System for Microsoft Dell Engineering July 2017
Revisions Date Description July 2016 Initial release 1605 August 2016 Release 1606 August 2016 Release 1607 October 2016 Release 1608 November 2016 Release 1609 December 2016 Release 1610 January 2017 Revision of instructions for running PUDellEMC February 2017 Release 1611 March 2017 Release 1701 May 2017 Release 1703 May 2017 Release 1703a July 2017 Release 1703b Copyright © 2017 Dell Inc. All rights reserved. Dell and the Dell EMC logo are trademarks of Dell Inc.
Update 1703b for Cloud Platform System (CPS) Standard
Table of contents Revisions ............................................................................................................................................................................ 2 1 2 3 4 Overview of the Patch and Update framework ......................................................................................................... 5 1.1 New functionality ...........................................................................................................................
WARNING: You cannot run the 1703b Patch & Update framework—1.4—directly without first upgrading your environment to 1611 (1.3). You can directly upgrade to 1703b only after the DHCS stamp is at the 1.3 version, P&U 1611. Also be advised that the addition of any non-DHCS hardware to your system will cause the Patch & Update process to fail. For a workaround to this problem, see Troubleshooting the P&U process, and follow the procedures detailed in Issue 2.
1.1 New functionality Update 1703b contains the following new features: Provides support for Windows Server 2016 as an operating system for tenant VMs. (This support is provided through Windows Azure Pack UR11 and VMM UR12.) Includes an updated compliance scan implementation. Previously, a compliance scan (to verify updates were installed through P&U) would show empty results if compliant. Provides additional logging during P&U for Hyper-V Network Virtualization (HNV) settings and VMM trace logs.
"MicrosoftVersion": "1.0.1603.21000" The third value (1603 in the example) indicates the year and month of the Microsoft update package. 1.4 When to run the update package Dell recommends that the package be running during a scheduled maintenance window, or when there is low activity. There is associated downtime for the infrastructure VMs if the package installs updates that require a server restart on the VMs.
2 1703b Patch and Update Prerequisites You must do the following in order to run the P&U successfully. 2.1 Prepare the patching environment You must first prepare the environment.
2.5 Step 4: Ensure that LaJollaDeploymentService is not running in the background on the Console VM You can ensure that the service LaJollaDeploymentService is stopped by doing the following: 1. On the Console VM, open up the services MMC console that is located under Control Panel>System and Security->Administrative Tools->Services. 2. Look for LaJollaDeploymentService. 3. Ensure that Status is Stopped. 2.6 Step 5: Clean up the WSUS server To clean up the server: 1.
With this entry, P&U will skip the external SOFS and corresponding file server nodes. You are responsible for updating these servers outside of P&U.
3 1703b Patch and Update Process IMPORTANT: Be sure to follow the prerequisites listed in the previous section before you run the 1703b Patch and Update process. 3.1 Step 1: Run the 1703b DellEMC P&U package IMPORTANT: You must run the 1703b DellEMC P&U package before you run the 1703b Microsoft P&U package. Run the DellEMC P&U package by doing the following: 1.
If you see this message, close the current Windows PowerShell session, open a new elevated Windows PowerShell session, and repeat steps 2 through 4 to start the health check process. 6. DPM agents on the DPM servers are in an Enabled state. If this is the case, the health check output indicates that you must run the Set-DPMBackupMode script to cancel the jobs and disable the agents. The PowerShell output looks similar to the following screenshot: 7.
iii. iv. In the navigation pane, right-click the cluster name, point to More Actions, and then click Cluster-Aware Updating. In the ClusterName – Cluster-Aware Updating dialog box, click the Log of Updates in Progress tab to monitor what is happening. Note: After Cluster-Aware Updating (CAU) completes, you can click Generate a report on past Updating Runs to view details about what was installed through CAU.
3.2 Step 2: Run the 1703b Microsoft P&U package IMPORTANT: You must run the 1703b DellEMC P&U package before you run the 1703b Microsoft P&U package. Run the 1703b Microsoft P&U update package by doing the following: 1. Browse to the shared folder PUShare on the console VM, and create a folder to store the 1703b Microsoft update package, such as PU_MS#, where # is the number or some other identifier of the specific update package. For example, where 1703b represents the year/month: \\CON01\PUShare\
The PowerShell output looks similar to the following screenshot: 7. To cancel the jobs and disable the agents, do the following: a. From an elevated Windows PowerShell session, run the following commands. Press Enter after each command: cd \\CON01\PUShare\\PU\Framework\PatchingUpgrade" Import-Module .\PatchingUpgrade\DPM.psm1 Set-DPMBackupMode -BackupMode Disable -Credential (Get-Credential) b. When prompted, enter the account credentials of the account that you are logged on as.
In the ClusterName – Cluster-Aware Updating dialog box, click the Log of Updates in Progress tab to monitor what is happening. Note: After Cluster-Aware Updating (CAU) completes, you can click Generate a report on past Updating Runs to view details about what was installed through CAU. If you have the VMM console open, and it reconnects, patching of the VMM server may be in progress. This is expected behavior. 2.
4. If you disabled DPM agents on the DPM servers earlier, do the following to restart any canceled jobs and enable the DPM agents: a. On the Console VM, make sure that you are logged on as the account that is a member of -Setup-Admins. b. Open an elevated Windows PowerShell session, and run the following commands. Press Enter after each command. cd "\\CON01\PUShare\\PU\Framework\PatchingUpgrade" Import-Module .\PatchingUpgrade\DPM.
Also, if you do not intend to apply the 1703b Microsoft package immediately, follow the steps in the "Postupdate clean up" section of the Dell Hybrid Cloud System for Microsoft CPS Standard Administrators Guide after you have completed the update. 3.3 Run an optional compliance scan If you want to run a compliance scan, pass the following flag: \\SU1_InfrastructureShare1\Framework\PatchingUpgrade\InvokePURun.
4 Known Issues The following issue has been identified in Update 1703b for CPS Standard. 4.
5 Microsoft payload for Update 1703b 5.
5.4 5.5 5.6 5.
5.8 Other Microsoft updates (from previous updates) KB Article Description CVE Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243) CVE-2010-3190 2538243 Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64 (KB3135985) CVE-2016-0132 3135985 Security Update for Microsoft .NET Framework 3.5 on Windows 8.
KB Article Description CVE 3175024 Security Update for Windows Server 2012 R2 (KB3175024) CVE-2016-3305, CVE-2016-3306, CVE2016-3371, CVE-2016-3372, CVE-20163373 3179574 Update for Windows Server 2012 R2 (KB3179574) N/A October, 2016 Security Only Quality Update for Windows Server 2012 R2 (KB3192392) CVE-2016-3237, CVE-2016-3300, CVE2016-3267, CVE-2016-3298, CVE-20163331, CVE-2016-3382, CVE-2016-3383, CVE-2016-3384, CVE-2016-3385, CVE2016-3387, CVE-2016-3388, CVE-20163390, CVE-2016-3391, CVE-2016-
5.9 Troubleshooting the P&U process Issue 1 Symptoms: The P&U install process fails with an SMA MAX Timeout Error: Exception calling "InvokeRunbook" with "2" argument(s): "Max Timeout reached for SMA runbook 'Import-OmManagementPack'. P&U fails after a two-hour timeout waiting for the Runbook to complete. Description: SMA Service is hanging when processing runbooks for P&U, specifically the “Import-OmManagementPack” Runbook.
2. After changing these two settings, reboot the SMA VM (xxxAPA01). Issue 2 Symptoms: Exclude external host from P&U. Description: If you have added a physical host to VMM that is not part of the CPS Standard stamp—in this case the stamp includes backup infrastructure—you must exclude the host from P&U. If you do not, P&U will fail.
6 Dell EMC Payload for Update 1703b Dell Server BIOS R630/R730/R730XD Version 2.4.
Dell PERC H330 Mini/Adapter RAID Controllers firmware version 25.5.2.0001 Fixes & Enhancements Enhancements: > None > Fixed an issue where not all drives might be discovered during server power-up in servers with 26 drives installed. Disables ECRC at the PERC node to work around an issue where the server can PSOD due to a mal-formed TLP. Fixes: > Dell PERC H730/H730P/H830/FD33xS/FD33xD Mini/Adapter RAID Controllers firmware version 25.5.2.
Dell 13G PowerEdge Server Non-expander Storage Backplane Firmware Version 2.25, A00-00 Fixes & Enhancements Enhancements: > None > Addresses a problem detecting drive type for 1.8” drives.
