Dell™ Update Packages for Microsoft® Windows® Operating Systems User’s Guide
Notes and Cautions NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed. ____________________ Information in this document is subject to change without notice. © 2009 Dell Inc. All rights reserved. Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.
Contents 1 Getting Started With Dell Update Packages . . . . . . Overview . . . . . . . . . . . . . . 7 . . . . . . . . . . . . . . . . . . . . . . . . . 7 Server Update Utility and DUPs . Update Options . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . 9 Supported Operating Systems . Before You Begin . . . . . . . . . . . . . 10 . . . . . . . . . . . . . . . . . . . . 10 How to Obtain DUPs from the Dell Support Website . . . . . Installation Order of DUPs . . . . . . . .
2 Using Dell Update Packages . Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 . . . . . . . . . . . . . . . . . . . . . 19 . . . . . . . . . . . 19 . . . . . . . . . . . . . . . . . 20 Verifying the Digital Signature Compatibility Concerns Meeting System Prerequisites . . . . . . . . . . . 21 . . . . . . . . . . . . 21 . . . . . . . . . . . . . . 21 Effects of Applying the Updates on a Running System . . . . . . .
Typical Usage Scenarios . . . . . . . . . . . . . . . . Scenario One — Firmware Update During a Hardware Upgrade . . . . . . . . . . . . 26 . . . . . . . . . 28 . . . . . . . . . . . . . 31 . . . . . . . . . . . . . . . . . . . . . . 31 Scenario Three — BIOS Update for 200 Systems . . . . . . . . . . Command Line Interface Reference . . . . . . . . . . . Using the CLI . CLI Options . . . . . . . . . . . . . . . . . . . . . Exit Codes for CLI Sample Script 33 . . . . . . . . . . . . . . . .
A Microsoft Windows Server 2008 User Account Control . . . . . . . . . . . . . . . UAC Restrictions When Running DUPs remotely . . . . 56 . . . . . . . 59 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 B Trusted Platform Module (TPM) and BitLocker Support . . . . . . .
Getting Started With Dell Update Packages Overview Dell™ Update Packages (DUPs) allow administrators to update a wide range of system components simultaneously and apply scripts to similar sets of Dell systems to bring system software components up to the same version levels.
Likewise, updating only the miniport driver of a storage controller may also create problems. The Update Packages will now support installation of a single driver for a device as well as multiple drivers, in a single package. Each DUP contains the execution logic to verify that the update will work on your system.
installed on your system with the update components packaged on the Dell Server Updates DVD and then displays a comparison report of the versions and provides the option of updating the components. You can use SUU to update your system or view the updates available for any system listed in the repository. The Dell Server Updates DVD is available as part of the Dell OpenManage subscription service kit. You can download SUU from the Dell Support website at support.dell.com.
Figure 1-1 helps you choose between SUU and DUPs when performing updates: Figure 1-1. Choosing Between SUU and DUPs Supported Operating Systems For a complete list of supported systems and operating systems, see the Dell Systems Software Support Matrix located on the Dell Systems Management Tools and Documentation DVD or on the Dell Support website at support.dell.com.
4 Select your product family and product line. 5 Select your operating system, language, category, and the update importance. A list of applicable updates are displayed. 6 Click Download Now. 7 You can also download a different file format from the column labeled File Title. Select a file format for your DUP and single-click its filename. If you want to download more than one file type, you must do so one at a time. 8 To complete the download of your file, follow the directions on the screen.
3 Create a directory structure for performing the updates (for example, create a directory for each system type). 4 Determine a methodology for performing the updates. • Single update method: Run DUPs from the GUI in the interactive mode to perform the update. • Script method: Use this method if you have a requirement for running one or more updates from a script on a single system. See the sample scripts in "Command Line Interface Reference.
Important Tips to Remember for Using DUPs • Prepare repair disks before you perform any updates. • Download the currently installed version of drivers, BIOS, and firmware so that you have a backup plan in case any issues arise. • When you are upgrading any RAID controller software drivers, the enhanced Storage Management Service may need to be upgraded. Check the Dell OpenManage Server Administrator Compatibility Guide before proceeding. See "Other Documents You Might Need" for more information.
Non–Interactive Mode When a fresh install is applicable, executing DUPs with the /s switch installs the driver. For example, packagename.exe /s and packagename.exe /s /r does a fresh install of driver DUPs. See "CLI Options" for more information on the command syntax. NOTE: Not all driver DUPs support fresh install. See the Dell Update Packages for Microsoft Windows operating systems readme file for the list of drivers that do not support fresh install.
Other Documents You Might Need • The Dell OpenManage Server Administrator Compatibility Guide on the Dell Support website at support.dell.com, or on the Dell Systems Management Tools and Documentation DVD that came with your system. This document summarizes all Dell systems management releases that precede the current release date. NOTE: Dell Update Packages do not require Dell OpenManage Server Administrator to be installed on your system.
• The Dell OpenManage IT Assistant User’s Guide on the Dell Support website at support.dell.com or on the Dell Systems Management Tools and Documentation DVD. Dell OpenManage IT Assistant allows you to load DUPs and System Update Sets into a central repository, then compare the packages to the versions of the software currently running on your enterprise systems. You can then decide whether to update systems that are not in compliance, either immediately or according to a schedule you define.
Using Dell Update Packages Before You Begin This section is to help you get the most out of Dell™ Update Packages (DUPs). Updating the system software on your Dell systems should be a key element of your company's overall change management policies and procedures. Maintaining the system software on your Dell systems helps ensure trouble-free operation. Before you apply any update to your system, you may want to carefully plan your update strategy, based on the conditions that are necessitating the update.
Develop Your System Update Plan You may want or need to update your system for many reasons, as mentioned in the preceding section. This update requirement may be classified as either planned or unplanned. Planned updates occur as a part of your regular cycle of maintaining your systems with up-to-date BIOS, firmware, and drivers. Many IT organizations establish a regular schedule for performing the updates, which are integrated with the planned maintenance functions.
After you locate your Update Package, read the summary information to determine whether or not you should download the update and apply it to your system. You can run the Update Package on the target system and read the summary information displayed in the Update Package's interactive window. This information is provided to help you determine whether the update is appropriate for your system and your specific environment.
5 Select the signature from the signature list, and click Details. NOTE: The signature is not verified until you click Details. The Digital Signature Details window appears. 6 Read the digital signature information to verify that the digital signature is OK. 7 Click OK to close the window. Compatibility Concerns Meeting System Prerequisites DUPs are designed to confirm that all prerequisites are satisfied before applying the update to your system.
Updating Non-English Operating Systems You can use DUPs on non-English operating systems; however, DUPs are not provided in other languages at this time. Therefore, the summary information and error messages appear in English only. Support for additional languages may be provided in a future release. Effects of Applying the Updates on a Running System System Reboot Required Certain DUPs, such as those that update the system BIOS, require a reboot for the new software to take effect.
Delivering DUPs to Your Systems Using Software Distribution Applications With Update Packages Many IT organizations use internally developed or purchased software distribution applications to remotely install and update software. Update Packages have been designed to operate with any such tool, provided that the tool can remotely deliver and execute a Microsoft® Windows® application and supply that application with command line arguments.
Stand-alone Systems and Firewalls For systems that are not connected to the Internet, you need to download your DUPs from support.dell.com by using a system that does have access to the Internet, such as your desktop or portable computer. You can make DUPs available to your system by copying them onto removable media that your system supports (such as CD, USB devices, tape, and so on).
Using USC LCE, you can quickly identify, download, and apply system updates without searching the Dell Support website at support.dell.com. You can also configure your system BIOS and system devices (such as NIC, RAID, and iDRAC), deploy an operating system, and run diagnostics to validate your system and the attached hardware. NOTE: Certain platforms or systems may not support the full set of features provided by USC LCE.
USC LCE supports platform firmware rollback to the previous version. If your operating system has a non–functioning application because of a BIOS or firmware flash, reboot to USC LCE and roll back to the previous version. NOTE: Only BIOS and firmware can be rolled back. The USC LCE application, the Dell Diagnostics application, and drivers needed for operating system installation cannot be rolled back to an earlier version.
4 Locate PERC 6/E, which matches the controller type for your system. 5 Click the firmware name and then click the filename for the Update Package for Microsoft Windows in the File Formats section. 6 Click Download Now to download the Update Package to your hard drive. 7 After the Update Package has finished downloading to your system, copy the file to your system's C:\temp directory. 8 Verify the digital signature for the Update Package. You arrive on Saturday to begin the upgrade process.
To prepare the system to run the company's new financial software, you perform the following general steps: 1 Use the Dell Systems Management Tools and Documentation DVD that came with the Dell system to install the most current version of the Windows Server 2003 operating system. NOTE: The Dell OpenManage systems management software kit is now available on a single DVD titled Dell Systems Management Tools and Documentation. 2 Log on to support.dell.com.
9 Analyze the log file, verify that the packages installed successfully, and note that the system has rebooted. 10 Install Server Administrator. At this point, the Dell system is running the most current operating system and the system BIOS, system firmware, RAID controller's firmware, and drivers are up–to–date. You are now ready to install the financial application for your division. Scenario Three — BIOS Update for 200 Systems You are the systems administrator for a large business with over 500 stores.
5 Use the software distribution tool to create an update task that delivers the BIOS DUP to all the systems in the network. The update task is simply a batch command that invokes the BIOS DUP and uses the CLI /r /s options to ensure that the system is rebooted when it is necessary. This BIOS DUP runs only on the specified Dell systems; therefore, you can distribute it to all the systems regardless of the system model type. The DUP does not affect other systems.
Using Dell Update Packages
Command Line Interface Reference Using the CLI This section provides information for using the command line interface (CLI) for Dell™ Update Packages (DUPs). CLI Options You can display information about CLI options by typing the DUP name and either /? or /h at a command line prompt. For example, type the following command to get a help screen about the CLI options: PE2850-BIOS-WIN-A02.exe /? Table 3-1 provides a list of the CLI options, a description of each option, and the command syntax.
Table 3-1. CLI Options: Usage (continued) CLI Option CLI Task Description Command Syntax /e= Extracts all files contained in the DUP to the path you specify. If the directory specified in the path does not exist, it is created. packagename.exe /s /e=c:\update Extract option packagename.exe /s /e="c:\update If the path contains spaces, use quotation files" marks around the value. The /s option is required with this option. Options /f, /c, and /r are not valid with this option.
Table 3-1. CLI Options: Usage (continued) CLI Option CLI Task Description Command Syntax /s Executes the update silently without user intervention. When /s is not specified, the DUP is launched in GUI (interactive) mode. packagename.exe /s /l=c:\pkg.log Silent option The /s option is required when using the /e, /f, /c, /l, and /u options. NOTE: Using the /s option causes all output to be written to log files.
Table 3-2. Exit Codes (continued) Value Message Name Description 3 DEP_SOFT_ERROR Some possible explanations are: • You attempted to update to the same version of the software. • You tried to downgrade to a previous version of the software. To avoid receiving this error, provide the /f option. 4 DEP_HARD_ERROR The required prerequisite software was not found on your system.
Sample Script The following example shows how you can use scripts to run DUPs. The Update.bat script is an example of updating the BIOS and ESM firmware on a Dell system. The execution results are placed in a log file named PE2600.log. Text that represents the exit codes from the execution of each package is also placed in the file. You may want to handle some of the exit codes differently in the scripts you write. This script assumes that DUPs have already been downloaded to a folder on the target system.
if %ExitCode% >>%LOG% if %ExitCode% >>%LOG% if %ExitCode% >>%LOG% if %ExitCode% >>%LOG% 36 EQU 3 echo Result: DEP_SOFT_ERROR EQU 4 echo Result: DEP_HARD_ERROR EQU 5 echo Result: QUAL_HARD_ERROR EQU 6 echo Result: REBOOTING_SYSTEM Command Line Interface Reference
Troubleshooting Messages Table 4-1 provides descriptions and solutions to messages that you may receive when running Dell™ Update Packages (DUPs). NOTE: The Readme.txt file, which is available on the Dell Support website at support.dell.com, provides the latest information regarding known issues. Table 4-1. Update Packages: Message Information Message Description/Solution This Update Package is not compatible with your system.
Table 4-1. Update Packages: Message Information (continued) Message Description/Solution Your system does not have the minimum operating system version or service pack required for this Update Package. The DUP you selected cannot be installed because the minimum operating system version or service pack requirements were not met. Install the appropriate version, and try the update again. Or, use an alternate update method on support.dell.com.
Table 4-1. Update Packages: Message Information (continued) Message Description/Solution This message confirms the version of the The version of this Update Package is newer currently installed software before the update is performed. than the currently installed version. Software application name: Package version: Installed version: The version of this Update Package is older than the currently installed version.
Table 4-1. Update Packages: Message Information (continued) Message Description/Solution Log in with Administrator privileges, and try Administrator privileges are required the update again. to perform this update. You must reboot the system for the update to take effect. If you shut down or power off the system after performing an update, you will lose the update. An Update Package is already running. Wait until it is complete before proceeding with another update.
Package Log Use the Package log to view and analyze various events and errors that may have occurred during the package installation. The Package log file resides in the following default location: C:\dell\updatepackage\log\packagename.txt where C: is your system drive and packagename is the name of the DUP that you installed. This log is encoded in Unicode, which supports localized systems.
The system should be restarted for the update to take effect. =================> Update Result <================= Update ready to be applied at reboot Application: BIOS Previous version: A19 New version: A21 ===================================================== Exit code = 2 (Reboot required) 2006-11-09 10:23:11 Support Log Use the Support log to view and analyze execution details that have occurred during the package installation.
<< SEZ >>Creating temp folder: C:\Temp\PE2850_BIOS_WIN_A06 << PACKAGE LOG (SEZ) >>All files extracted OK << PACKAGE LOG >>Release ID: R136644 << PACKAGE LOG >>Update Package version: 5.3.0 (BLD_31) Command Line: /f /s /l=C:\WINDOWS\TEMP\5000012.dup /packagename="PE2850_BIOS_WIN_A06.EXE" /supportlogdir="C:\Dell\UpdatePackage\log" /currentpath="C:\WINDOWS\system32" << PACKAGE LOG >>User: SYSTEM Package source: C:\Temp\PE2850_BIOS_WIN_A06\SPSETUP.exe << PACKAGE LOG >>Collecting inventory...
version="A04" display="BIOS" >The version of this Update Package is newer than the currently installed version. Software application name: BIOS Package version: A06 Installed version: A041 << PACKAGE LOG >>The version of this Update Package is newer than the currently installed version.
=====<< PACKAGE LOG >>=====> Update Result <======= Update ready to be applied at reboot << PACKAGE LOG >>Application: BIOS Previous version: A04 New version: A06 ================<< PACKAGE LOG >>==================== Error code before being mapped: 0002 << PACKAGE LOG >>Exit code = 2 (Reboot required) ? PAGE 46 PAGE 47Read over the release information presented in the dialog window. Download and install any prerequisites identified in the dialog window before proceeding. If this is a BIOS update package, install any necessary Embedded Systems Management firmware prior to this BIOS update. Otherwise, go next step. Click the Install button. Follow the remaining prompts to perform the update.
Windows SEL Entry Example The following is an example of an informational message in the SEL that you may view after a successful DUP execution. ===================================================== Update successful Package: PE1850-BIOS-WIN-A01.exe Description: Dell Server System BIOS, A01 Previous version: A00, New version: A01 Log file: C:\Dell\UpdatePackage\log\PE1850-BIOS-WINA01.
Troubleshooting
Frequently Asked Questions Question: Must I reboot my system after applying every Dell™ Update Package (DUP)? Answer: DUPs that are running in the interactive mode determine if it is necessary to reboot your system. If so, you are prompted to reboot. In the silent unattended mode, the exit code is set to 2, which indicates that a system restart is required.
Question: I'm using a software distribution tool to deploy my applications or operating system updates to my remote servers. Can I use DUPs with this tool to remotely update my servers? Answer: DUPs are designed to work with most software distribution tools. See the documentation for your tool for more information.
Question: I'd like to apply several updates to my system at once. Can I do this with DUPs? Do I need to be concerned about the order in which I apply the updates? Answer: Yes, you can apply multiple updates to your system at the same time. See the "Scenario Two — Retasking a System" section for more information. The installation order is very important. See Table 1-1 for information about the update order. Question: If I rename Windows DUPs, will they still function correctly? Answer: Yes.
Question: Why does my system only execute one of the CLI options that I entered in a command string? Answer: Only certain CLI options can be used simultaneously. When invalid combinations of CLI options are entered in a single command string, only the option with the highest priority is executed. See Table 3-1 for details on which commands can be used together.
Microsoft Windows Server 2008 User Account Control In previous versions of Windows®, user accounts were often members of the local Administrators group and had access to administrator privileges. Members of the local Administrators group could install, update, and run software since an Administrator account has system-wide access. When a user was added to the local Administrators group, that user was automatically granted every Windows privilege.
UAC prompts users in the Domain Administrators group (except the Administrator account) to click Continue, if they need to elevate privileges, or to click Cancel when performing functions that may entail a security risk. With UAC, users have to upgrade to an Administrator account before running DUPs. NOTE: Since the user experience is configurable with the Security Policy Manager snap-in (secpol.msc) and with Group Policy, there are multiple UAC user experiences.
• Disabling UAC for all users on remote machines (not a recommended option). • Not upgrading to Administrator account on remote machines. NOTE: Only two accounts (the Local Administrator Account and the Local System Account) are not protected by UAC. All other users including accounts with local administrator rights or domain administrator rights have UAC enabled by default. Even though UAC can be disabled by updating the local or domain security policy, it is not recommended.
Microsoft Windows Server 2008 User Account Control
Trusted Platform Module (TPM) and BitLocker Support A TPM is a secure microcontroller with cryptographic capabilities designed to provide basic security-related functions involving encryption keys. It is installed on the motherboard of your system, and communicates with the rest of the system using a hardware bus. You can establish ownership of your system and its TPM through BIOS setup commands. TPM stores the platform configuration as a set of values in a set of Platform Configuration Registers (PCRs).
BitLocker is designed for systems that have a compatible TPM microchip and BIOS. A compatible TPM is defined as a version 1.2 TPM. A compatible BIOS supports the TPM and the Static Root of Trust Measurement. BitLocker seals the master encryption key in the TPM and only allows the key to be released when code measurements have not changed from a previous secure boot. It forces you to provide a recovery key to continue boot if any measurements have changed.
Glossary The following list defines or identifies technical terms, abbreviations, and acronyms used in this guide. ASCII Acronym for American Standard Code for Information Interchange. A text file containing only characters from the ASCII character set (usually created with a text editor, such as Notepad in Microsoft® Windows®), is called an ASCII file. BIOS Acronym for basic input/output system. Your system's BIOS contains programs stored on a flash memory chip.
device driver A program that allows the operating system or some other program to interface correctly with a peripheral device, such as a printer. Some device drivers—such as network drivers—must be loaded from the config.sys file (with a device= statement) or as memory-resident programs (usually from the autoexec.bat file). Others—such as video drivers—must load when you start the program for which they were designed.
Interactive mode The method by which you can install DUPs interactively through a GUI. IPMI Acronym for Intelligent Platform Management Interface. The Intelligent Platform Management Interface (IPMI) specification defines a set of common interfaces to computer hardware and firmware, which system administrators can utilize to monitor the system health and manage the system. ITA Acronym for Dell OpenManage IT Assistant.
SUU Acronym for Dell OpenManage Server Update Utility. SUU is one of the applications used for identifying and applying updates to your system. You can use SUU to update your Dell system or to view the updates available for any system supported by SUU. SUU compares the versions of components currently installed on your system with update components packaged on the Dell Server Updates DVD. It then displays a comparison report of the versions and provides the option of updating the components.
Index B D BIOS update for 200 systems usage scenario, 28 default log file location, 11, 20 BitLocker, 59 C delivering Update Packages to your systems, 22 Dell File Watch update notification service, 18, 28 Catalog.
M message logs for Update Packages, 40 multiple drivers, 8 O obtaining Update Packages, 10 P specifying order of multiple updates, 21 strategy for running Update Packages, 12 Support log, 42 log file example, 42 system reboot required after installing some Update Packages, 21 T Package log, 41 default location, 41 log file example, 41 Platform Configuration Registers, 59 terminal mode commands, 59 troubleshooting Update Packages messages, 37 Trusted Platform Module, 59 Typical Usage Scenarios, 25 R r
Update Packages acquiring, 18 before you begin, 17 CLI mode, 31 CLI options, 20 CLI reference information, 31 delivering to your systems, 22 executing, 19 how to obtain, 10 information provided about updates, 11 message logs, 40 overview, 7 remote terminal sessions, 22 resolving compatibility concerns, 20 sample script, 35 silent/unattended mode, 23 some require system reboot, 21 stand-alone systems, 23 supported devices, 52 supported installation order of Update Packages, 12 supported order of installation
Index
