Hyper-V.nu event 16-04-2013 - Cluster Aware Updating by Maarten Wijsman

1. #hypervnu
Cluster-Aware Updating
Maarten Wijsman
Wortell | maarten.wijsman@wortell.nl | www.hyper-v.nu | @myhyper & @hypervnu

2. about the speaker
• Engineer @ Wortell
• Focus on:
• System Center Virtual Machine Manager
• System Center AppController
• Server virtualization
• Blog: www.hyper-v.nu | blogs.wortell.nl
• Twitter: @myhyperv | @hypervnu
• Mail: maarten.wijsman@wortell.nl

3. Cluster Aware Updating (CAU)
Update orchestration across all nodes in a cluster
• Windows Server 2012 only & available in the box
• No intended to reinvent Windows Updating & Patching
• Ability to preview, apply & reports on updates for a cluster
Two modes: Self-updating & Remote-updating
• Workload reduction through increased automation > Self-updating
• Needed where closer administrator attention is preferred or warranted > Remote-updating
Extensible
• Integrate with your patching tools with plug-ins (API)
• Two inbox plug-ins: Windows Update & hotfix plug-in
• Per-node pre-update and post-update scripts

4. Where to put CAU?
Windows Update Services

5. Plug-ins & Supported Update Types
CAU ships with two plug-ins
1. Windows Update Plug-in
• Installs GDRs* => From Windows Update Or WSUS
2. Hotfix Plug-in
• Installs QFEs** from a SMB 3.0 file share
• 3rd party updates such as BIOS & Firmware Updates
from a SMB 3.0 File Share
*GDR = General Distribution Release | **QFE = Quick Fix Engineering (nickname for hotfix)

6. CAU overview
Microsoft Update Services
Windows Server 2012
You, Cluster Admin (RSAT) File Server (SMB 3.0) Dedicated WSUS server
Windows Server 2012 Hyper-V clusters | nodes 1 - 64

7. 1. Moves thetorestart if of updated the node same process
2. Places the node nextnecessary into maintenance mode
6. Restores a clustered roles off complete the
4. Performsthethe out updateson node being updated
5. Brings the required node to the mode
7. Proceeds
3. Installs being maintenance
clustered roles
Cluster Aware Updating Process
Microsoft Update Services
Windows Server 2012
You, Cluster Admin (RSAT) File Server (SMB 3.0) Dedicated WSUS server
Windows Server 2012 Failover Cluster

8. Self-Updating Mode
Microsoft Update Services
Windows Server 2012
You, Cluster Admin (RSAT) File Server (SMB 3.0) Dedicated WSUS server
CAU UC
Windows Server 2012 Failover Cluster

9. Remote-Updating Mode
Microsoft Update Services
CAU UC
Windows Server 2012
You, Cluster Admin (RSAT) File Server (SMB 3.0) Dedicated WSUS server
Windows Server 2012 Failover Cluster

10. DEMO

11. Hotfixes Folder CAU Hotfix Root Folder
Structure & Security CAUHotfix_All
Hotfixes applicable to all nodes
DefaultHotfixConfig.xml MySwUpdateType
Special software updates
<ExtensionRules>
<Extension name="MSI"> < Node Name 1 >
<Extension name="MSU"> Hotfixes applicable to < Node Name 1 >
<Extension name="MSP"> MySwUpdateType
Special software updates
<FolderRules>
<Folder name="MySwUpdateType" alwaysReboot="true"> < Node Name N >
Hotfixes applicable to < Node Name N >
MySwUpdateType
Special software updates

12. “Hotfix” Support Internals
• Rich/extensible Hotfix installation
– Microsoft QFEs, or third-party driver updates, or even Firmware/BIOS updates…
• Select hotfix behavior at start. Two key inputs:
1. Root Folder: on an SMB File Share
2. Configuration xml file: defines the Rules
System32WindowsPowerShellv1.0ModulesClusterAwareUpdatingDefaultHotfixConfig.xml
• Configuration Rules are the key to flexibility
– Easy to specify new Rules
» hotfix installer name, install options, reboot behavior, return values etc.

15. NTFS permissions CAUFile SHARE
• First you’ll need to do your home work as described in the TechNet
article
• But that doesn’t quite cover it
• Adjust NTFS Permissions on the CAU Share
– Give cluster node computer accounts (or an AD group containing them, which
makes for easier administration) Read/Execute permission to the location
– If Not => they can’t run the DUPs.

17. NTFS permissions Log File
• DUPs allows logging with /L switch
• Locally (per node) or to central share
• Must use another share than the CAU Share:
– Need to give the computer accounts (or an AD group containing them, which makes for easier
administration) write permission to the location
– You’re not allowed to do that for other then specific accounts as described on TechNet
• The log can grow quite large if used a lot
– Keep an eye on it
– For clarities sake use different log per cluster or folder type

19. CAU Hotfix plug-in in action

21. Links
Cluster-Aware Updating Overview
• http://technet.microsoft.com/en-us/library/hh831694.aspx
Cluster-Aware Updating Cmdlets in Windows PowerShell
• http://technet.microsoft.com/en-us/library/hh847221.aspx
Starting with Cluster-Aware Updating: Self-Updating
• http://blogs.technet.com/b/filecab/archive/2012/05/17/starting-with-cluster-aware-updating-self-updating.aspx
Update Dell Servers with Microsoft Windows Server 2012 Cluster Aware Update by Integrating SUU/DUP
• http://en.community.dell.com/techcenter/extras/m/white_papers/20217029.aspx
Troubleshoot CAU: Log Files for Cluster-Aware Updating
• http://social.technet.microsoft.com/wiki/contents/articles/13414.troubleshoot-cau-log-files-for-cluster-aware-updating.aspx

22. #hypervnu
Questions & Answers

23. Many, many thanks to: