Sign in
Microsoft.com
 
Resources for IT Professionals
 
 
 
Resources for IT Professionals > Forums Home > Windows HPC (High Performance Computing) Forums > Windows HPC Server Deployment, Management, and Administration > Pending software updates failure
Ask a questionAsk a question
Search Forums:
 

AnswerPending software updates failure

  • Wednesday, November 04, 2009 9:15 PMelansey Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Our compute nodes are on a private, firewalled network.  Only our head node and other compute nodes can access the compute nodes.  The head node can access anything. When I run the diagnostics, I get the following failure:
    Windows update failed to find updates. Exception from HRESULT: 0x80072EFD -2147012867
    I followed the instructions to set up a winhttp proxy, and running netsh winhttp show proxy on each compute node gives
    Current WinHTTP proxy settings:
        Proxy Server(s) :  masternode
        Bypass List     :  (none)
    masternode is our head node.
    Ideally I'd like to "broadcast" Windows Updates (and potentially other software updates) to the compute nodes from the head node.
    Any suggestions?
    TIA
     

Answers

  • Tuesday, November 10, 2009 3:08 PMJohannes_de Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    suggestion A would be to enable NAT on the headnode and limit it to the Microsoft Update Website and Servers. I don't know whether the latter is possible or feasible to you since you stress that the nodes are firewalled and you wanna keep it that way, I suppose.

    B: You can set up a WSUS and deploy the updates from there.

    C: Download and install updates by hand  and/or scripts.

    Summing up there is no built in feature of HPC2008 that enables you to deploy patches to the cluster in a centralized manner, WSUS does that. (IMHO)

    Regards,

    Johannes
    JH
    • Marked As Answer byelansey Tuesday, November 10, 2009 4:05 PM
    •  
     

All Replies

  • Friday, November 06, 2009 4:33 AMMike R [MSFT] Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    See if Method E of the following article is able to help you out...

    http://support.microsoft.com/?id=836941

    Regards,
    Mike R.
     
  • Monday, November 09, 2009 2:20 PMelansey Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    That was already the configuration.  Again, the compute nodes are behind a firewall, only the head node can access Microsoft's website.
    Any other suggestions?
     
  • Tuesday, November 10, 2009 3:08 PMJohannes_de Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    suggestion A would be to enable NAT on the headnode and limit it to the Microsoft Update Website and Servers. I don't know whether the latter is possible or feasible to you since you stress that the nodes are firewalled and you wanna keep it that way, I suppose.

    B: You can set up a WSUS and deploy the updates from there.

    C: Download and install updates by hand  and/or scripts.

    Summing up there is no built in feature of HPC2008 that enables you to deploy patches to the cluster in a centralized manner, WSUS does that. (IMHO)

    Regards,

    Johannes
    JH
    • Marked As Answer byelansey Tuesday, November 10, 2009 4:05 PM
    •  
     
  • Tuesday, November 10, 2009 3:34 PMelansey Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    We can't take them out from behind the firewall (as per our school's networking guy's request).

    If I update the nodes using WSUS will the HPC diagnostics no longer fail?  Or does the diagnostic require that nodes can access to the internet?
    [Update: Read a bit more into WSUS - looks like this should work.  Thanks!]

    Thanks!
     
  • Tuesday, November 10, 2009 4:08 PMJohannes_de Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    You're welcome.

    This should work as you can set WSUS as the default update site to query in your domain via some GP settings. At least for 2008 thats possible/necessary.

    JH