BRK3396 Updating and servicing Microsoft Azure Stack 4/16/2018 9:59 PM BRK3396 Updating and servicing Microsoft Azure Stack Justin Incarnato Principal Program Manager, Azure Stack @justininc aka.ms/azurestackupdate © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Agenda Hello and good morning Problem space What we built Managing updates Looking ahead, more information Show me

4/16/2018 9:59 PM Problem space © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/16/2018 9:59 PM Security is paramount Keeping it functional, adding functionality (Azure umbilical) What to install, how to install Where to download, what to download Who to call if there is a problem Ensuring business continuity for applications and services One package, one signature = Focus on other aspects of the business © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/16/2018 9:59 PM What we built © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/16/2018 9:59 PM Built-in, dependency-aware orchestration engine updates physical hosts, infrastructure VMs, Service Fabric & microservice applications, control plane No outside tooling or integration required Supports disconnected mode Operators determine maintenance windows & update installation time © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/16/2018 9:59 PM Microsoft managed software updates driven by Update resource provider, signed by Microsoft Cloud health checks, maintenance mode, live migration, storage rebalance and VD health, evacuate maintenance mode OEM managed driver updates driven by Update resource provider, signed by Microsoft Firmware updates managed by the OEM Hardware Lifecycle host (HLH) © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Managing updates 4/16/2018 9:59 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Download and import update packages (OEM notification, Microsoft notification) Review important properties (publisher, name, state, size, prerequisites, support URL) Talk to your customers & set appropriate maintenance window (payload, workloads) Install update and monitor update progress Repeat Note: 3 month deferral policy, extends “sequential” maintenance

Azure Stack Infrastructure Administration https://github.com/Azure/AzureStack-Tools/tree/master/Infrastructure Get-AzsUpdateLocation Retrieves Region Update Summary Get-AzsUpdate List Azure Stack Updates Install-AzsUpdate -Update “Update Version” Applies specified Update Get-AzsUpdateRun -Update “Update Version” Lists Update Run information for a specific Azure Stack update

Update package composition <Ingest through blob service> PUPackageRelease_20170922.1.exe, PUPackageRelease_20170922.1-1.bin, metadata.xml \AzureStackPack\ Package\ LCU\ <Windows KB>.cab <- 1.2GB N\ <Application>.nupkg <- 700MB CustomActionPlan.xml Metadata.xml

Metadata.xml <?xml version="1.0" encoding="utf-8" standalone="yes"?> <UpdatePackageManifest> <UpdateInfo> <UpdateName>MAS - 1.0.170922.1</UpdateName> <Version>1.0.170922.1</Version> <PackageSizeInMb>1842</PackageSizeInMb> <Description>MAS Update 1.0.170922.1</Description> <KBLink>https://aka.ms/azurestackupdate</KBLink> <MinVersionRequired>1.0.170828.1</MinVersionRequired> </UpdateInfo> </UpdatePackageManifest>

Updatelogs_<GUID>.json name : PreUpdate Cloud name         : Update SeedRing SF Runtime name         : Update SeedRing ECE name         : Update SeedRing SF Runtime name         : PreUpdate OEM. name         : (DEP) Generate base images for hosts and virtual machines. name         : (DEP) Generate host image. name         : Update OEM S2D whitelist. name         : Install Update. name         : Update Node Sets name         : Update SeedRing IBC name         : Restart Storage Hosts name         : Restart CA. name         : Restart NC. name         : Restart SLB. name         : Restart SQL. name         : Restart ACSFabric, WAS and WASPUBLIC name         : Restart XRP FabricRing, PXE and ADFS. name         : Restart Gateway. name         : Update OEM manifest. name         : Update Active Version on Node Sets name         : Post Update Trace Collector. name         : PostUpdate Cloud.

Looking ahead, more information 4/16/2018 9:59 PM Looking ahead, more information © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Monthly security payload Feature updates Scheduling updates using “automatic” mode Collected telemetry for runtime estimates http://aka.ms/azurestackupdate @justininc

Show me (UI) Justin Incarnato 4/16/2018 9:59 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Questions What is the name of the file you import that expresses package details? What are the two vectors involved in determining runtime? How long is the update deferral policy? Where do you import update packages from? Thanks for your time this morning.

Have feedback on Azure Stack? 4/16/2018 9:59 PM Have feedback on Azure Stack? Want to provide your feedback directly to the engineering team? Join the Azure Stack customer research panel aka.ms/azsssession © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Please evaluate this session Your feedback is important to us! 4/16/2018 9:59 PM Please evaluate this session Your feedback is important to us! From your PC or Tablet visit MyIgnite at http://myignite.microsoft.com From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting https://aka.ms/ignite.mobileapp © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4/16/2018 9:59 PM © Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.