Hi Guys,

I have a HA farm with multiple tires (2 DB,2 APP, 2 CASHE, 2 WFE). When I come to patching the windows security update can I run the windows update at the same time on all servers or do you recommend to do this each server by sever? 

Also I wonder since they are HA, can i just patch a first node on each tire during the working hours and restart it whist the other node is up? or its best to patch them after working hours?

Any advice greatly appreciated.

Many thanks

BalaiP

You can install patches on all servers at once, then do a rolling restart, although I prefer to install patches on one server at a time, restart, then move onto the next.

HI,I would recommend to install the patch in one-by-one only.Install the patch in one passive node first,reboot and make the passive as Active.Then install the update in next Passive again.This would avoid any unexpected issues and a safer side also.Please check the link below that explains the same in more detail.

http://expertsharepoint.blogspot.my/2015/09/sql-high-available-failover.html

Thanks both, step by step server sounds more reasonable will do that way. Anil, when I come to patch the sharepoint app related Serveres(I.e. WFE, CASHE, APP) I don't not how to make a redundant node is active. I can do for WFE with out load balancer but not sure how do this for application or distributed cashe. Is that possible? Cheers