Not able to patch vm's using update mangement.

Question

Not able to patch vm's using update mangement.

siva 0

Hi,

I am trying to patch my azure vm's using update management in automation account. I am doing this for first time in this setup. Update management not able to patch vm's. Geeting error saying Failed to start. I checked for logs on the vm. I am getting below error. Can you please help here. Please find the attachment for screenshot.

Error while polling the hybrid notification channel. [AccountId={14ea4741-990f-4693-a1d9-55135b0f6192}] [RunbookWorkerGroup=practice-vm1_c6ce3da6-188f-4d18-aaaa-4b3af9651f4b] [MachineName=practice-vm1] [MachineId={c6ce3da6-188f-4d18-aaaa-4b3af9651f4b}] [Exception=JobRuntimeData.Client.JobRuntimeDataServiceClientException: The remote server returned an error: (403) Forbidden.
 [System.Net.WebException: The remote server returned an error: (403) Forbidden.]
   at JobRuntimeData.Client.JobRuntimeDataServiceClient.Get[T](String suffixUri, IDictionary`2 queryParameters, IDictionary`2 headers)
   at JobRuntimeData.Client.Operations.SandboxOperations.GetActions(Guid accountId, String hybridWorkerGroupName, String hybridWorkerVersion)
   at Orchestrator.HybridChannel.HybridJobRuntimeDataServiceClient.Receive()
   at RunbookWorker.Hybrid.CloudNotificationManager.PollAndNotify()

   inner exception -> System.Net.WebException: The remote server returned an error: (403) Forbidden.
   at System.Net.HttpWebRequest.GetResponse()
   at Orchestrator.WebClient.RequestChannel.IssueRequestAndGetResponse[T](HttpWebRequest request, WebHeaderCollection& responseHeaders, String payload)
   at Orchestrator.WebClient.WebClient.Get[T](WebHeaderCollection& responseHeaders)
   at JobRuntimeData.Common.TransientFaultHandling.RetryPolicy.ExecuteAction[TResult](Func`1 func)
   at JobRuntimeData.Client.JobRuntimeDataServiceClient.Get[T](String suffixUri, IDictionary`2 queryParameters, IDictionary`2 headers)
]

VasimTamboli 5,550 MVP

The error message you are receiving suggests that the update management service is having trouble communicating with the virtual machine. The 403 Forbidden error indicates that the service does not have the necessary permissions to perform the requested action.

To troubleshoot this issue, you can start by checking the following:

    Verify that the automation account has the appropriate permissions to manage the virtual machine. The account should have at least the "Contributor" role assigned to it.

    Check the update management solution settings in the Azure portal to ensure that the virtual machine is properly configured and assigned to the automation account.

    Make sure that the virtual machine has the latest version of the Hybrid Runbook Worker installed. If not, update the Hybrid Runbook Worker to the latest version.

    Check the network settings on the virtual machine to ensure that it can communicate with the update management service. Make sure that the virtual machine is not blocking any necessary ports or protocols.

    Check if there are any firewall or proxy settings that may be blocking the communication between the virtual machine and the update management service.

If none of these steps resolve the issue, you can try enabling debug logging for the Hybrid Runbook Worker and the update management service to get more detailed information about the error. You can also check the Azure Activity Log for any related events that may provide additional insights into the issue.

siva 0 Reputation points

2023-05-03T00:32:41.2266667+00:00

I tried all the things mentioned. But still not working.
siva 0 Reputation points

2023-05-03T00:34:04.3066667+00:00

now getting this error.

The description for Event ID 15105 from source Microsoft-SMA cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
vipullag-MSFT 26,537 Reputation points Moderator

2023-05-03T09:50:41.2866667+00:00

Hello siva

Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.

This issue needs deeper investigation. Support team will be able to check and help on this. I would recommend you to open a azure support case.

If you don't have a support plan enabled on your subscription, I request you to send an email to AzCommunity@Microsoft.com with Subject as "Attn:Vikas" referencing this thread along with your subscription ID. I can then enable your subscription with a one-time free technical support.

Once the issue is resolved, request you to post the resolution here for the benefit of community.
siva 0 Reputation points

2023-05-03T16:51:07.6066667+00:00

I just dropped mail with required details.
vipullag-MSFT 26,537 Reputation points Moderator

2023-05-10T04:32:37.0633333+00:00

Hello siva

Once, the issue is resolved. Please summarize the resolution for the benefit of community.
James Irrgang 6 Reputation points

2023-07-25T19:02:26.93+00:00

Has there been any update to this? I am seeing the same issue.

Thanks!