Windows in-place upgrade fails on devices without internet access

Hi
We are using the “Windows in-place upgrade” task from the “OS Deployment and Bare Metal Imaging” site to upgrade our computers from Win10 to Win11 and it works very well.
However, on the computers which do not have direct internet access (on purpose for security reasons), the task fails with “Download Failed”.
This is because the task tries to download the file unzip32-6-0.exe from bigfix.com:
http://software.bigfix.com/download/osd/unzip32-6.0.exe

It could be fixed if the task would allow to change the location of this unzip32-6.0.exe file to some local repository like the Bigfix server itself.

Apparently this task has not been updated since 9 years, so it could be a change to update this task and fix this?

What does everybody think? Thanks!

Hello,

the target computer does not download unzip32-6.0.exe directly from the internet.

Instead, the target requests the file from the BigFix root server. The root server, which is connected to the internet, downloads the file and then sends it to the target. Therefore, the target computer does not need an internet connection for the task to run.

Could you please check the “Downloads” section in the failed action on the BigFix console for the error related to that file?

07.03.2016 is the original source release date; the task itself has been updated multiple times since then.

Thanks.

Sergio
BigFix OSD L3 team

Thanks for the reply.
It really seems to try to download directly from the internet and not via BigFix root server in this instance.
ActionScript says:

add prefetch item name=unzip-6.0.exe sha1=3ab3324fa4042bd9b6fab4f2db6f0cde88562365 size=231960 url=http://software.bigfix.com/download/osd/unzip32-6.0.exe sha256=976edd1904652b8e3d219c480bdfff5e5b138df1036dfd75747c1fe6b8d82f0a

Once we opened up internet access in that VLAN, it worked immediately. Obviously this is not a good solution for clients which should not have internet access.

Here a logfile of one of the clients from when it did not work:

At 15:39:01 +0800 -
ItemizedDownloadsAvailable: true (action id 173238)
ActionLogMessage: (action:173238) Non-Distributed - DownloadsAvailable
ActionLogMessage: (action:173238) Submitting download request
ActionLogMessage: (action:173238) Download url: 'http://software.bigfix.com/download/osd/unzip32-6.0.exe’
ActionLogMessage: (action:173238) Download url: 'http://bigfix.internaldomain.net:52311/Uploads/9009f25bf1451b7a27af3ac7320a4744c020xxxx/Win11x64D24H2_…
ActionLogMessage: (action:173238) Download url: 'http://bigfix.internaldomain.net:52311/Uploads/e621d2e0577b4477321248b7078b4a4f70634xxx/E621D2E0577B44…
At 15:39:26 +0800 -
ActionLogMessage: (action:173238) JobFailed - cancel and fail action
ActionLogMessage: (action:173238) DownloadJobFailed
At 15:39:29 +0800 -
ActionLogMessage: (action:173238) ending action

Unfortunately I cannot check how it looked under the Download section because the workaround to allow internet access on those computers is already in place so it looks different now I guess.

Any way to make sure it tries to download from the BigFix Root Server instead of the internet?
Thanks

Hi @Splendiz by default , the BigFix Client will only download the binaries through the Relay Infrastructure.

We are missing few things -

  • When the Action was deployed , you should see on the Action Status if the unzip-6.0.exe is “Cached on Server” or Not…
  • On Console, right click on the machine you tried to in-place upgrade and select “Edit Settings” - Do you have any of the following settings configured and if so, what are the values:
  • _BESClient_Download_Direct
  • _BESClient_Download_DirectOnFail
  • _BESClient_Download_Direct_Domainlist
  • _BESClient_Download_DirectRecovery
1 Like

This one I don’t know, we can test it when we block internet access again for those clients.

I think you found the reason. This one is set in our environment:
_BESClient_Download_Direct_Domainlist
**.adobe.com;.apple.com;.microsoft.com;.bigfix.com;.windowsupdate.com;.ibm.com;.google.com;.mozilla.org

So with this setting it makes sense it downloads from the internet. I will change it and try again…

Thanks!