• Article

How to: Install a Service Pack on a System with Minimal Downtime for Mirrored Databases

This topic describes how to minimize downtime for mirrored databases when you install service packs and hotfixes. This process involves sequentially upgrading the instances of Microsoft SQL Server 2008 that are participating in database mirroring. This form of upgrade, which is known as a rolling upgrade, reduces downtime to only a single failover. Note that for high-performance mode sessions in which the mirror server is geographically distant from the principal server, a rolling upgrade might be inappropriate.

A rolling upgrade is a multi-stage process that consists of the following stages:

  • Protect your data.

  • If the session includes a witness, we recommend that you remove the witness. Otherwise, when the mirror server instance is being upgraded, database availability depends on the witness that remains connected to the principal server instance. After you remove a witness, you can upgrade it at any time during the rolling upgrade process without risking database downtime.

    Note

    For more information, see Quorum: How a Witness Affects Database Availability.

  • If a session is running in high-performance mode, change the operating mode to high-safety mode.

  • Upgrade each server instance that is involved in database mirroring. A rolling upgrade involves upgrading the server instance that is currently the mirror server, manually failing over each of its mirrored databases, and upgrading the server instance that was first the principal server (and is now the new mirror server). At this point, you will have to resume mirroring.

    Note

    Before starting a rolling upgrade, we recommend that you perform a practice manual failover on at least one of your mirroring sessions.

  • Revert to high-performance mode, if it is required.

  • Return the witness to the mirroring session, if it is required.

The procedures for these stages are described here.

Important

A server instance might be performing different mirroring roles (principal server, mirror server, or witness) in concurrent mirroring sessions. In this case, you will have to adapt the basic rolling upgrade process accordingly. For more information, see Database Mirroring Sessions.

To protect your data before an upgrade (a best practice)

  1. Perform a full database backup on every principal database.

    To back up a database

  2. Run the DBCC CHECKDB command on every principal database.

To remove a witness from a session

To change a session from high-performance mode to high-safety mode

To perform the rolling upgrade

  1. To minimize downtime, we recommend the following: Start the rolling upgrade by updating any mirroring partner that is currently the mirror server in all its mirroring sessions. You might have to update multiple server instances at this point.

    Note

    A witness can be upgraded at any point in the rolling upgrade process. For example, if a server instance is a mirror server in Session 1 and is a witness in Session 2, you can upgrade the server instance now.

    The server instance to upgrade first depends on the current configuration of your mirroring sessions, as follows:

    • If any server instance is already the mirror server in all of its mirroring sessions, install the service pack or the hotfix on that server instance.

    • If all of your server instances are currently the principal server in any mirroring sessions, select one server instance to upgrade first. Then, manually fail over each of its principal databases and upgrade that server instance by installing the service pack or the hotfix.

    After being upgraded, a server instance automatically rejoins each of its mirroring sessions.

    To perform a manual failover

    For information about how manual failover works, see Manual Failover.

  2. For each mirroring session whose mirror server instance has just been upgraded, wait for the session to synchronize. Then, connect to the principal server instance, and manually fail over the session. On failover, the upgraded server instance becomes the principal server for that session, and the former principal server becomes the mirror server.

    The goal of this step is for another server instance to become the mirror server in every mirroring session in which it is a partner.

  3. After you fail over, we recommend that you run the DBCC CHECKDB command on the principal database.

  4. Install the service pack or the hotfix on each server instance that is now the mirror server in all mirroring sessions in which it is a partner. You might have to update multiple servers at this point.

    Important

    In a complex mirroring configuration, some server instance might still be the original principal server in one or more mirroring sessions. Repeat steps 2–4 for those server instances until all instances involved are upgraded.

  5. Resume the mirroring session.

    Note

    Automatic failover will not work until the witness has been upgraded.

  6. Install the service packs or hotfixes on any remaining server instance that is the witness in all its mirroring sessions. After an upgraded witness rejoins a mirroring session, automatic failover becomes possible again. You might have to update multiple servers at this point.

To return a session to high-performance mode

  • Optionally, return to high-performance mode by using one of the following methods:

    • In SQL Server Management Studio: Change the Operating mode option to High performance (asynchronous) by using the Mirroring Page of the Database Properties dialog box. 

    • In Transact-SQL: Use ALTER DATABASE to set transaction safety to OFF.

To return a witness to a mirroring session