Sat, Aug 10 2013 17:06
Windows 2012 servers that use HpCISSs2.sys become unresponsive typically every 3-7 days
For those that have HP servers - a quick heads up --
Filed under: News
Windows 2012 servers that use HpCISSs2.sys become unresponsive typically every 3-7 days - Fides Tamen Quin - Site Home - TechNet Blogs:
Just a quick note out there on a specific issue we've been seeing lately. It is the really the only issue with Windows 2012 server hanging or becoming unresponsive that we've had up almost a year into the release of this OS.
On Windows 2012 running on HP servers that use the October 15th 2012 version of HpCISSs2.sys, those servers will run into an issue were we have an IO stall accessing the disk. This stall happens when we hit the HpCISSs2.sys and will never recover. The first time it happens the servers don't actually hang but that is when the traffic jam starts to backup. Meaning - someone can have a car accident block the highway 5 miles down the road. You wouldn't stop moving right away but eventually you're going to be stopped in the resulting line of traffic.
Some of the symptoms you may see is that the server will show you a grey screen instead of the logon option. You may not be able to RDP to the server but if you test ports such as 3389 135 445 with port query they will be open. Remote WMI queries may fail. Ping will work. File shares will not be accessible.
HP has documented this issue with HpCISSs2.sys on 2012 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03793656&prodSeriesId=4091412
If you have that version of the driver, are running Windows 2012 and are running into this behavior I highly recommend following their action to rollback the driver to a previous version.
To get conclusive data that confirms this is the issue, a Kernel Memory dump is the best route. Since Servers are typically setup for a Kernel dump by default the only change that would be required is to setup the system to generate that dump on an NMI signal:
How to generate a complete crash dump file or a kernel crash dump file by using an NMI on a Windows-based system http://support.microsoft.com/kb/927069
Not having to get a Full memory dump and only needing a Kernel dump greatly reduces the resulting size of the dump file, which is becoming problematic when generating dumps on systems with a large amount of RAM