Heads up - WSUS issues in Windows Server 2012 R2 / Windows 8.1

[3s-gtech]

Hey all,

Just a quick heads up on an odd issue that I've just noticed on my Server 2012 R2 VMs, but that apparently will also affect Windows 8.1 Update machines too.

 

The issue is with Secure Boot - I had this enabled on my Hyper-V VMs (as you'd expect) - however, it has been causing a number of Windows updates to fail (I can see a large number of failed updates in the history). My WSUS server is also a VM running on 2012 R2 (so this isn't the https/TLS 1.2 error).

 

If you shut down any VMs that are being affected, disable Secure Boot in Settings, then turn it back on, the updates should install. I have just tested this on a few servers to be sure. The issue shouldn't occur on physical servers unless they're new and fancy enough to include SB.

 

Secure Boot is off on my few PCs running 8.1 due to various things needed to install Enterprise on them - but this issue may well affect your workstations too if you use SB.

[pow]

I found this on my Domain Controller the other day, hacked me right off but sorted now. Now just the 11 other VMs to do

[3s-gtech]

Yup, glad I don't have that many 2012 R2 VMs on Hyper-V yet, sorted it within a day. No idea if other virtualisation platforms support SB - my ESXi 5.5 host doesn't seem have that particular option but it could be server specific (and I have BIOS rather than EFI selected).