Microsoft has halted the Windows 8.1 update for business users using Windows Server Update Server (WSUS) because of a bug that prevents systems to stop scanning against a specific version of WSUS configured to use SSL without TLS 1.2.
“There is a known issue which causes some PCs updated with the Windows 8.1 Update (KB 2919355) to stop scanning against Windows Server Update Services 3.0 Service Pack 2 (WSUS 3.0 SP2 or WSUS 3.2) servers which are configured to use SSL and have not enabled TLS 1.2”, notes Microsoft in a blog post on WSUS Product Team Blog.
The bug effectively means once the systems are updated with Windows 8.1 update, they won’t be able to receive any future updates.
The issue is limited to certain configurations with WSUS 3.2 running on Windows Server 2003 SP2 or Windows Server 2003 R2 SP2 or Windows Server 2008 SP2 or Windows Server 2008 R2 SP1 with HTTPS and SSL enabled but without TLS 1.2.
“Microsoft plans to issue an update as soon as possible that will correct the issue and restore the proper behavior for Windows 8.1 Update KB 2919355 scanning against all supported WSUS configurations”, added Microsoft.
“Until that time, we are delaying the distribution of the Windows 8.1 Update KB 2919355 to WSUS servers.”