Windows Update KB KB4535680 failed to install to Server 2016 PowerEdge R540

Microsoft Advised

This security update makes improvements to Secure Boot DBX for the supported Windows versions listed in the "Applies to" section. Key changes include the following:

• Windows devices that has Unified Extensible Firmware Interface (UEFI) based firmware can run with Secure Boot enabled. The Secure Boot Forbidden Signature Database (DBX) prevents UEFI modules from loading. This update adds modules to the DBX.
  
  A security feature bypass vulnerability exists in secure boot. An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software.
  
  This security update addresses the vulnerability by adding the signatures of the known vulnerable UEFI modules to the DBX.

 

 

 

Issue	Workaround
Some original equipment manufacturer (OEM) firmware might not allow for the installation of this update.	To resolve this issue, contact your firmware OEM.