UNSOLVED
M
mespartero
1 Message
1
23250
February 11th, 2021 01:00
Windows Update KB KB4535680 failed to install to Server 2016 PowerEdge R540
Windows Update KB KB4535680 failed to install to Server 2016 PowerEdge R540
Microsoft Advised
This security update makes improvements to Secure Boot DBX for the supported Windows versions listed in the "Applies to" section. Key changes include the following:
Windows devices that has Unified Extensible Firmware Interface (UEFI) based firmware can run with Secure Boot enabled. The Secure Boot Forbidden Signature Database (DBX) prevents UEFI modules from loading. This update adds modules to the DBX.
A security feature bypass vulnerability exists in secure boot. An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software.
This security update addresses the vulnerability by adding the signatures of the known vulnerable UEFI modules to the DBX.
Issue |
Workaround |
Some original equipment manufacturer (OEM) firmware might not allow for the installation of this update. |
To resolve this issue, contact your firmware OEM. |
DellEMCSupport
631 Posts
11742
0
Posted February 12th, 2021 05:00
Hello, please can you provide more details of the issue? Which is the error you are encountering? Thanks MarcoDELL-Marco B
Moderator
•
3980 Posts
11739
0
Posted February 12th, 2021 06:00
hello i will search for more info about that and let you know. thanks marco
DELL- Marco B
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!Same issue with Server 2019 on all PowerEdge R540. Servers all have latest available BIOS of 2.9.3. Update KB4535680 will not install on any R540. Windows Update reports 0x800f0922. Error in CBS log of
Error TRUST_E_NOSIGNATURE originated in function Windows::WCP::SecureBoot::BasicInstaller::Install expression: ApplySecureBootUpdate( dwAvailableUpdates)
StadtSchleiden
2 Posts
11617
0
Posted February 15th, 2021 03:00
We have the same issue with our T640 servers on Windows Server 2019, also with the latest BIOS version 2.9.4. The Update fails on installation process, we have hidden the updates for the moment, so our servers don't spam with error messages.
DELL-Marco B
Moderator
•
3980 Posts
11608
0
Posted February 15th, 2021 05:00
Hello,
please can you make sure that you have the latest servicing stack update (SSU) installed?
You can check here the document released by microsoft.
Thanks
Marco
DELL- Marco B
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!StadtSchleiden
2 Posts
11603
0
Posted February 15th, 2021 05:00
On our servers, the latest SSU (KB4601393) is installed.
DELL-Marco B
Moderator
•
3980 Posts
11594
0
Posted February 15th, 2021 07:00
Unfortunately we don't have a fix for this, you should check with Microsoft if there is a patch or a fix for this.
Thanks
Marco
DELL- Marco B
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!I am having the same problem with our Dell R440 Ready Nodes running Server 2019 and a R330 running Server 2016. I get the same error in the CBS log. I have other equipment that installed the update fine in the same environment but the ones that error out are all Dells. It is becoming a bigger problem as it is interfering with other patches when it rolls back the failure and you cannot skip or hide the update. The update has been unsuccessful for a month now, someone please look into this before too many vulnerabilities go unpatched.
DELL-Marco B
Moderator
•
3980 Posts
4341
4
Posted February 15th, 2021 08:00
Hello,
we escalated the issue internally, we will keep you update.
Thanks
Marco
DELL- Marco B
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
snruebes
13 Posts
11758
0
Posted February 12th, 2021 03:00
Same here - no help - neither from DELL nor from Microsoft!
I assume Dell missed to release a compatible BIOS version....