KB5012170: Security update for Secure Boot DBX (Aug 2022)

[SHO_GuN]

WU is installing KB5012170 on my machine after a clean install with today's update.

I tried another run with NTLite, adding this update, and it was "skipped". I tried a run with nothing but this update on a vanilla source and it was still skipped.

Advice?


Thanks

 

[garlin]

Maybe it's not an integratable update? Some updates like that; guess we wait for abbodi86's take.

 

[nuhi]

Apply the Cumulative Update first, the auto-sorting is wrong as the KB5012170 has an older build date than the cumulative update in which the needed Servicing Stack update is.
Will have to update the tool to handle this scenario, until then add the update in a second run, or extract SSU-22000.826-x64.cab from the cumulative update and add it all together.

If choosing to do it in multiple sessions, you can stop the first run without saving the image on the Apply page, selecting Stop before saving.
Then change back to Save in the second/last session with the update, if not extracting the servicing stack.

 

[SHO_GuN]

Thanks. Did run as normal but stopped without saving, then integrated KB5012170 as downloaded without extraction and all is good.

 

[nuhi]

OK, thanks for confirming.

Fix uploaded in the build 8850+

 

[hamiltoneuk]

WU is installing KB5012170 on my machine after a clean install with today's update.

I tried another run with NTLite, adding this update, and it was "skipped". I tried a run with nothing but this update on a vanilla source and it was still skipped.

Advice?


Thanks

With regards to KB5012170 this is what I have discovered: https://hamiltone.co.uk/uncategoriz...esday-august-2022-kb5012170-fails-to-install/

 

[nuhi]

With regards to KB5012170 this is what I have discovered: https://hamiltone.co.uk/uncategoriz...esday-august-2022-kb5012170-fails-to-install/

Any Windows update has issues, the number of different machines is simply too big.
If I see people reporting that the update it problematic from first hand, will unselect it by default or even remove from the list, depends on severity.

 

[garlin]

Fix uploaded in the build 8850+

Currently available for download. Go update now!

 

[garlin]

Due to current reports of UEFI compatibility, KB5012170 should not be automatically included in images.

You should test install KB5012170 on a live system first, before adding it to images. The update tries to install new security modules into UEFI, and may not work with all firmwares. This is important if the target system is a different machine.

https://borncity.com/win/2022/08/12...e-kb5012170-fr-secure-boot-dbx-9-august-2022/