Consulting ServicesNeed help with your SCCM infrastructure ? Consult our fixed price consulting plans to see our rates or contact us for a custom quote.
The second Hotfix Rollup for SCCM Current Branch (1710) is now available. This post is a complete SCCM 1710 Hotfix Rollup 2 (KB4086143) installation guide. If you’re looking for a complete SCCM Current Branch installation guide, see our blog series which covers it all. You can’t install this upgrade if you are running SCCM 2012. You need to be running SCCM 1710 to apply this update.
Installing SCCM upgrades is important for your infrastructure. It fixes a lot of issues from SCCM 1710, which some of them are important.
New Update and Servicing Model
If you’re not familiar with the new SCCM servicing model, read our New Update and Servicing section of the 1602 upgrade post which explain it all.
You may wonder what’s the difference between a Cumulative Update (CU) and an Update Rollup (UR)/Hotfix RollUp (HR) :
A CU is a new servicing baseline. A post-CU1 hotfix requires CU1 first, whereas a post-UR1 hotfix doesn’t require UR1. Like CU, UR is cumulative which means that UR2 will include previous hotfixes.
*If you are running SCCM 1511, 1602, 1606,1610, 1702 and 1706 you first need to upgrade to 1710 prior to applying this Hotfix Rollup, see our blog which covers the upgrade process. Once completed, the Hotfix Rollup will be available under Update and Servicing node.
List of SCCM 1710 Hotfix Rollup 2 Fixes
This hotfix rollup brings the long-awaited fix for Office 365 updates users interaction. Previous attempt to manage led to inconsistency for the user experience, like the Office product would close without any warning, while it was expected to be the case.
The new hotfix bring a simple restart notice (SCCM regular reboot) if any Office product is open while an update has been installed.
We will update our post on Office 365 updates, once we have successfully tested this change.
Consult the Microsoft support page for a full list of fixed issues.
Before you begin
Downloading and installing this update is done entirely from the console. There’s no download link, the update will appear on your console once synchronized.
When you install an in-console update: (New Versions, CU, UR, KB)
- It automatically runs a prerequisite check. You can also run this check prior to starting the installation
- It installs at the central administration site (if you have one), and at primary sites automatically. You can control when each primary site server is allowed to update its infrastructure by using Service Windows for site servers
- After a site server updates, all affected site system roles (including instances of the SMS Provider) automatically update. Configuration Manager consoles also prompt the console user to update the console, after the site installs the update
- If an update includes the Configuration Manager client, you are offered the option to test the update in pre-production, or to apply the update to all clients immediately
- After a primary site is updated, secondary sites do not automatically update. Instead, you must initiate the secondary site update
In this post, we’ll be updating a standalone Primary Site Server, console and clients.
ReminderIt’s a best practice to have some exclusions for your antivirus/anti-malware software on the SCCM server. Here a list of exclusions from SCCM 2012, which is still valid for CB as far as we know.You could also consider disabling the AV prior to installing the update and re-enable it once completed.
- Open the SCCM console
- Go to Administration \ Cloud Services \ Updates and Servicing
- In the State column, ensure that the update is Available
- If not already downloaded, hit Download
- If it’s not available, right-click Updates and Servicing and select Check for Updates
- The update state will change to Downloading
- You can follow the download in Dmpdownloader.log
The update files are stored in the EasyPayload folder in your SCCM Installation directory
SCCM 1710 Hotfix Rollup 2 Installation Guide
Step 1 | SCCM 1710 Hotfix Rollup Prerequisite Check
Before launching the update, we recommend to launch the prerequisite check:
- Open the SCCM console
- Go to Administration \ Cloud Services \ Updates and Servicing
- Right-click the Configuration Manager 1710 Hotfix (KB4086143) update and select Run prerequisite check
- Nothing will happen, the prerequisite check runs in the background. All menu options will be grayed out during the check
- You can monitor prerequisite check by going to Monitoring / Site Servicing Status, right-click your Update Name and select Show Status
- When completed the State column will show Prerequisite check passed
Step 2 | Launching the SCCM 1710 Hotfix Rollup 2
We are now ready to launch the SCCM 1710 Hotfix Rollup. At this point, plan about 30 minutes for the update installation.
- Right-click the Configuration Manager 1710 update and select Install Update Pack
- On the General tab, click Next
- In the Client Update Options, select the desired option for your client update
- This new feature allows updating only clients member of a specific collection. Refer to our post here
- On the License Terms tab, accept the license terms and click Next
- On the Summary tab, review your choices and click Next
- On the Completion tab, close the wizard. The whole process took a minute but the installation is not over, it has been initiated
- During installation, the State column changes to Installing
- You can monitor installation by going to Monitoring / Site Servicing Status, right-click your Update Name and select Show Status
- … or you can follow detailed installation progress in SCCM Installation Directory\Logs\CMUpdate.log
- When completed, you’ll notice the message There are no pending update package to be processed in the log file
- Refresh the Updates and Servicing node, the State column will be Installed
Updating the consoles
Since 1602, the console has an auto-update feature. At console opening, if you are not running the latest version, you will receive a warning and the update will start automatically.
- Since all updates operations were initiated from the console, we didn’t close it during the process. We received a warning message when clicking certain objects. You will have the same message when opening a new console
- Click OK, console update will start automatically
- Wait for the process to complete. You can follow the progress in C:\ConfigMgrAdminUISetup.log and C:\ConfigMgrAdminUISetupVerbose.log. Once completed, the console will open and you’ll be running the latest version
After setup is completed, verify the build number of the console. If the console upgrade was successful, the build number will be 5.0.8577.1115. Note that the Site Version is not changed to the Hotfix Rollup version. This is normal.
The client version will be updated to 5.00.8577.1115 (after updating, see section below)
SCCM 1710 Hotfix Rollup 2 Client Package distribution
You’ll see that the 2 client packages are updated:
- Navigate to Software Library \ Application Management \ Packages
- Check if both packages were updated, if not, select both packages and initiate a Distribute Content to your distribution points
Updating the Clients
Our preferred way to update our clients is by using the Client Upgrade (You can refer to our complete post documenting this feature) feature:
- Open the SCCM Console
- Go to Administration / Site Configuration / Sites
- Click the Hierarchy Settings in the top ribbon
- Select Client Upgrade tab
- The Upgrade client automatically when the new client update are available checkbox has been enabled
- Review your time frame and adjust it to your needs
Monitor SCCM Client Version Number
You can see our SCCM Client version reports to give detailed information about every client’s versions in your environment. It’s the easiest way to track your client updates.Collections
You can also create a collection that targets clients without the latest client version. I use it to monitor which client hasn’t been updated yet.
Here’s the query to achieve this: (You can also refer to our Set of Operational Collection Powershell Script which contains this collection)
Great describe bro.
I am getting the XML error while running my reports. some of the reports running in Console.
SCCM Version : 1710
Console version : 5.00.8577.1000
Site Version : 5.00.8577.1000
When i tried to open with browser all the reports are getting generated. I believe need to install the hotfix.
Let me know the best.
and several reboots but nothing changed still the error !!!
I am getting
MSI (s) (B4:C4) [13:42:16:348]: Product: Configuration Manager Client – Update ‘ConfigMgr1710-client-KB4086143-x64’ could not be installed. Error code 1603. Additional information is available in the log file C:\Windows\ccmsetup\Logs\client.msi.log.
on several clients…the client has been rebooted several times but nothing changed.
Pingback: System Center Mart 2018 Bülten – Sertaç Topal
Update to 1710 this morning. Client update was deployed to pre-production. The clients on those systems updating fast and successfully. I then ran the current hotfix and deployed the client to the same pre-production collection. Those same clients have not updated to the hotfix version of the client (5.00.8577.1115). Any ideas?
Not sure what occurred but mine is stuck. There was no reboot or lack of patience, just came in one morning, it showed as available, but it has been stuck since Mar. 7.
Leave it to Microsoft to not have a fix for one of their products.
Looks that UR available only for fast ring how can I enable it in my envirnoment?
Does anyone have issues with the Alerts for Malware detection being canceled after upgrade to 1710?
With Serial Console Access, users need only run one command passed to the user below, to access their server via another shell terminal, providing full access to the instance, along with the ability to copy and paste content. How to Connect Navigate to your instance you are wishing to connect to, and select Actions -> Get Serial Console. As this is a new ability, users who have not recently rebooted their instance, will be prompted with a message indicating in order to utilize the serial console they will need to reboot their server. Once this has been completed, they will be able to proceed with the instructions below for serial console access. After pressing the Get Serial Console option mentioned above, you will be presented with a new pop-up window displaying your direct web socket link at the top of the pane. custom writing
I had a issue with PXE not working after I ran this update. I was going from 1710 no rollup to rollup 2. After hours of trying things I found on Google I stumbled upon this link that helped me out.
Basically it appears the WDS role on the server blows up and has to be manually removed and reinstalled by SCCM. After that everything seems to be working fine. This makes me wonder what else I will find that is broke. UGH!
Awesome informationmuch appreciated.Keep posting updated info about SCCM. Unfortunately Virtual Labs are not available from Microsoft for practice it is removed from link. We eagerly waiting for Virtual Labs because it is very helpful when we have time in Office or Home then its very easy to just go to that particular link and practice each session 2 hours from basic. If its possible from your side just create and share link.
Look for errors in ConfigMgrPrereq.log
The pre-requisite check is failing for me. I’m on v1710 5.00.8577.1108. How can I resolve this?
I publish my SCCM consoles to a Citrix farm with no internet connection… (sounds weird I know) but it’s policy and that’s just how it goes. How can I manually or script a console update?