Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality (2024)

search cancel

Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality

Products

CA Advanced Authentication CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort) CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)

Issue/Introduction

Microsoft System Center Configuration Manager (SCCM) is a Windows product that enables the management, deployment and security of devices and applications across an enterprise.

Use Case observed:

  • CA Advanced Authentication 9.1 SP3 deployed on a Windows 2019 Server. The Windows team (Windows Server Update Services) applied the Windows Server PATCH on the Windows servers. Windows PATCH is Microsoft KB5022286.
  • In this use case, they have different windows servers to host different CA Advanced Authentication components.
    - They have a Windows server where they deploy the Risk Authentication and Strong Authentication and Management Services components.
    - They have applied the above mentioned Microsoft KB5022286 PATCH on this server and NOT observed any issues.
  • There is another Windows server where they deployed the CA Adapter (arcotafm) component using the " Apache Tomcat " application server. - They have applied the same Microsoft KB5022286 PATCH on this server as well. As soon as they applied this PATCH, they were NOT able to start the " Apache Tomcat " application server.

Environment

Release: CA Advanced Authentication release 9.1
Component: CA Advanced Authentication.

Cause

The " SCCM " back channel was configured to use port 8005 which is also Tomcat port where it listens for Shutdown requests. Any Apache Tomcat Server which was configured to use the same port which is by default 8005 wouldn’t work. Apache Tomcat Service couldn’t start.

Subsequently, all Apps including arcotafm, admin, arcotsm or anything in the Apache Tomcat deployed wouldn’t work.

Resolution

Quick Resolution:

Uninstall/Revert the Microsoft KB5022286 patch from the server and that should help restarting the Tomcat service as no port conflict is there.

Precaution:

If you are using the SCCM tool to deploy patches please make sure to disable the SCCM port 8005 after Patch installation and Restart the Tomcat service or change the Tomcat port in server.xml to listen on any other port than 8005.

Feedback

thumb_up Yes

thumb_down No

Powered by Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality (1)

Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality (2024)

FAQs

How to deploy Windows patch using SCCM? ›

Go to SCCM All software updates and view the patches published using Patch Connect Plus. Select the patches to deploy, right click and select deploy. Deployment Wizard will be open. Specify the name for deployment, software update/ software update group and target.

How do I stop Windows Update deployment in SCCM? ›

The easiest way to stop the updates to clients would be to remove the deployment: Software Library > Overview > Software Updates > Software Update Groups. Then select the ADR baseline/update group, select the Deployment tab in the bottom window and remove the collection that the ADR has been deployed to.

Does SCCM use port 8005? ›

Express patching functionality in Microsoft System Center Configuration Manager (SCCM) uses port 8005, the Tomcat is not able to bind the port.

What is SCCM in patch management? ›

What is SCCM patch management? System Center Configuration Manager (SCCM) is a software management suite provided by Microsoft that allows IT teams to manage Windows-based computers. Of its many features, SCCM is commonly used by organizations to deploy updates and security patches across a network.

What is the difference between WSUS and SCCM? ›

WSUS can meet the needs of a Windows-only network at the most basic level, while SCCM offers an expanded array of tools for more control over patch deployment and endpoint visibility. SCCM also offers pathways for patching alternate OS and third-party applications, but on the whole, it still leaves much to be desired.

How to improve SCCM patch compliance? ›

How to Improve SCCM Client Compliance
  1. Step 1: Run an Investigation to identify the devices without the SCCM package by running the query in the NQL editor.
  2. NQL query.
  3. Step 2: Next, click on the device count to run an investigation on the list of devices displayed.
Feb 8, 2024

How to stop SCCM Deployment in progress? ›

In SCCM Console, go to the Software Library / Application Management / Applications. Select your deployed application. At the bottom select the Deployment tab. Right-click a deployment select Disable.

How do I clean up software updates in SCCM? ›

In the Software Library navigation pane, expand 3rd Party Updates > Administration and select Update Servers. In the center pane, select the WSUS server you want to clean up. In the toolbar, click Server Cleanup Wizard. Select one or more of cleanup options, and click OK.

How do I force Windows Update service to stop? ›

3 answers
  1. Press the Windows key + R to open the Run dialog box.
  2. Type "services. ...
  3. Find the service you want to disable and double-click on it.
  4. In the Properties window, click on the "Stop" button to stop the service if it is currently running.
  5. In the "Startup type" drop-down menu, select "Disabled".
Feb 12, 2024

What does SCCM mean? ›

What is system center configuration manager (SCCM)? SCCM is a software management tool developed by Microsoft that allows you to automate the deployment, management, and monitoring of devices in your organization.

What ports are used for SCCM? ›

Generally speaking, we choose ports 8530(http) and 8531(https) or ports 80 and 443 to configure our sup role,both inbound and outbound rules not useful when firewall is off.

Is Endpoint Configuration Manager same as SCCM? ›

Microsoft Endpoint Configuration Manager, formerly known as System Center Configuration Manager (SCCM), is a Windows-centric endpoint management tool for devices within an Active Directory domain.

What is SCCM called now? ›

This change also helped reduce confusion of the oft-used initialism SCCM that is common in other industries such as The Society of Critical Care Medicine (SCCM). In 2023 the term "endpoint" was removed to rename the product to Microsoft Configuration Manager.

Where does SCCM store patches? ›

The CCMCache folder is the location where the SCCM downloads all the files needed for various installations. This applies not only to applications but also to patches, task sequences, and other items. By default, this folder is set to C:\Windows\ccmcache.

What is the replacement for SCCM? ›

By transitioning towards a cloud-based, user-centric management solution like Microsoft Endpoint Manager or Intune, and phasing out Microsoft SCCM, Microsoft is giving organizations what they need to succeed in the digital age.

How do I create a patch deployment? ›

Deploying Patches
  1. To get to Machine View, select View > Machines. ...
  2. In the top pane, select the machine you just scanned.
  3. In the middle pane, on the Windows patches tab, identify a missing patch that you would like to deploy.
  4. Right-click the missing patch and select Deploy > Selected Patches.

How do I deploy a patch through WSUS? ›

Enabling WSUS Settings in PCP console to deploy patches via WSUS
  1. Navigate to the Admin tab in your Patch Connect Plus web console and select WSUS Settings listed under Publish Settings.
  2. Here, select the option "Enable patch deployment through WSUS" mentioned below SSL Settings and click 'Save'.

How do I deploy driver updates with SCCM? ›

You can use SCCM to upgrade drivers. In the Configuration Manager console, go to the Software Library workspace. Expand Operating Systems, and then select the Driver Packages node. On the Home tab of the ribbon, in the Create group, select Create Driver Package.

Top Articles
Here's What To Do When He Stops Texting
76.5% of Male Dumpers Return within 60 Days of BreakUp - Study
neither of the twins was arrested,传说中的800句记7000词
Why Are Fuel Leaks A Problem Aceable
Printable Whoville Houses Clipart
Www.paystubportal.com/7-11 Login
Lorton Transfer Station
Www.craigslist Virginia
Georgia Vehicle Registration Fees Calculator
Videos De Mexicanas Calientes
Kent And Pelczar Obituaries
Tlc Africa Deaths 2021
Comenity Credit Card Guide 2024: Things To Know And Alternatives
litter - tłumaczenie słowa – słownik angielsko-polski Ling.pl
OSRS Dryness Calculator - GEGCalculators
Jack Daniels Pop Tarts
Fear And Hunger 2 Irrational Obelisk
Eka Vore Portal
Slope Tyrones Unblocked Games
How pharmacies can help
Edicts Of The Prime Designate
Metro Pcs.near Me
Dallas Craigslist Org Dallas
Bethel Eportal
Understanding Gestalt Principles: Definition and Examples
Jeff Nippard Push Pull Program Pdf
John Deere 44 Snowblower Parts Manual
Roseann Marie Messina · 15800 Detroit Ave, Suite D, Lakewood, OH 44107-3748 · Lay Midwife
Play It Again Sports Forsyth Photos
Haunted Mansion Showtimes Near Cinemark Tinseltown Usa And Imax
Fedex Walgreens Pickup Times
Autopsy, Grave Rating, and Corpse Guide in Graveyard Keeper
Royals op zondag - "Een advertentie voor Center Parcs" of wat moeten we denken van de laatste video van prinses Kate?
Help with your flower delivery - Don's Florist & Gift Inc.
Laurin Funeral Home | Buried In Work
Radical Red Doc
Vision Source: Premier Network of Independent Optometrists
Oriellys Tooele
B.C. lightkeepers' jobs in jeopardy as coast guard plans to automate 2 stations
Ezpawn Online Payment
manhattan cars & trucks - by owner - craigslist
Setx Sports
Vindy.com Obituaries
The power of the NFL, its data, and the shift to CTV
Mitchell Kronish Obituary
Denise Monello Obituary
John M. Oakey & Son Funeral Home And Crematory Obituaries
Television Archive News Search Service
Sc Pick 3 Past 30 Days Midday
6463896344
Roller Znen ZN50QT-E
Service Changes and Self-Service Options
Latest Posts
Article information

Author: Moshe Kshlerin

Last Updated:

Views: 6186

Rating: 4.7 / 5 (77 voted)

Reviews: 84% of readers found this page helpful

Author information

Name: Moshe Kshlerin

Birthday: 1994-01-25

Address: Suite 609 315 Lupita Unions, Ronnieburgh, MI 62697

Phone: +2424755286529

Job: District Education Designer

Hobby: Yoga, Gunsmithing, Singing, 3D printing, Nordic skating, Soapmaking, Juggling

Introduction: My name is Moshe Kshlerin, I am a gleaming, attractive, outstanding, pleasant, delightful, outstanding, famous person who loves writing and wants to share my knowledge and understanding with you.