Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality (2024)

search cancel

Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality

Products

CA Advanced Authentication CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort) CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)

Issue/Introduction

Microsoft System Center Configuration Manager (SCCM) is a Windows product that enables the management, deployment and security of devices and applications across an enterprise.

Use Case observed:

  • CA Advanced Authentication 9.1 SP3 deployed on a Windows 2019 Server. The Windows team (Windows Server Update Services) applied the Windows Server PATCH on the Windows servers. Windows PATCH is Microsoft KB5022286.
  • In this use case, they have different windows servers to host different CA Advanced Authentication components.
    - They have a Windows server where they deploy the Risk Authentication and Strong Authentication and Management Services components.
    - They have applied the above mentioned Microsoft KB5022286 PATCH on this server and NOT observed any issues.
  • There is another Windows server where they deployed the CA Adapter (arcotafm) component using the " Apache Tomcat " application server. - They have applied the same Microsoft KB5022286 PATCH on this server as well. As soon as they applied this PATCH, they were NOT able to start the " Apache Tomcat " application server.

Environment

Release: CA Advanced Authentication release 9.1
Component: CA Advanced Authentication.

Cause

The " SCCM " back channel was configured to use port 8005 which is also Tomcat port where it listens for Shutdown requests. Any Apache Tomcat Server which was configured to use the same port which is by default 8005 wouldn’t work. Apache Tomcat Service couldn’t start.

Subsequently, all Apps including arcotafm, admin, arcotsm or anything in the Apache Tomcat deployed wouldn’t work.

Resolution

Quick Resolution:

Uninstall/Revert the Microsoft KB5022286 patch from the server and that should help restarting the Tomcat service as no port conflict is there.

Precaution:

If you are using the SCCM tool to deploy patches please make sure to disable the SCCM port 8005 after Patch installation and Restart the Tomcat service or change the Tomcat port in server.xml to listen on any other port than 8005.

Feedback

thumb_up Yes

thumb_down No

Powered by Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality (1)

Deploying Microsoft Patch (PATCH - Microsoft KB5022286) using the " SCCM " tool may lead to stopping the Advanced Authentication functionality (2024)

FAQs

How to deploy Windows patch using SCCM? ›

Go to SCCM All software updates and view the patches published using Patch Connect Plus. Select the patches to deploy, right click and select deploy. Deployment Wizard will be open. Specify the name for deployment, software update/ software update group and target.

How do I stop Windows Update deployment in SCCM? ›

The easiest way to stop the updates to clients would be to remove the deployment: Software Library > Overview > Software Updates > Software Update Groups. Then select the ADR baseline/update group, select the Deployment tab in the bottom window and remove the collection that the ADR has been deployed to.

Does SCCM use port 8005? ›

Express patching functionality in Microsoft System Center Configuration Manager (SCCM) uses port 8005, the Tomcat is not able to bind the port.

What is SCCM in patch management? ›

What is SCCM patch management? System Center Configuration Manager (SCCM) is a software management suite provided by Microsoft that allows IT teams to manage Windows-based computers. Of its many features, SCCM is commonly used by organizations to deploy updates and security patches across a network.

What is the difference between WSUS and SCCM? ›

WSUS can meet the needs of a Windows-only network at the most basic level, while SCCM offers an expanded array of tools for more control over patch deployment and endpoint visibility. SCCM also offers pathways for patching alternate OS and third-party applications, but on the whole, it still leaves much to be desired.

How to improve SCCM patch compliance? ›

How to Improve SCCM Client Compliance
  1. Step 1: Run an Investigation to identify the devices without the SCCM package by running the query in the NQL editor.
  2. NQL query.
  3. Step 2: Next, click on the device count to run an investigation on the list of devices displayed.
Feb 8, 2024

How to stop SCCM Deployment in progress? ›

In SCCM Console, go to the Software Library / Application Management / Applications. Select your deployed application. At the bottom select the Deployment tab. Right-click a deployment select Disable.

How do I clean up software updates in SCCM? ›

In the Software Library navigation pane, expand 3rd Party Updates > Administration and select Update Servers. In the center pane, select the WSUS server you want to clean up. In the toolbar, click Server Cleanup Wizard. Select one or more of cleanup options, and click OK.

How do I force Windows Update service to stop? ›

3 answers
  1. Press the Windows key + R to open the Run dialog box.
  2. Type "services. ...
  3. Find the service you want to disable and double-click on it.
  4. In the Properties window, click on the "Stop" button to stop the service if it is currently running.
  5. In the "Startup type" drop-down menu, select "Disabled".
Feb 12, 2024

What does SCCM mean? ›

What is system center configuration manager (SCCM)? SCCM is a software management tool developed by Microsoft that allows you to automate the deployment, management, and monitoring of devices in your organization.

What ports are used for SCCM? ›

Generally speaking, we choose ports 8530(http) and 8531(https) or ports 80 and 443 to configure our sup role,both inbound and outbound rules not useful when firewall is off.

Is Endpoint Configuration Manager same as SCCM? ›

Microsoft Endpoint Configuration Manager, formerly known as System Center Configuration Manager (SCCM), is a Windows-centric endpoint management tool for devices within an Active Directory domain.

What is SCCM called now? ›

This change also helped reduce confusion of the oft-used initialism SCCM that is common in other industries such as The Society of Critical Care Medicine (SCCM). In 2023 the term "endpoint" was removed to rename the product to Microsoft Configuration Manager.

Where does SCCM store patches? ›

The CCMCache folder is the location where the SCCM downloads all the files needed for various installations. This applies not only to applications but also to patches, task sequences, and other items. By default, this folder is set to C:\Windows\ccmcache.

What is the replacement for SCCM? ›

By transitioning towards a cloud-based, user-centric management solution like Microsoft Endpoint Manager or Intune, and phasing out Microsoft SCCM, Microsoft is giving organizations what they need to succeed in the digital age.

How do I create a patch deployment? ›

Deploying Patches
  1. To get to Machine View, select View > Machines. ...
  2. In the top pane, select the machine you just scanned.
  3. In the middle pane, on the Windows patches tab, identify a missing patch that you would like to deploy.
  4. Right-click the missing patch and select Deploy > Selected Patches.

How do I deploy a patch through WSUS? ›

Enabling WSUS Settings in PCP console to deploy patches via WSUS
  1. Navigate to the Admin tab in your Patch Connect Plus web console and select WSUS Settings listed under Publish Settings.
  2. Here, select the option "Enable patch deployment through WSUS" mentioned below SSL Settings and click 'Save'.

How do I deploy driver updates with SCCM? ›

You can use SCCM to upgrade drivers. In the Configuration Manager console, go to the Software Library workspace. Expand Operating Systems, and then select the Driver Packages node. On the Home tab of the ribbon, in the Create group, select Create Driver Package.

Top Articles
Can You Replace Your Foundation Without Lifting The House?
What are Supplier Agreements? - Definition - oboloo
Jail Inquiry | Polk County Sheriff's Office
Cranes For Sale in United States| IronPlanet
Katie Pavlich Bikini Photos
Dricxzyoki
Unity Stuck Reload Script Assemblies
Es.cvs.com/Otchs/Devoted
Wells Fargo Careers Log In
Palace Pizza Joplin
Encore Atlanta Cheer Competition
Where's The Nearest Wendy's
R/Altfeet
Shooting Games Multiplayer Unblocked
Walthampatch
Belle Delphine Boobs
Procore Championship 2024 - PGA TOUR Golf Leaderboard | ESPN
Imagetrend Inc, 20855 Kensington Blvd, Lakeville, MN 55044, US - MapQuest
St Maries Idaho Craigslist
Everything you need to know about Costco Travel (and why I love it) - The Points Guy
Milanka Kudel Telegram
Rimworld Prison Break
Loslaten met de Sedona methode
Aliciabibs
D2L Brightspace Clc
Fuse Box Diagram Honda Accord (2013-2017)
Phoenixdabarbie
O'reilly's In Monroe Georgia
Ncal Kaiser Online Pay
The Goonies Showtimes Near Marcus Rosemount Cinema
In hunt for cartel hitmen, Texas Ranger's biggest obstacle may be the border itself (2024)
Nurtsug
Advance Auto Parts Stock Price | AAP Stock Quote, News, and History | Markets Insider
Save on Games, Flamingo, Toys Games & Novelties
Www Violationinfo Com Login New Orleans
Facebook Marketplace Marrero La
Uc Santa Cruz Events
Ramsey County Recordease
Advance Auto.parts Near Me
Pgecom
Yourcuteelena
White County
Gander Mountain Mastercard Login
1Tamilmv.kids
Who Is Nina Yankovic? Daughter of Musician Weird Al Yankovic
Samantha Lyne Wikipedia
Charlotte North Carolina Craigslist Pets
Nkey rollover - Hitta bästa priset på Prisjakt
Craigslist Charlestown Indiana
Latest Posts
Article information

Author: Moshe Kshlerin

Last Updated:

Views: 6186

Rating: 4.7 / 5 (77 voted)

Reviews: 84% of readers found this page helpful

Author information

Name: Moshe Kshlerin

Birthday: 1994-01-25

Address: Suite 609 315 Lupita Unions, Ronnieburgh, MI 62697

Phone: +2424755286529

Job: District Education Designer

Hobby: Yoga, Gunsmithing, Singing, 3D printing, Nordic skating, Soapmaking, Juggling

Introduction: My name is Moshe Kshlerin, I am a gleaming, attractive, outstanding, pleasant, delightful, outstanding, famous person who loves writing and wants to share my knowledge and understanding with you.