Article ID: 2734159 - View products that this article applies to.
A hotfix rollup package (build 4.1.2515.0) is available for Microsoft Forefront Identity Manager (FIM) 2010 R2. The hotfix rollup package resolves some issues and adds some features that are described in the "More Information" section. Additionally, this update contains all servicing fixes that were made since the release of FIM 2010 R2.
Update informationThis version of Forefront Identity Manager is affected by the issue that is described in Microsoft Security Advisory 2749655
(http://technet.microsoft.com/en-us/security/advisory/2749655). In this issue, the digital signature on files that are produced and signed by Microsoft expire prematurely. To resolve this issue for Forefront Identity Manager, install update 2750671.
2750671A supported update is available from Microsoft. We recommend that all customers apply this update to their production systems.
(http://support.microsoft.com/kb/2750671/ )A hotfix rollup package (build 4.1.2548.0) is available for Forefront Identity Manager 2010 R2
Microsoft SupportThe following files are available for download from the Microsoft Download Center:
Collapse this tableExpand this table
PrerequisitesTo apply this hotfix, you must have FIM 2010 R2 (build 4.1.2273.0) installed.
Restart requirementYou must restart the computer after you apply the FIM 2010 R2 Add-ins and Extensions component. Additionally, you may have to restart the server components.
File informationThe global version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Collapse this tableExpand this table
Issues that are fixed and features that are added in this update
Issues that are fixed in the FIM Portals
Issue 1This update adds support to FIM Password Portals for user names that contain Unicode characters.
Issue 2This update fixes a Sync Manager issue in which no results are returned when you search for all results by using the Advanced Filter.
Issues that are fixed in FIM Synchronization Service
Issue 1This update adds support to the Sync Manager for folders and files names that contain Unicode characters.
Issue 2When you perform an upgrade installation for FIM 2010 R2, the setup of the FIM 2010 R2 Synchronization Service fails during the database conversion stage.
When this issue occurs, contact Microsoft Support to obtain a tool that can be used to upgrade the database separately. Then, configure the FIM 2010 R2 installation so that the Synchronization Service setup installs a blank database. Finally, apply the tool to that database. When the upgrade of the database is complete, you can run the Setup program again and configure the installation to point to the upgraded database.
To resolve the issue, use the StoreChk.exe tool from the 4.1.2515.2 build of FIM 2010 R2 to upgrade the database. To do this, follow these steps:
Issue 3Fixed an issue in which FIM sync cannot de-provision user's objects in Active Directory when Exchange 2010 has added Active Sync Devices.
Issue 4In a large scale connector space, data in the obsoletion list becomes unsynchronized during a full import operation. When this issue occurs, the operation returns an error that resembles the following:
0 is not a valid DN depth
Issues that are fixed in the FIM Service
Issue 1Assume that you have a set or a group that uses tabular functions in a FIM 2010 R2 environment. The set or group contains multiple condition statements that contain the "=" character and that are divided by the "or" word in an attribute (for example, the condition statement is /Person[(FirstName="John") or (FirstName =" Bill ")]). After you upgrade the environment to FIM 2010 R2, the nightly job that maintains sets and groups unexpectedly removes certain members from this set.
Issues that are fixed in the FIM Service SQL Server Agent job
Issue 1This update changes the behavior of the FIM_TemporalEventsJob SQL Server Agent job. This SQL Server Agent job now has improved performance that reduces the possibility that other requests are blocked in SQL Server.
Issues that are fixed in FIM Certificate Management
Issue 1This update fixes various issues in Certificate Management to improve error messages handling.
Issues that are fixed in the Password Change Notification Service
Issue 1Assume that you run Password Change Notification Service (PCNS) setup together with the SCHEMAUPDATE=TRUE option, and the schema is updated successfully. In this situation, an error message is unexpectedly displayed at the end of the setup process.
After this update is installed, the Setup program does not display the error message when the schema update is successful.
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/824684/ )Description of the standard terminology that is used to describe Microsoft software updates