Description of Update Rollup 7 Version 3 for Exchange Server 2010 Service Pack 1

Issues that the update rollup resolves

This update rollup is being rereleased to address additional vulnerabilities that were identified in the previous fix for the issue that is described in Microsoft Security Bulletin MS12-058 - Critical.

This update replaces the original KB2743248 and KB2756496 updates.

Update rollup information

The file is available for download from the following Microsoft Download Center website:

Download the Exchange2010-KB2778158-x64 package now.Release date: November 13, 2012.


Important information for customers who install the update on computers that are not connected to the Internet

When you install this update rollup on a computer that is not connected to the Internet, you may experience long installation times. Additionally, you may receive the following message:

This behavior is caused by network requests to connect to the http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl website. These network requests represent attempts to access the certificate revocation list for each assembly that native image generation (NGen) compiles to native code. However, because the Exchange server is not connected to the Internet, each request must wait to time out before the process moves on.

To resolve this issue, follow these steps:

1. On the Tools menu in Windows Internet Explorer, click Internet Options, and then click the Advanced tab.

2. In the Security section, click to clear the Check for publisher's certificate revocation check box, and then click OK.

We recommend that you clear this security option in Internet Explorer only if the computer is in a tightly controlled environment. When setup is complete, click to select the Check for publisher’s certificate revocation check box again.

Update issue on computers that have customized Outlook Web App files

Important Before you apply the update rollup, we recommend that you make a backup copy of any customized Outlook Web App files. For more information about how to customize Outlook Web App, visit the following Microsoft website:

Outlook Web App customization detailsWhen you apply an update rollup package, the update process updates the Outlook Web App files if they are required. Therefore, any customizations to the Logon.aspx file or to other Outlook Web App files are overwritten, and you must re-create the Outlook Web App customizations in Logon.aspx.

Update issue for CAS Proxy Deployment Guidance customers who deploy CAS-CAS proxying

If you meet both of the following conditions, apply the update rollup on the Internet-facing Client Access servers before you apply the update rollup on the non-Internet-facing Client Access servers:

• You are a CAS Proxy Deployment Guidance customer.

• You have deployed CAS-CAS proxying.

Note For other Exchange Server 2010 configurations, you do not have to apply the update rollup on the servers in a certain order.

For more information about CAS-CAS proxying, visit the following Microsoft website:

General information about CAS-CAS proxying

Prerequisites

To apply this update, you must have the Exchange Server 2010 SP1 installed.

Note Remove all interim updates for Exchange Server 2010 SP1 before you apply this update rollup.

Restart requirement

The required services are automatically restarted when you apply this update rollup.

Removal information

To remove Update Rollup 7 Version 3 for Exchange Server 2010 SP1, use Add or Remove Programs in Control Panel to remove update 2778158.

REFERENCES

For more information about terminology that Microsoft uses to describe software updates, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates