Description of Update Rollup 8 for Exchange Server 2010 Service Pack 2

Issues that the update rollup resolves

Update Rollup 8 for Exchange Server 2010 SP2 addresses the vulnerabilities that are described in Microsoft Security Bulletin MS13-105.

Update rollup information

To download and install Update Rollup 8 for Exchange Server 2010 SP2, go to the following Microsoft Update website:

http://update.microsoft.com For more information about how to install the latest Update Rollup for Exchange 2010, go to the following Microsoft website:

General information about how to install the latest Update Rollup for Exchange 2010 Note Microsoft Update does not detect update rollups on Exchange Server 2010 mailbox servers that are part of a database availability group (DAG).

To enable you to apply this update rollup in the following scenarios, the update rollup is also available from the Microsoft Download Center:

• Deploy Update Rollup 8 for Exchange Server 2010 SP2 to multiple computers that are running Exchange Server 2010 SP2

• Deploy Update Rollup 8 for Exchange Server 2010 SP2 to mailbox servers that are part of a DAG

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Important information for customers who install the update on computers that are not connected to the Internet

When you install this update rollup on a computer that is not connected to the Internet, you may experience long installation times. Additionally, you may receive the following message:

This behavior is caused by network requests to connect to the http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl website. These network requests represent attempts to access the certificate revocation list for each assembly that native image generation (NGen) compiles to native code. However, because the Exchange server is not connected to the Internet, each request must wait to time out before the process continues.

To resolve this issue, follow these steps:

1. On the Tools menu in Windows Internet Explorer, click Internet Options, and then click the Advanced tab.

2. In the Security section, click to clear the Check for publisher's certificate revocation check box, and then click OK.

We recommend that you clear this security option in Internet Explorer only if the computer is in a tightly controlled environment. When setup is complete, click to select the Check for publisher’s certificate revocation check box again.

Update issue on computers that have customized Outlook Web App files

Important Before you apply the update rollup, we recommend that you make a backup copy of any customized Outlook Web App files. For more information about how to customize Outlook Web App, go to the following Microsoft website:

Outlook Web App customization details When you apply an update rollup package, the update process updates the Outlook Web App files if they are required. Therefore, any customizations to the Logon.aspx file or to other Outlook Web App files are overwritten, and you must re-create the Outlook Web App customizations in Logon.aspx.

Update issue for CAS Proxy Deployment Guidance customers who deploy CAS-CAS proxying

If you meet both of the following conditions, apply the update rollup on the Internet-facing Client Access servers before you apply the update rollup on the non-Internet-facing Client Access servers:

• You are a CAS Proxy Deployment Guidance customer.

• You have deployed CAS-CAS proxying.

Note For other Exchange Server 2010 configurations, you do not have to apply the update rollup on the servers in a certain order.

For more information about CAS-CAS proxying, go to the following Microsoft website:

General information about CAS-CAS proxying

Prerequisites

To apply this update rollup, you must have Exchange Server 2010 SP2 installed.

Note Remove all interim updates for Exchange Server 2010 SP2 before you apply this update rollup.

Restart requirement

The required services are automatically restarted when you apply this update rollup.

Removal information

To remove Update Rollup 8 for Exchange Server 2010 SP2, use the Add or Remove Programs item in Control Panel to remove update 2903903.

References

For more information about terminology that Microsoft uses to describe software updates, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates