Update Rollup 16 for Exchange Server 2010 Service Pack 3

When you install this update rollup on a computer that isn't connected to the Internet, you may experience a long installation time. Additionally, you may receive the following message:

This behavior is caused by network requests to connect to the following website:

http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl

These network requests represent attempts to access the certificate revocation list for each assembly that native image generation (NGen) compiles to native code. However, because the server that's running Exchange Server isn't connected to the Internet, each request must wait to time out before the process continues.

To fix this issue, follow these steps:

1. On the Tools menu in Internet Explorer, select Internet Options, and then select Advanced.

2. In the Security section, clear the Check for publisher's certificate revocation check box, and then select OK.

3. When setup is complete, select the Check for publisher's certificate revocation check box again.

Note Clear this security option in Internet Explorer only if the computer is in a tightly-controlled environment.

Important Before you apply this update rollup, make a backup copy of any customized Outlook Web Appfiles.

When you apply an update rollup package, the update process updates the Outlook Web App files, if it's required. Therefore, any customizations to the Logon.aspx file or to other Outlook Web App files are overwritten, and you must re-create the Outlook Web App customizations in Logon.aspx.

If you meet both of the following conditions, apply the update rollup on the Internet-facing Client Access servers (CAS) before you apply the update rollup on the non-Internet-facing Client Access servers:

• You're a CAS Proxy Deployment Guidance customer.

• You have deployed CAS-CAS proxying.

Note For other Exchange Server 2010 configurations, you don't have to apply the update rollup on your servers in any particular order.