MS12-026: Description of the security update for Microsoft Forefront Unified Access Gateway 2010 Service Pack 1: April 10, 2012


Microsoft has released security bulletin MS12-026. To view the complete security bulletin, visit the following Microsoft website:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Known issues with this security update

  • After you install this security update on a server that is running Forefront Unified Access Gateway 2010, you may be redirected to an error page instead of to the Outlook Web Access application. For more information, click the following article number to go to the article in the Microsoft Knowledge Base: 
    FIX: You may be redirected to an error page after you install security update 2649261 on a server that is running Forefront Unified Access Gateway 2010
  • After you install this security update, you may receive an error message that resembles the following when you try to install update 2585140:

    Windows Installer

    The upgrade patch cannot be installed by the Windows Installer service because the program to be upgraded may be missing, or the upgrade patch may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade patch.

    To resolve this issue, uninstall security update 2649261 and then install update 2585140. After you install update 2585140, install security update 2649262.

    For more information about update 2585140 and security update 2649262, click the following article numbers to view the article in the Microsoft Knowledge Base:

    2585140 Description of the Service Pack 1 Update 1 for Forefront Unified Access Gateway (UAG)
    MS12-026: Description of the security update for Microsoft Forefront Unified Access Gateway 2010 Service Pack 1 Update 1: April 10, 2012

Frequently asked questions

Q1: Can security update for UAG SP1 U1 (KB 2649262) be installed on a system that already has UAG SP1 U1 Rollup 1 (KB 2647899) installed?
A1: Yes, KB 2649262 can be installed on both SP1 U1 and on SP1 U1 Rollup1. If the security update is installed on SP1 U1 (without Rollup 1), you do not also have to install Rollup 1. (Note that KB 2649262’s build number is 4.0.1773.10190, while KB 2647899’s build number is 4.0.1773.10110).

Q2: If you install security update 2649261 (KB 2649261 as described in security bulletin MS12-026) on top of UAG SP1 (KB 2522485), and later install UAG SP1 U1(KB 2585140), do you have to install security update 2649262 (MS12-026) to be protected by this bulletin?
A2: Yes


The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

File nameFile versionFile sizeDateTimePlatform
Adfs.internalsite.incNot Applicable40,99817-Feb-201201:11Not Applicable
Adfs.redirecttoorigurl.aspNot Applicable2,29329-Jan-201220:14Not Applicable
Adfs.utils.incNot Applicable1,14229-Jan-201220:14Not Applicable
Agent_lin_helper.jarNot Applicable4,686,75503-Aug-201121:51Not Applicable
Agent_mac_helper.jarNot Applicable3,834,73403-Aug-201121:51Not Applicable
Agent_win_helper.jarNot Applicable1,537,14603-Aug-201121:51Not Applicable
Certifiedendpointenrollment.utils.incNot Applicable1,14229-Jan-201220:14Not Applicable
Internalsite.incNot Applicable40,99817-Feb-201201:11Not Applicable
Internalsite.utils.incNot Applicable1,14229-Jan-201220:14Not Applicable
Internalsitesharepoint.incNot Applicable8,78317-Feb-201201:11Not Applicable
Microsoftclient.jarNot Applicable117,07503-Aug-201121:51Not Applicable
Monitor.applicationlist.aspNot Applicable14,66320-Feb-201221:30Not Applicable
Monitor.applicationmonitor.aspNot Applicable26,95320-Feb-201221:30Not Applicable
Monitor.applicationmonitorlinerefresh.aspNot Applicable2,08020-Feb-201221:30Not Applicable
Monitor.applicationstatisticsresults.aspNot Applicable25,61520-Feb-201221:30Not Applicable
Monitor.applicationuserstatistics.aspNot Applicable15,35520-Feb-201221:30Not Applicable
Monitor.damonitorcurrentstatus.aspNot Applicable8,70020-Feb-201221:30Not Applicable
Monitor.default.aspNot Applicable1,23620-Feb-201221:30Not Applicable
Monitor.eventreport.aspNot Applicable18,90520-Feb-201221:30Not Applicable
Monitor.eventviewer.aspNot Applicable7,88420-Feb-201221:30Not Applicable
Monitor.eventviewerrefresh.aspNot Applicable4,25220-Feb-201221:30Not Applicable
Monitor.exceltable.aspNot Applicable4,50120-Feb-201221:30Not Applicable
Monitor.farmmonitor.aspNot Applicable10,21120-Feb-201221:30Not Applicable Applicable2,97723-Jun-201103:02Not Applicable Applicable10,60520-Feb-201221:30Not Applicable Applicable5,72620-Feb-201221:31Not Applicable Applicable1,14229-Jan-201220:14Not Applicable
Monitor.naptseventreport.aspNot Applicable16,83020-Feb-201221:30Not Applicable
Monitor.nlbmonitor.aspNot Applicable13,80920-Feb-201221:30Not Applicable
Monitor.sessionlist.aspNot Applicable10,04920-Feb-201221:30Not Applicable
Monitor.sessionmonitor.aspNot Applicable5,83020-Feb-201221:30Not Applicable
Monitor.sessionmonitordatabuilder.aspNot Applicable2,29020-Feb-201221:30Not Applicable
Monitor.sessionparameters.aspNot Applicable7,87220-Feb-201221:30Not Applicable
Monitor.sessionstatisticsresults.aspNot Applicable23,81020-Feb-201221:30Not Applicable
Monitor.statisticsgraphdata.aspNot Applicable4,31920-Feb-201221:30Not Applicable
Monitor.userlist.aspNot Applicable8,51620-Feb-201221:30Not Applicable
Monitor.usermonitor.aspNot Applicable5,89020-Feb-201221:30Not Applicable
Monitor.usermonitordatabuilder.aspNot Applicable2,07620-Feb-201221:30Not Applicable
Monitor.usersessionstatistics.aspNot Applicable15,77820-Feb-201221:30Not Applicable
Monitor.userstatistics.aspNot Applicable9,81520-Feb-201221:30Not Applicable
Monitor.userstatisticsresults.aspNot Applicable20,06020-Feb-201221:30Not Applicable
Oesislocal.jarNot Applicable58,45203-Aug-201121:51Not Applicable
Otp.internalsite.incNot Applicable40,57817-Feb-201201:11Not Applicable
Otp.utils.incNot Applicable1,14229-Jan-201220:14Not Applicable
Otp.whlclientinst.incNot Applicable1,10420-Feb-201221:30Not Applicable
Redirect.aspNot Applicable5,77820-Feb-201220:35Not Applicable
Redirecttoorigurl.aspNot Applicable2,29329-Jan-201220:14Not Applicable
Uninstalluagupdate.cmdNot Applicable18320-Feb-201222:34Not Applicable

Article ID: 2649261 - Last Review: Jan 11, 2013 - Revision: 1

Microsoft Forefront Unified Access Gateway 2010 Service Pack 1