Update to Microsoft Update client

Applies to: Windows 8 EnterpriseWindows 8Windows 8 Pro More

This article describes the update that further improves the security of Windows Update (WU) / Microsoft Update (MU) client for Windows 8, Windows RT, Windows Server 2012, Windows 7 Service Pack 1 (SP1), and Windows Server 2008 R2 SP1.

Note Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 with update 2919355 already include these improvements.

More Information


Improvements

This update includes the following improvements:
  • Further hardening of infrastructure files that are used by WU/MU client
  • A more secure communication channel between the WU/MU client and service

Update information

How to obtain this update

This update will be rolled out gradually. It will be automatically installed if Automatic Updates is turned on and is either set to automatically install updates or notify to install updates.

This update can also be deployed through Windows Server Update Services (WSUS) or as a stand-alone package.
Deploying this update through WSUS
PlatformOptions
Windows 7 SP1 and Windows Server 2008 R2 SP1
  • Install KB 2938066 on WSUS Server.
  • All Windows 7 SP1, Windows Server 2008 R2 SP1 computers that are being managed by the WSUS server will be automatically updated during the next scheduled AU (Automatic Updates) scan as long as "Automatic Updating" is turned ON.
Windows 8 and Windows Server 2012Approve KB 2937636 using the Admin console so that it can be deployed together with other updates for Windows per your deployment schedule.
Stand-alone packages for Windows 8 and Windows Server 2012
The following files are available for download from the Microsoft Download Center.
Operating systemUpdate
All supported x86-based versions of Windows 8 (KB2937636)Download Download the package now.
All supported x64-based versions of Windows 8 (KB2937636)Download Download the package now.
All supported x64-based versions of Windows Server 2012 (KB2937636)Download Download the package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Stand-alone packages for Windows 7 SP1 and Windows Server 2008 R2 SP1
The following files are available for download from Windows Update.
Operating systemUpdate
All supported x86-based versions of Windows 7 SP1Download Download the package now.
All supported x64-based versions of Windows 7 SP1Download Download the package now.
All supported x86-based versions of Windows Server 2008 R2 SP1Download Download the package now.
All supported x64-based versions of Windows Server 2008 R2 SP1Download Download the package now.
All supported Itanium-based versions of Windows Server 2008 R2 SP1Download Download the package now.

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information


For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates