Can't access applications when device authentication is enabled in Windows Server 2012 R2-based AD FS server

This article describes an issue that occurs in Active Directory Federation Services (AD FS) in Windows Server 2012 R2. A hotfix is available to fix this issue. The hotfix has a prerequisite.
Symptoms
Assume that you have many client devices joined to a Workplace. You register the devices with Device Registration Service (DRS). In this situation, you can't access production applications by using device authentication through AD FS on the client devices. 
Hotfix information
Important If you install a language pack after you install this hotfix, you must reinstall this hotfix. Therefore, we recommend that you install any language packs that you need before you install this hotfix. For more information, see Add language packs to Windows.

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that's described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there's a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section doesn't appear, submit a request to Microsoft Customer Service and Support to get the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that don't qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website: Note The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you don't see your language, it's because a hotfix isn't available for that language.

Prerequisites

To apply this hotfix, you must have April 2014 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) installed in Windows Server 2012 R2.

Registry information

To apply this hotfix, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix doesn't replace a previously released hotfix.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
See the terminology that Microsoft uses to describe software updates.
File Information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows Server 2012 R2

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.18 xxxWindows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
x64 Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Microsoft.identityserver.diagnostics.dll6.3.9600.18093151,55217-Oct-201520:44x86
Microsoft.identityserver.management.dll6.3.9600.18093353,79217-Oct-201520:44x86
Microsoft.identityserver.proxyservice.exe6.3.9600.1809373,21617-Oct-201520:44x86
Microsoft.identityserver.proxyservice.exe.configNot applicable1,06715-Mar-201400:10Not applicable
Microsoft.identityserver.service.dll6.3.9600.18093696,32017-Oct-201520:44x86
Microsoft.identityserver.webhost.dll6.3.9600.18093175,10417-Oct-201520:44x86
Microsoft.identityserver.web.dll6.3.9600.18093814,59217-Oct-201520:44x86
Microsoft.identityserver.dll6.3.9600.18093655,36017-Oct-201520:44x86

Additional file information

x64 Windows Server 2012 R2
File propertyValue
File nameAmd64_1a34883047e551fddf2af52b3003df55_31bf3856ad364e35_6.3.9600.18093_none_f375d5c4f51ecce1.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_1b2b7b5c093becf0871b819ab50400a0_31bf3856ad364e35_6.3.9600.18093_none_dd6f6fa49c2a7447.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_22660bb316acb9802e448bbf692e3fc2_31bf3856ad364e35_6.3.9600.18093_none_dcc07552a65537b8.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_3803af3ae3ea8a3f771f09b7411b3546_31bf3856ad364e35_6.3.9600.18093_none_a6f193b340deed72.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_41457b02f27d25ae21e23133b0b4a7c0_31bf3856ad364e35_6.3.9600.18093_none_801a3ffa5f929e28.manifest
File versionNot applicable
File size2,085
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_44df3286bb247ee0c9b330d31d6f73e6_31bf3856ad364e35_6.3.9600.18093_none_fe3cac7c58a14ab7.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_5090c0daef938c760eff8fd670b1642c_31bf3856ad364e35_6.3.9600.18093_none_072bf3ae77d73717.manifest
File versionNot applicable
File size708
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_50bf93a71116927cb37511d770df8467_31bf3856ad364e35_6.3.9600.18093_none_a64dd748e62d3a8d.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_5cf6eaa4a5bd4f6bd7b458a7cd7c88b8_31bf3856ad364e35_6.3.9600.18093_none_09d415c59a89d1ec.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_62d60d0d908615ef4640ef85db1b3952_31bf3856ad364e35_6.3.9600.18093_none_418f8a8f8d3d657c.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_67d63c3cf7a444e77dcb4546c453f730_31bf3856ad364e35_6.3.9600.18093_none_d78874eb9eb2807f.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_7186824ba55c090ba151080ce2e471d5_31bf3856ad364e35_6.3.9600.18093_none_44f5942186c49e0d.manifest
File versionNot applicable
File size714
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_7665ddb70d37ac7d3b89b296aea6bff0_31bf3856ad364e35_6.3.9600.18093_none_6cea9ef7fc0a4216.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_7894e89be4406591069ac90d38993d85_31bf3856ad364e35_6.3.9600.18093_none_0003d358e6de7f5f.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_859f267b884f421c3577326934ffafdf_31bf3856ad364e35_6.3.9600.18093_none_8cda48f67793caff.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_89bf4b03985a0424672af9f111525c27_31bf3856ad364e35_6.3.9600.18093_none_beb005b8b69ad9e9.manifest
File versionNot applicable
File size718
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_9393f497b9ad54fa14b7765297d5f989_31bf3856ad364e35_6.3.9600.18093_none_13a42127a64082af.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_96b0ba3863ddac351e5ee0b8ee246b20_31bf3856ad364e35_6.3.9600.18093_none_907dcb9ff99ab0cb.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_af3b29862b3feeab5ce78c2b4ff9156e_31bf3856ad364e35_6.3.9600.18093_none_57e3c8d08bc92dbe.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_c55495ef710b0e5e82fb2bf6a1eead01_31bf3856ad364e35_6.3.9600.18093_none_5a340152f893ddf1.manifest
File versionNot applicable
File size710
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_e0a9b5185273cf8462bbb501a612625a_31bf3856ad364e35_6.3.9600.18093_none_7b5aa65432cc0225.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_e4fd00bd6125a43095bf6ac0f2e077bf_31bf3856ad364e35_6.3.9600.18093_none_7540b49d29ca6aca.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_ea66daf2ae901da811ea98008cad85bd_31bf3856ad364e35_6.3.9600.18093_none_2d172d4cc8c916fe.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_f7e683bc1be84b7b3085860344cfd94b_31bf3856ad364e35_6.3.9600.18093_none_66ce31c80763cfcc.manifest
File versionNot applicable
File size722
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft-windows-i..yserver-eventtraces_31bf3856ad364e35_6.3.9600.18093_none_3026bca746f30643.manifest
File versionNot applicable
File size113,669
Date (UTC)17-Oct-2015
Time (UTC)16:05
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_cs-cz_be8cf1e22a6c0238.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_de-de_58f26745228852d1.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_en-us_01e33d3e11665e96.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_es-es_01ae9a22118d503b.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_fr-fr_a4661021045f669d.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_hu-hu_ebd69068e8bf35b9.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_it-it_8e8e0667db914c1b.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_ja-jp_30b38574ceac5df6.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_ko-kr_d41d6229c11d250c.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_nl-nl_baef2e9c9a6e5a9d.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_pl-pl_012b891e7f90c851.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_pt-br_037f73c27e1a5c35.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_pt-pt_0461432e7d89cc11.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_ru-ru_4b0454f2626b5a3d.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_sv-se_e6ff3f6759946498.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_tr-tr_900c89ae48506689.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_zh-cn_6169a7abf88838a8.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_zh-hk_6014a039f963ab38.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identitys..resources.resources_31bf3856ad364e35_6.3.9600.18093_zh-tw_6565e501f5f91518.manifest
File versionNot applicable
File size3,349
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameAmd64_microsoft.identityserver.nativeresources_31bf3856ad364e35_6.3.9600.18093_none_92d7b1eb61767f3b.manifest
File versionNot applicable
File size3,928
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver.diagnostics_31bf3856ad364e35_6.3.9600.18093_none_0beb68303907876e.manifest
File versionNot applicable
File size3,350
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver.management_31bf3856ad364e35_6.3.9600.18093_none_bfbc5fe593c294d3.manifest
File versionNot applicable
File size3,346
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver.proxyservice_31bf3856ad364e35_6.3.9600.18093_none_46d45709e9449fe1.manifest
File versionNot applicable
File size4,767
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver.service_31bf3856ad364e35_6.3.9600.18093_none_5cef8487002efeff.manifest
File versionNot applicable
File size3,334
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver.webhost_31bf3856ad364e35_6.3.9600.18093_none_790cf6b1e19b146e.manifest
File versionNot applicable
File size3,334
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver.web_31bf3856ad364e35_6.3.9600.18093_none_0ce1d34afc280e44.manifest
File versionNot applicable
File size3,318
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameMsil_microsoft.identityserver_31bf3856ad364e35_6.3.9600.18093_none_26ae572e7673ff4c.manifest
File versionNot applicable
File size3,302
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size17,241
Date (UTC)17-Oct-2015
Time (UTC)20:50
PlatformNot applicable
Properties

Article ID: 3105881 - Last Review: 11/11/2015 00:57:00 - Revision: 1.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation

  • kbqfe kbsurveynew kbfix kbautohotfix kbhotfixserver kbexpertiseinter KB3105881
Feedback