Microsoft has released Update Rollup 3 for Microsoft Exchange Server 2010 Release to Manufacturing (RTM). This article describes the following information about the update rollup:
The issues that the update rollup fixes
How to obtain the update rollup
The prerequisites to install the update rollup
Issues that the update rollup fixes
Update Rollup 3 for Exchange Server 2010 RTM fixes the following issues:
MS10-024: Vulnerabilities in Microsoft Exchange and Windows SMTP Service could allow denial of service
RPC clients or MAPI on the Middle Tier clients may not receive responses from the mailbox server role on an Exchange 2010 server
Update rollup information
To download and to install Update Rollup 3 for Exchange Server 2010 RTM, visit the following Microsoft Update Web site:
Note Microsoft Update does not detect Update rollups on Exchange Server 2010 Mailbox servers that are part of a database availability group (DAG).
You may want to deploy Update Rollup 3 for Exchange Server 2010 RTM to multiple computers that are running Exchange Server 2010 RTM. Or, you may want to deploy Update Rollup 3 for Exchange Server 2010 RTM to Mailbox servers that are part of a database availability group (DAG). To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
Important information for customers installing the update on computers that are not connected to the Internet
The following issues occurs if your computer is not connected to the Internet and cannot access the following Microsoft Web site:
You may experience long installation times with a corresponding message that shows
"Creating Native images for .Net assemblies"
This is caused by network requests to connect to “http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl” Web site and look up the certificate revocation list for each assembly that Native image Generation(NGen) compiles to native code. Because the Exchange Server is not connected to the Internet, each request must wait to time-out before it moves on.
To resolve this problem, follow these steps to turn off “Check for publisher’s certificate revocation” on the server that you are upgrading.
In Internet Explorer, select Tools, Internet Options, Advanced Tab, Security Section.
Clear “Check for publisher’s certificate revocation”.
Click OK to close the Internet Options dialog box.
We recommend that you clear this security option in Internet Explorer if the computer was in a tightly controlled environment.
When setup is complete, recheck the “Check for publisher’s certificate revocation” check box.
Important information for Outlook Web App users about Outlook Web App customization
When you apply an update rollup package, the update process overwrites the Microsoft Outlook Web App (OWA) files if it is necessary. If you have changed the Logon.aspx file or other OWA files, the customizations are overwritten to make sure that OWA is updated correctly. After you apply the update rollup package, you must re-create OWA customization in Logon.aspx.
We recommend that you always make a backup copy of any customized OWA files before you apply the update rollup. For more information about OWA customization, visit the following Microsoft Web site:
If you are a CAS Proxy Deployment Guidance customer, and if you have deployed CAS-CAS proxying, apply the update rollup to the Internet-facing Client Access servers before you apply the update rollup to the non-Internet-facing Client Access servers. For other Exchange Server 2010 configurations, the order in which you apply the update rollup to the servers is not important.
For more information about CAS-CAS proxying, visit the following Microsoft Web site:
The following list contains prerequisites for the Update Rollup 3 for Exchange Server 2010 RTM:
Install Exchange Server 2010 RTM on the computer before you apply this update rollup.
Remove all interim updates for Exchange Server 2010 before you apply this update rollup.
The required services are automatically stopped and then restarted when you apply this update rollup.
To remove Update Rollup 3 for Exchange Server 2010 RTM, use Add or Remove Programs in Control Panel. Then, remove update 981401.
For more information about terminology that Microsoft uses to describe software updates, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates