Summary
This update includes improvements for the following:
-
It addresses an issue that might affect some types of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) connections. These connections might have handshake failures. For developers, the affected connections are likely to receive one or more records followed by a partial record with a size of less than 5 bytes within a single input buffer. If the connection fails, your app will receive the error, “SEC_E_ILLEGAL_MESSAGE”.
Known issues in this update
|
Symptom |
Next step |
|
After installing this update and restarting your device, you might receive the error, "Failure to configure Windows updates. Reverting Changes. Do not turn off your computer", and the update might show as Failed in Update History. |
This is expected in the following circumstances:
If you have purchased an ESU key and have encountered this issue, please verify you have applied all prerequisites and that your key is activated. For information on activation, please see this blog post. For information on the prerequisites, see the How to get this update section of this article. |
How to get this update
Before installing this update
To install Windows 7 SP1 or Windows Server 2008 R2 SP1 updates released on or after July 2019, you must have the following required updates installed.
-
Install the SHA-2 code signing support updates:
You must have the SHA-2 update (KB4474419) that is dated September 23, 2019 or a later SHA-2 update installed and then restart your device before you apply this update. For more information about SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.
You must have installed the servicing stack update (SSU) (KB4490628) that is dated March 12, 2019. After update KB4490628 is installed, we recommend that you install the latest SSU update. For more information about the latest SSU update for Windows 7 SP1 or Windows Server 2008 R2 SP1, see ADV990001 | Latest Servicing Stack Updates. -
Install the Extended Security Update (ESU):
You must have installed the "Extended Security Updates (ESU) Licensing Preparation Package" (KB4538483) or the "Update for the Extended Security Updates (ESU) Licensing Preparation Package" (KB4575903). The ESU licensing preparation package will be offered to you from WSUS. To get the standalone package for ESU licensing preparation package, search for it in the Microsoft Update Catalog.
You must have purchased the Extended Security Update (ESU) for on-premises versions of these operating systems and follow the procedures in KB4522133 to continue receiving security updates after extended support ends. Extended support for Windows 7 SP1 and Windows Server 2008 R2 SP1 ended on January 14, 2020.
Important You must restart your device after you install these required updates.
Install this update
|
Release Channel |
Available |
Next Step |
|
Windows Update and Microsoft Update |
No |
See the other options below. |
|
Microsoft Update Catalog |
Yes |
To get the standalone package for this update, go to the Microsoft Update Catalog website. |
|
Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager |
No |
You can manually import these updates into Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. For WSUS instructions, see WSUS and the Catalog Site. For Configuration Manger instructions, see Import updates from the Microsoft Update Catalog. |
File information
For a list of the files that are provided in this update, download the file information for update KB5020448.
References
For more information about ESU and which editions are supported, see KB4497181.
Learn about the standard terminology that is used to describe Microsoft software updates.
