Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

This topic describes how to deploy the latest update rollup for Microsoft Exchange Server 2010. Service packs and update rollups are part of the servicing strategy for Exchange 2010. They provide an effective and easy-to-use method to distribute Exchange 2010 fixes and modifications. We recommend that you install the latest service pack and update rollup to keep the product up-to-date.

Update rollups for the release to manufacture (RTM) version of Exchange Server 2010, also known as Exchange Server 2010 Service Pack 0, will continue to be released as long as Exchange 2010 is supported as per the support timeline that is described on the Microsoft Support Lifecycle Web site. For more information about which versions and service packs are supported, see the Support Lifecycle Index.

Note:
The latest update rollup in the series includes the fixes that were released in previous update rollups for the same series. For example, if you install Update Rollup 3 for Exchange 2010 RTM, it includes the fixes that were released in Update Rollup 1 for Exchange 2010 RTM and Update Rollup 2 for Exchange 2010 RTM.

Important Considerations Prior to Installing an Exchange 2010 Update Rollup

The following sections discuss important issues to consider before you deploy an Exchange 2010 update rollup package.

Certificate Revocation List

When you install an update rollup package, Exchange tries to connect to the certificate revocation list (CRL) Web site. Exchange examines the CRL list to verify the code signing certificate. (To download and view the CRL list, see CodeSignPCA.crl.) If Exchange can't connect to the CRL Web site, the following symptoms may occur:

  • The installation takes a long time to complete.

  • You receive the following message during the installation: Creating native images for .Net assemblies

When Exchange isn't connected to the Internet, each CRL request must complete before the installation can continue.

To work around this issue and to reduce installation times, turn off the Check for publisher’s certificate revocation option on the server that is being upgraded. Use the following steps:

  1. Start Internet Explorer.

  2. On the Tools menu, click Internet Options.

  3. Click the Advanced tab, and then locate the Security section.

  4. Clear the Check for publisher’s certificate revocation check box, and then click OK.

  5. After the update rollup installation is complete, select the Check for publisher’s certificate revocation option.

    Note:
    The Check for publisher's certificate revocation option is set on a per-account basis.

For more information, see Microsoft Knowledge Base article 971445, Generating NGEN images takes longer than expected.

Outlook Web App Customizations

When you apply an update rollup package, the update process may update the Logon.aspx file. If you have modified the Logon.aspx file, the file can't be updated successfully. Therefore, Microsoft Office Outlook Web App may not be updated correctly. In this scenario, after the update process is finished, Outlook Web App may display a blank page.

To work around this issue, rename the Logon.aspx file before you apply the update rollup, and then, after you apply the update, re-create the Outlook Web App customizations in the Logon.aspx file.

We recommend that you make a backup copy of any customized Outlook Web App files before you apply an update rollup. For more information about Outlook Web App customization details, see Customize the Outlook Web App Sign-In and Sign-Out Pages.

Proxying between Client Access Servers

If you have deployed Client Access server to Client Access server proxying, you must apply the update rollup to the Internet-facing Client Access servers before you apply the update rollup to non-Internet-facing Client Access servers. For other Exchange 2010 configurations, the recommended order in which to apply the update rollup is as follows: Client Access server, Hub Transport server, and Mailbox server.

For more information about Client Access to Client Access server proxying, see Understanding Proxying and Redirection.

Backup Recommendations

We strongly recommend that you create the following backups before you install an update rollup package:

  • A full backup of all Exchange databases on the server.

  • A system state backup of the server.

Exchange and Internet Services Considerations

When you install an update rollup, the Setup program automatically stops the appropriate Exchange services and Internet Information Services (IIS)-related services. Therefore, during the installation process, the server may be unable to service user requests. We recommend that you install an update rollup during a period of scheduled maintenance or during a period of low business impact.

Slipstream Update Rollup Installations

Exchange 2010 doesn't support the slipstream installation of an update rollup during the installation of a service pack.

The Exchange installation folder includes an Updates folder. The Updates folder supports a new installation of Exchange. When you perform a new Exchange installation, you can copy an update rollup to the Updates folder. In this scenario, the update rollup package is applied during the installation of Exchange.

To perform a supported new installation, follow these example steps:

  1. Copy the Exchange 2010 RTM files to a local directory on the server or to a network share.

  2. Place the appropriate update rollup package in the Updates subdirectory.

  3. Install Exchange. The update rollup is automatically applied during the installation of Exchange.

The Updates folder isn't supported for use during a service pack installation. Therefore, you can't include (that is, slipstream) an update rollup along with the installation of a service pack. The slipstream installation of an update rollup during a service pack installing hasn't been tested. Therefore, you may experience unintended results.

To perform a supported upgrade installation, follow these example steps:

  1. Install Exchange 2010 Service Pack 1 (SP1) on a computer that is running Exchange 2010 RTM together with Exchange 2010 Update Rollup 1.

  2. Install Exchange 2010 SP1 Update Rollup 2.

Note:
You can't use the Updates folder in combination with running the Setup /m:upgrade unattended install.

Antivirus Services Considerations

Before you install an update rollup package or a service pack, make sure that all antivirus services are stopped.

Pre-Installation Checklist for an Exchange 2010 Update Rollup

Before you install an Exchange 2010 update rollup, we recommend that you review Exchange 2010 Servicing. That topic contains more information about the updates that are included in an update rollup and the methodology behind the Exchange update process.

Applying update rollups to Mailbox servers that are part of a database availability group (DAG) requires specific planning and application steps. For more information about how to apply update rollups to Exchange 2010 DAG member servers, see Installing Update Rollups on Database Availability Group Members.

You can use the following pre-installation checklist to help you install an Exchange 2010 update rollup:

  1. Determine which update rollup packages are installed on your Exchange server roles

    Installed update rollup packages are shown in the Programs and Features dialog box in Control Panel. To see the list of installed updates, click View installed updates. Update rollup packages appear as "Update Rollup N for Exchange Server 2010 KBNNNNNN." You can use this information to help determine whether any update rollup packages are installed on the computer.

  2. Determine whether any interim updates are installed

    Out-of-band fixes for certain Exchange issues are known as interim updates. The issue or issues that an interim update resolves may be fixed in a later update rollup package. Before you install an update rollup package, you must remove any interim updates from the computer. Interim updates appear in the Programs and Features dialog box in Control Panel. These updates appear as "Interim Update for Exchange Server 2010 KBNNNNNN."

    Note:
    You can remove the interim updates on a per-computer basis. You don't have to remove all the interim updates from all the computers in the organization before you install an update rollup.
  3. Review interim updates

    Examine any interim updates to determine whether they are resolved in the update rollup that you plan to install. To do this, read the Microsoft Knowledge Base article that corresponds to the interim update. If the Knowledge Base article mentions that the issue is resolved in the update rollup package that you plan to install or in an earlier update rollup package, you can remove the interim update and then install the update rollup without the risk of experiencing the specific issue that the interim update resolves. In this scenario, you don't have to obtain a replacement interim update.

    However, if the Knowledge Base article doesn't mention that the issue is resolved in the update rollup package that you plan to install, you must obtain a replacement interim update from Microsoft Customer Support Services (CSS). In this scenario, you must remove the interim update, install the specific update rollup package, and then install an interim update that is appropriate for the update rollup level of the computer.

    Important:
    Interim updates are created for a specific Exchange build. Therefore, an interim update that is suitable for Exchange 2010 Update Rollup 1 is not suitable for Exchange 2010 Update Rollup 2. You must contact CSS to obtain an interim update that is appropriate for the specific Exchange build that you're running. As previously mentioned, if the issue that the interim update resolves is fixed in the specific update rollup that you install, you don't have to obtain and install a replacement interim update.
  4. Obtain the latest update rollup package

    The update rollup packages are available via Microsoft Update and the Microsoft Download Center. In the Search box on the Microsoft Download Center, type "Exchange 2010 update rollup" to find links to the rollup packages. We strongly recommend that you install the most recent update rollup package that is available. Microsoft releases update rollup packages approximately every six to eight weeks. This step makes sure that you benefit from the latest fixes for Exchange 2010.

Install an Exchange 2010 Update Rollup

Microsoft releases update rollup packages approximately every six to eight weeks. The rollup packages are available via Microsoft Update and the Microsoft Download Center. In the Search box on the Microsoft Download Center, type "Exchange 2010 update rollup" to find links to the rollup packages.

Note:
If you use Microsoft Update to install an update rollup package or if you install an update rollup package in silent mode, some Exchange services may be disabled. This issue occurs if the update rollup package must update a file that is being used.
  1. Ensure that you have downloaded the appropriate rollup to a local drive on your Exchange servers, or on a remote network share.

  2. Run the Windows Installer *.msp Setup file that you downloaded in step 1.

Post-Installation of an Exchange 2010 Update Rollup

When the installation is finished, complete the following tasks:

  • Start the Services MMC snap-in, and then verify that all the Exchange-related services are started successfully.

  • Log on to Outlook Web App to verify that it's running correctly.

  • Restore Outlook Web App customizations, and then check Outlook Web App for correct functionality.

  • After the update rollup installation is complete, select the Check for publisher’s certificate revocation option in Internet Explorer. See "Certificate Revocation List" earlier in this topic.

View the Exchange 2010 Version Number

After you install an update rollup for Exchange 2010, the version of Exchange Server isn't updated to show that the update rollup is installed. This issue occurs because the version number that is displayed by the Exchange Management Console or by other administrative mechanisms is obtained from the Exchange Server Object in Active Directory.

For more information about Exchange 2010 version information, see Exchange 2010: Editions and Versions.

View Installed Update Rollups

The account must be a member of the local administrators group in Active Directory to view the installed update rollups.

  1. Click Start, click Control Panel, and then click Programs and Features.

  2. In the Tasks list, click View installed updates.

  3. In the Name column, locate the Exchange Update Rollups that are installed on the computer.

Remove an Update Rollup

If you need to remove a specific update rollup, use the following procedure.

  1. Click Start, and then click Control Panel.

  2. Select Installed Updates, and in the Name column, select the update that you want to remove, and then click Uninstall.

Exchange Server Build Numbers and Release Dates

For information about build numbers and release dates for each version of Microsoft Exchange, see Exchange Server Build Numbers and Release Dates.