FAQs

2. I don't see test results for the OS/Product combination that I am running. What should I do?

The Microsoft Patch Qualification team strategically tests the latest Rockwell Software product release and two prior, as we cannot test every possible OS combination.

We take into consideration Microsoft's product support lifecycle strategy and the software requirements of each Rockwell Software package. We feel our selection process provides the best testing coverage over supported combinations.

Please note that if you see a critical patch qualified on a different OS/CPR combination, we would suggest that the same patch on an alternate OS/CPR combination, should be considered as relatively 'low risk' and could be applied at your discretion.

As always, we do suggest that before implementing any Microsoft updates, you should verify them on a non-production system, or when the facility is non-active, to ensure that there are no unexpected results or side effects.

3. How does Rockwell determine which Microsoft Patches to test?

Each month the goal for the MS Patch Qualification team is to qualify Microsoft Security Bulletins against the most popular set of Rockwell Automation software solutions.

We use the Windows Server Update Services (WSUS) to manage and deploy patches as required for each PC.

If available via WSUS, we may apply other Windows Updates such as Microsoft Office updates and general Windows fixes that typical ICS users would also be presented with.

The MS Patch Qualification team now consumes the Monthly Rollup that includes both Security and Feature updates. Beginning in October 2016 Microsoft began offering security patches only in rollups. They publish Security-only updates which have only the security patches, and a Monthly Rollup which includes all security and feature updates.

This article further explains the original announcement: Further simplifying servicing models for Windows 7 and Windows 8.1.

When Microsoft started Patch Rollups they took away the ability to install or remove individual patches, or to even see if the patches in the Rollup have been installed.

For this reason we no longer list the individual patches/MS bulletin on our website if they are part of a Rollup that we tested. The easiest way to see the KB's of the rollups is to use this site and type monthly rollup at the top of Microsoft Update Catalog.

In the catalog Security-only updates are named "Security Only Update", and theMonthly Rollup is named "Security and Quality Rollup"

Currently our 'Not Tested' KBs are taken from https://portal.msrc.microsoft.com/en-us/security-guidance, and should be security patches. (Previous 'Not Tested' were taken from security Bulletins.)

These pertain to MS products:

• That are not required by Rockwell Software,
• That don't apply to our testing scope, or
• Apply to MS Operating Systems that are not used in any test beds.

4. I don't see new MS Security Updates for Windows® Server 2003 R2 SP2, why?

The Microsoft Life Cycle for Windows Server 2003 R2 SP2 ended on July 14, 2015.

5. What happened to CPR 4, CPR6, CPR7, CPR9, SR2, CPR9 S3, CPR9 SR6, etc. Testing?

To be consistent with Rockwell Automation Product Support Policies, the Microsoft Patch Qualification Team targets the current software release, plus two prior releases. This is balanced against the need to test as many client and server Microsoft operating system combinations, and appropriate product versions.

6. When will you publish your results?

Microsoft updates are applied on the 2nd Tuesday of each month with the goal of publishing results within 10 business days.

Refer to Microsoft's "Windows 10 update servicing cadence": https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-10-update-servicing-cadence/ba-p/222376

7. How do I get monthly e-mail notifications when new Patch Qualification results are available?

Email notifications are not available at this time. Please visit our site according to our update schedule.

8. Where do I find the Rockwell Automation Knowledgebase and how do I login?

The link for the Rockwell Automation Knowledgebase is https://rockwellautomation.custhelp.com/app/home. 

All users, including Rockwell Automation employees, distributors and customers will need to create an account, even if you have used another Rockwell Automation database.

Registration is Free, however access to certain content may require a TechConnect Support agreement.

9. What does a recommendation of 'Fully Qualified', 'Partially Qualified', 'Not Qualified', etc. Mean?

The Rockwell Automation 'Recommendation' documents the results of the MS Patch testing as one of the following:

10. What versions of Internet Explorer do you test?

Browsers are configured to update automatically

• IE11 is installed on SR7.
• Edge is installed on SR11 and SR12.

11. Do you test or qualify the FactoryTalk Gateway Product?

Yes, the FactoryTalk Gateway and FactoryTalk Linx Gateway products (formerly known as RSOPC Gateway) are tested and considered to be part of the RSLinx Enterprise family. So the test results will show as RSLinx Enterprise, but do cover the FactoryTalk Gateway product.

12. Do you test or qualify the Rockwell Software Patch Roll-ups?

Yes, beginning December 2009 we started installing applicable Patch Roll-ups on CPR9 SR1 and continue this process today.
The Master list of all available Patch TOCs is ID QA57432.

Alternately, Monthly Patch Roll-ups can be obtained for certain products, within the Rockwell Automation Knowledgebase.
Tip: Search the KnowledgeBase for "Patch TOC" and review each products Table of Contents to see what's new!

13. What Adobe® Reader software does Patch Qualification test with?

Starting in February 2009 we have tested the following combinations with no issues found.

• Adobe Reader v20.013.x is installed on the SR12 test bed
• Adobe Reader v19.021.x is installed on the SR11 test bed
• Adobe Reader v11.0.x is installed on the SR7 / SR7.1 test bed

Archived Test beds:

• Adobe Reader v18.011.x was installed on the CPR9 SR10 test bed
• Adobe Reader v17.012.x was installed on the CPR9 SR9 test bed
• Adobe Reader v11.0.x was installed on the CPR9 SR5 / SR5.1 / SR6 / SR9 test beds
• Adobe Reader v10.0.x was installed on the CPR9 SR4 test bed
• Adobe Reader v9.4.x was installed on the CPR9 SR3 test bed
• Adobe Reader v9.1.x was installed on CPR6, CPR7 and CPR9 SR1 / SR2 test beds

Adobe Reader is only installed and passively tested on a subset of test bed systems.

14. What Antivirus software does Patch Qualification test with?

Rockwell Automation Knowledgebase article ID PN24 contains details about Rockwell Software products and Antivirus Software.

15. Do you test the Enhanced Mitigation Experience Toolkit (EMET)?

No, EMET reached end of life on July 31, 2018.

EMET 4.0 was implemented on the CPR9 SR5.1/SR6 test bed which has been retired. Protection was configured using the recommendation file available in RA Knowledgebase article ID QA17326.

16. Where can I find the lasted information on the Microsoft Longevity Lifecycle?

To view the Microsoft Product Support Lifecycle information page, click -> HERE

Important End-Of-Lifecycle dates:

17. What does 'CPR' and 'SR' stand for?

CPR stands for Coordinated Product Release

The strategy behind a coordinated product release is to ensure that the software works together as a reliable, stable and robust system.
Applications that are required to operate as a system will continue to share common platform services and will be designed, developed and tested in a tightly controlled and coordinated process.

SR stands for Service Release

The Service Release is listed because Rockwell Automation will no longer limit releases to once a year for FactoryTalk and Rockwell Software-branded software products.
This refinement of release types increases flexibility and helps improve time-to-market capability while still ensuring compatibility of the products as a system.