Each month the goal for the MS Patch Qualification team is to qualify Microsoft Security Bulletins against the most popular set of Rockwell Automation software solutions.
We use the Windows Server Update Services (WSUS) to manage and deploy patches as required for each PC.
If available via WSUS, we may apply other Windows Updates such as Microsoft Office updates and general Windows fixes that typical ICS users would also be presented with.
The MS Patch Qualification team now consumes the Monthly Rollup that includes both Security and Feature updates. Beginning in October 2016 Microsoft began offering security patches only in rollups. They publish Security-only updates which have only the security patches, and a Monthly Rollup which includes all security and feature updates.
This article further explains the original announcement: Further simplifying servicing models for Windows 7 and Windows 8.1.
When Microsoft started Patch Rollups they took away the ability to install or remove individual patches, or to even see if the patches in the Rollup have been installed.
For this reason we no longer list the individual patches/MS bulletin on our website if they are part of a Rollup that we tested. The easiest way to see the KB's of the rollups is to use this site and type monthly rollup at the top of Microsoft Update Catalog.
In the catalog Security-only updates are named "Security Only Update", and theMonthly Rollup is named "Security and Quality Rollup"
Currently our 'Not Tested' KBs are taken from https://portal.msrc.microsoft.com/en-us/security-guidance, and should be security patches. (Previous 'Not Tested' were taken from security Bulletins.)
These pertain to MS products:
- That are not required by Rockwell Software,
- That don't apply to our testing scope, or
- Apply to MS Operating Systems that are not used in any test beds.