Link to home
Start Free TrialLog in
Avatar of Akulsh
AkulshFlag for India

asked on

How to use WSUS server to install 'meltdown and spectre' related patches

How may I use WSUS server to install 'meltdown and spectre' related patches on my Windows 2012-R2 servers? I have enabled Critical, Security and Definition updates, but don't find  'meltdown and spectre' related patches in installed updates. Thanks.
Avatar of John
John
Flag of Canada image

I do not think so. We DID update our servers but it was via BIOS updates (Servers 2012 R2 all) and that does not come via Windows Updates.

At this point, so far as I know, only Microsoft Surface can update Firmware via Windows Updates.
ASKER CERTIFIED SOLUTION
Avatar of btan
btan

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Yes, those are the Windows Updates, but in my experience, BIOS should be updated first if possible.

We see Windows Updates occurring after BIOS updates are complete.
Avatar of Akulsh

ASKER

Thank you all.
I was not asking about Firmware. I have updated Dell firmware on all servers and have also applied Meltdown-Spectre related VMware patches. (Almost all servers are VMs.)

My question was specific to WSUS server and none of the responses addressed that.

Btan, that barkly.com link ("A Clear Guide to Meltdown and Spectre Patches"), despite catchy title, says nothing about WSUS server. However, your other link  was quite useful, as it points to KB4338831 which seems the latest and most complete patch.

I did not find this KB4338831 update in our WSUS server but was able to import it thru 'Catalog' and then approved it. Really baffled that Microsoft's own update server (WSUS) does not download it as a security update. Thanks.
If the firmware is up to date then see if you can see updates via Windows Updates and that may help with WSUS
Avatar of Akulsh

ASKER

Please see my last posting.