Protection against Spectre SSB can not be installed on some systems

Hi experts.

For the processor series Intel Skylake and newer, there is a patch from Microsoft  for Win10 1803:
https://www.catalog.update.microsoft.com/search.aspx?q=4346084
(article: https://support.microsoft.com/en-us/help/4346084/kb4346084-intel-microcode-updates )

Why it may be, that it can be installed on various systems, while on other, identical systems (same CPU, Board, Firmware and OS build), the installation is denied saying
The update is not suitable for your computer.

?

I am out of ideas here. Could you observe the same?
LVL 62
McKnifeAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David FavorLinux/LXD/WordPress/Hosting SavantCommented:
Probably best to contact the motherboard manufacturer + pose your question.

If you're seeing the problem, likely many others are seeing the same problem + your motherboard company already has some sort of solution.

Also keep in mind, depending on when update came out + motherboards shipped, update may have already been installed.

Be sure you test to see if update has already been applied, before contacting your motherboard company.
0
McKnifeAuthor Commented:
Hi.

I could verify that it is a software problem: Booting windows2go (usb based test system), I could install that patch successfully.

There is a way to force installation using dism, but I would wait with that. Other updates install, so updating is not broken. I could make sure that it is not installed, yet and if installed, you get the message "this update is already installed", when executing the .msu file.
0
David FavorLinux/LXD/WordPress/Hosting SavantCommented:
If I had to figure this out, based on your comments, I'd contact the motherboard company.

Likely save a massive amount of time.
0
McKnifeAuthor Commented:
Read my last comment? It's not about the MoBo.
0
McKnifeAuthor Commented:
Self-solved.

Cause found, and the solution is amazing:

Microsoft's own microcode update KB410347 (remedy for Specter BTI) is the cause. If this has already been installed before, the newer microcode update KB4346084 can often not even be installed; but in any case it loses the protective effect!
Swell Microsoft ... that was not mentioned anywhere. I will tell Microsoft.

Fortunately, on affected systems uninstalling kb4100347 is the solution to the problem - the protection against Specter BTI is preserved by KB4346084!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.