Microsoft releases another cumulative update for Windows 10 1809 users i.e. KB4594442 on 17th Nov 2020. This is basically a non-security patch and increases the current build number to 17763.1579. With this update, developers aim to resolve the Kerberos authentication and ticket renewal issues that first appear after implementing the CVE-2020-17049.
By default, you will receive a notification regarding this non-security patch. If not, visit the Microsoft update catalog site and download/install the pending updates based on your system architecture. Here’s the complete list of the Latest Cumulative Updates by Microsoft.
KB4594442 Out-of-band Changelog
Here are the key changes that will occur after installing the KB4594442 cumulative update –
- The company has resolved the Kerberos authentication issue on this non-security update. This problem was related to the PerformTicketSignature registry subkey value in CVE-2020-17049. Apart from this, there are some other fixes and changes which are illustrated below.
- Non-Window Kerberos clients may also renew the related services and ticket-granting tickets (TGT). To do so, all they require is to change the PerformTicketSignature value to “1”.
- When the PerformTicketSignature value is set to “1”, scheduled tasks, clustering, or some other services will simply fail for their respective clients.
- S4UProxy delegation might fail during ticket referral in cross-domain scenarios. This occurs only when the DCs are the intermediate domains and get updated irregularly keeping the PerformTicketSignature value fixed to “1”.
Known Issues on KB4594442
You may encounter the PSFX_E_MATCHING_COMPONENT_NOT_FOUND Error 0x800f0982 after installing this patch update. To resolve this, either uninstall/reinstall the language packs or simply reset your computer.
How to Download and Install this Update
There are two ways by which you can download and install this non-security patch on Windows 10 version 1809. They are as follows –
1. Windows Update: Reach out to the below location and click Check for updates.
Settings > Update & Security > Windows Update
2. Update Catalog: Visit Microsoft’s official site, pick the update matching your system configuration, and hit the Download button. Subsequently, click the top link to start downloading the update.
When the setup downloads, reach out to the folder containing this file, and double-click upon it. The system will run this standalone package (.msi file) and update the existing OS to the Build version 17763.1579.
|Note: Currently, this patch is not available for users relying on Windows Server Update Services (WSUS).|