Windows 8.1 Update halted to some enterprise users amid WSUS issues

[silicon_toad2000]

http://arstechnica.com/information-technology/2014/04/windows-8-1-update-halted-to-some-enterprise-users-amid-wsus-issues/

Distribution of the Windows 8.1 Update, Microsoft's hefty patch for Windows 8.1 that updates the user interface for desktop and mouse users, has been temporarily suspended for some enterprise users after the company discovered that patched systems are no longer able to receive future updates from Windows Server Update Services (WSUS) servers.

The problem occurs when clients connect to WSUS with HTTPS enabled, but without TLS 1.2. Windows 8.1 machines with the KB 2919355 update installed will no longer be able to receive future updates from those servers. Microsoft describes it primarily as an issue for WSUS 3.0 Service Pack 2, also known as WSUS 3.2, when run on Windows Server 2003, 2003 R2, 2008, and 2008 R2; this version does not have HTTPS or TLS 1.2 enabled by default, but HTTPS is part of the recommended configuration.

WSUS 4 on Windows Server 2012 and 2012 R2 is also technically affected, as the bug is client-side, but Windows Server enables TLS 1.2 by default, so issues are unlikely to arise in practice.