• Patch Lady – certificates lost

    In the Windows health release dashboard they list a new problem with lost certificates.

    System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.
    Note Devices using Windows Update for Business or that connect directly to Windows Update are not impacted. Any device connecting to Windows Update should always receive the latest versions of the feature update, including the latest LCU, without any extra steps.
    So what does this mean?
    This impacts enterprise patchers in particular.  Anyone who jumps from 1809 (or later) that has the September 16 updates installed and then uses ISO media or uses WSUS or Config manager to deploy feature releases will risk losing system and user certificates.  This will impact work from home deployments and VPN connectivity.
    It does not impact anyone updating between feature releases using Windows update as your means to go from feature release to feature release.  It does impact all you corporate patchers wanting to move off of older (soon to be) outdated versions of Windows 10.
    Remember you can ALWAYS use the targeted version setting on Windows 10 pro to ensure you go to the feature release you want.