• Security update for Secure Boot DBX can be skipped (KB4535680)

    Security update for Secure Boot DBX can be skipped (KB4535680)

    Just a heads up – this  will be in the Plus newsletter later on this weekend but due to the severe impact it had on my Saturday morning for one of my HyperV servers I’m going to post it here as an advanced heads up:  the KB4535680 causes a “double reboot” on machines and for those folks that manage HyperV servers this has a VERY nasty side effect:

    It puts your HyperV machines in “saved” state.  In order to recover I had to reboot the host an additional time – even had to hard reboot it as it was stuck on shutting down the HyperV management services.  Once it rebooted it let me restart the virtual machines but then I had to reboot the VMs to get them back behaving.

    “If you have Windows Defender Credential Guard (Virtual Secure Mode) enabled, your device will restart two times.”

    I don’t have that enabled.  I DO have HyperV.  I’m also recommending that you skip it on consumer machines as well.  If you are in charge of nuclear weopons or state secrets, then maybe install it.  For us mere mortals. it’s a skip.  If you ended up installing it anyway and had no issues, don’t remove the update.  But for us that patch HyperV (servers that host other servers) this one is VERY disruptive.  BornCity has a write up on it as well.