Servicing stack updates

Applies to

• WindowsВ 10, Windows 8.1, Windows 8, Windows 7

What is a servicing stack update?

Servicing stack updates provide fixes to the servicing stack, the component that installs Windows updates. Additionally, it contains the «component-based servicing stack» (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month.

Why should servicing stack updates be installed and kept up to date?

Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don’t install the latest servicing stack update, there’s a risk that your device can’t be updated with the latest Microsoft security fixes.

When are they released?

Servicing stack update are released depending on new issues or vulnerabilities. In rare occasions a servicing stack update may need to be released on demand to address an issue impacting systems installing the monthly security update. Starting in November 2018 new servicing stack updates will be classified as «Security» with a severity rating of «Critical.»

You can find a list of servicing stack updates at Latest servicing stack updates.

What’s the difference between a servicing stack update and a cumulative update?

Both Windows 10 and Windows Server use the cumulative update mechanism, in which many fixes to improve the quality and security of Windows are packaged into a single update. Each cumulative update includes the changes and fixes from all previous updates.

Servicing stack updates must ship separately from the cumulative updates because they modify the component that installs Windows updates. The servicing stack is released separately because the servicing stack itself requires an update. For example, the cumulative update KB4284880 requires the May 17, 2018 servicing stack update, which includes updates to Windows Update.

Is there any special guidance?

Microsoft recommends you install the latest servicing stack updates for your operating system before installing the latest cumulative update.

Typically, the improvements are reliability and performance improvements that do not require any specific special guidance. If there is any significant impact, it will be present in the release notes.

Installation notes

• Servicing stack updates contain the full servicing stack; as a result, typically administrators only need to install the latest servicing stack update for the operating system.
• Installing servicing stack update does not require restarting the device, so installation should not be disruptive.
• Servicing stack update releases are specific to the operating system version (build number), much like quality updates.
• Search to install latest available Servicing stack update for Windows 10.
• Once a servicing stack update is installed, it cannot be removed or uninstalled from the machine.

Simplifying on-premises deployment of servicing stack updates

With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and later starting with the 2021 2C release, KB4601382.

Servicing Stack Updates (SSU): Frequently Asked Questions

General information

Servicing stack updates provide fixes to the servicing stack, the component that installs Windows updates. For more background information on SSUs, please see this article.

Yes, all versions of Windows and Windows Server might need an SSU to address an issue, including the latest version of Windows 10 and Windows Server.

SSUs should always be installed before any new update for Windows, including the latest cumulative update (LCU), Monthly Rollup, or Security-only update.

The latest SSU for your device can be found in ADV990001 | Latest Servicing Stack Updates.

All updates for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2 released after August 13, 2019 are SHA-2 signed, including SSUs. For general information, installation and troubleshooting related to the change to SHA-2 signed updates, please see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.

Before you restart your device, install the latest Servicing Stack Update (SSU) as listed in ADV990001 | Latest Servicing Stack Updates. Once the SSU has installed successfully, you can restart your device.

The steps below will resolve the issue, if it is caused by missing the installation of an SSU.

Using Safe Mode:

To enter Safe Mode, tap the F8 as soon as you see that Windows is starting.

Select Safe mode from the menu and wait for Windows to start up.

Restart your device.

Windows should now start normally.

Install the latest Servicing Stack Update (SSU) as listed in ADV990001 | Latest Servicing Stack Updates.

You should now be able to install the other update to Windows.

Or using Windows Recovery Environment (WinRE):

To enter the Windows Recovery Environment, see Entry points into WinRE.

In WinRE, you will need to click troubleshooting or advanced and then open a command prompt.

Run the following command (assuming windows is installed on C:\): DISM /image:C:\ /cleanup-image /revertpendingactions

Restart the device and wait for Windows to start.

Install the latest Servicing Stack Update (SSU) as listed in ADV990001 | Latest Servicing Stack Updates.

You should now be able to install the other update to Windows.

Servicing stack update for Windows Server 2012: July 14, 2020

Applies to

Windows Server 2012

Windows Server 2012 (Server Core installation)

Summary

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

This update also addresses an elevation of privilege vulnerability that exists when the Windows Modules Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. The security update addresses the vulnerability by ensuring the Windows Modules Installer properly handles file operations. For more information, see CVE-2020-1346 | Windows Modules Installer Elevation of Privilege Vulnerability.

How to get this update

Method 1: Windows Update

This update is available through Windows Update. It will be downloaded and installed automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Windows Server Update Services

This update is also available through Windows Server Update Services (WSUS).

There are no prerequisites to apply this update.

Restart information

You don’t have to restart your computer after you apply this update.

Removal information

Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device.

Update replacement information

This update replaces the previously released update KB4562252.

File Information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Note: The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: June 9, 2020

Windows 8.1 for 32-bit systems

Windows 8.1 for x64-based systems

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.

How to get this update

Method 1: Windows Update

This update is available through Windows Update. It will be downloaded and installed automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Windows Server Update Services

This update is also available through Windows Server Update Services (WSUS).

There are no prerequisites to apply this update.

You don’t have to restart your computer after you apply this update.

Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device.

Update replacement information

This update replaces the previously released update KB4540725.

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Note: The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For information on SSUs, see the following articles:

Learn about the terminology that Microsoft uses to describe software updates.

Servicing stack updates

Applies to

• WindowsВ 10, Windows 8.1, Windows 8, Windows 7

What is a servicing stack update?

Servicing stack updates provide fixes to the servicing stack, the component that installs Windows updates. Additionally, it contains the «component-based servicing stack» (CBS), which is a key underlying component for several elements of Windows deployment, such as DISM, SFC, changing Windows features or roles, and repairing components. The CBS is a small component that typically does not have updates released every month.

Why should servicing stack updates be installed and kept up to date?

Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don’t install the latest servicing stack update, there’s a risk that your device can’t be updated with the latest Microsoft security fixes.

When are they released?

Servicing stack update are released depending on new issues or vulnerabilities. In rare occasions a servicing stack update may need to be released on demand to address an issue impacting systems installing the monthly security update. Starting in November 2018 new servicing stack updates will be classified as «Security» with a severity rating of «Critical.»

You can find a list of servicing stack updates at Latest servicing stack updates.

What’s the difference between a servicing stack update and a cumulative update?

Both Windows 10 and Windows Server use the cumulative update mechanism, in which many fixes to improve the quality and security of Windows are packaged into a single update. Each cumulative update includes the changes and fixes from all previous updates.

Servicing stack updates must ship separately from the cumulative updates because they modify the component that installs Windows updates. The servicing stack is released separately because the servicing stack itself requires an update. For example, the cumulative update KB4284880 requires the May 17, 2018 servicing stack update, which includes updates to Windows Update.

Is there any special guidance?

Microsoft recommends you install the latest servicing stack updates for your operating system before installing the latest cumulative update.

Typically, the improvements are reliability and performance improvements that do not require any specific special guidance. If there is any significant impact, it will be present in the release notes.

Installation notes

• Servicing stack updates contain the full servicing stack; as a result, typically administrators only need to install the latest servicing stack update for the operating system.
• Installing servicing stack update does not require restarting the device, so installation should not be disruptive.
• Servicing stack update releases are specific to the operating system version (build number), much like quality updates.
• Search to install latest available Servicing stack update for Windows 10.
• Once a servicing stack update is installed, it cannot be removed or uninstalled from the machine.

Simplifying on-premises deployment of servicing stack updates

With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and later starting with the 2021 2C release, KB4601382.