First off, as I know many of you are waiting with bated breath to get Windows 8.1 Update 1 installed, here's the just-updated KB Article that provides the fix for the WSUS issue that caused Microsoft to halt delivery:

KB Article 2959977: Windows Update Client does not scan against WSUS 3.0 SP2 if HTTPS is configured and TLS 1.2 is not enabled

Now, customers who centrally manage updates to clients using mechanisms that rely on WSUS technology can rejoice.

Microsoft provides this additional guidance:

  • If you manually imported KB 2919355 prior to the issue of KB 2959977, you should decline the old revision on your WSUS server. Once you decline the revision in WSUS, it will no longer be distributed to clients.
  • For all users (even if your environment was not impacted), we recommend that administrators approve the latest revision of KB 2919355 for distribution to enable deployment of Windows 8.1 Update in your environment.

But, wait, there's more…

Due to the issue, but seemingly explained away as a "new approach to servicing," Microsoft is extending the requirement for the installation of Update 1 from 30 days to 120 days. Update 1 is still a required update, meaning without it no further security updates will be offered, however, the new date for completion is August 12, 2014.

UPDATE: I'm now told that the 120 day extension was not dependent on the WSUS issue. It was just coincidence (and convenient) to announce both at the same time.

Update 1 affects both Windows 8.1 and Windows Server 2012 R2.

You can read about the "new approach to servicing" in Microsoft's Springboard Series blog post entitled: Windows 8.1 Update: WSUS Availability, Extended Deployment Timing