Deploying Windows 10 IoT and Windows Embedded Standard Security Patches Deployment Guide
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2019 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 Introduction....................................................................................................................................................4 Support matrix....................................................................................................................................................................4 2 Security patches for Windows 10 IoT Enterprise............................................................................................
1 Introduction Dell has stopped releasing security packages for the End of Marketing Life (EoML) thin clients running the following operating systems: • Windows 10 IoT Enterprise LTSB version 1607 • Windows 10 IoT Enterprise LTSB version 1507 • Windows Embedded Standard 7 • Windows Embedded Standard 7P You must directly download the security patches from www.catalog.update.microsoft.com.
Operating system Windows 10 IoT Enterprise LTSB build 1607 Supported platforms • Wyse 7020 accelerated graphics thin client—Z90QQ10 • Latitude 3480 mobile thin client • Latitude 5280 mobile thin client • Wyse 5060 thin client Table 2. Management server details Management server Version Wyse Device Manager 5.7.2 and later versions Wyse Management Suite 1.
2 Security patches for Windows 10 IoT Enterprise Download KBs for Windows 10 IoT from Microsoft Update Catalog This section describes the steps to download KBs from the Microsoft Update Catalog site. 1 Go to www.catalog.update.microsoft.com. 2 In the search box, type the search terms. For example, Windows 10 1507 or Windows 10 1607. 3 Click Search or press Enter. 4 Click Last Updated to sort the KBs from newest to oldest.
9 After the upload is complete, close the WDM Package Registration Utility window. 10 Launch Wyse Device Manager again, and login using valid credentials. 11 Go to Applications > Other packages, and verify the registered KB in the list. Deploy a package 1 Log in to the Wyse Device Manager web console. 2 Go to Devices, and select the devices to which the KB must be updated. 3 Click Update. 4 Click Save to schedule the deployment of KBs.
17 Click Preview and then click Schedule. The lock screen is enabled when you push the package from Wyse Management Suite. For more information, see the Dell Wyse Management Suite Administrator’s Guide at support.dell.com. Install the OSComponentCleanup add-on using Wyse Device Manager Follow these steps to install the OSComponentCleanup add-on using Wyse Device Manager (WDM): 1 Go to support.dell.com. 2 Click Product Support, enter the Service Tag of your thin client, and then click Submit.
Install the OSComponentCleanup add-on using Wyse Management Suite Follow these steps to install the OSComponentCleanup add-on using Wyse Management Suite: 1 Go to support.dell.com. 2 Click Product Support, enter the Service Tag of your thin client, and then click Submit. 3 Click Drivers and Downloads. 4 From the Operating system drop-down menu, select the appropriate operating system. 5 Scroll down the page and download the respective .msi file. 6 Copy the downloaded .
– This DotNetCompilation_WIE10 add-on is required to compile DotNet KB files and delete the software distribution downloaded folder. – The silent installation parameter is --silent. NOTE: You can download the DotNetCompilation_WIE10 add-on from support.dell.com. Silent installation parameters Table 3. Silent installation parameters Add-on Parameter DotNetCompilation_WIE10.exe --silent OSComponentCleanup.msi /qn QFE's in .
3 Security patches for Windows Embedded Standard 7 and Windows Embedded Standard 7P Download KBs for Windows Embedded Standard from Microsoft Update Catalog This section describes the steps to download KBs from the Microsoft Update Catalog site. 1 Go to www.catalog.update.microsoft.com. 2 In the search box, type the search terms. For example, Windows Embedded Standard 7 or Windows Embedded Standard 7P. 3 Click Search or press Enter. 4 Click Last Updated to sort the KBs from newest to oldest.
6 From the Select Operating System drop-down list, select the target operating system. NOTE: If you have downloaded the .exe file from the Microsoft Update Catalog site, enter /quiet /norestart in the Command Parameters field. The default parameters are added when you use the .msu file. 7 Enter the WDM server address and credentials. 8 Click Upload. 9 After the upload is complete, close the WDM Package Registration Utility window.
NOTE: If you use the .exe file downloaded from the Microsoft Update Catalog site, the silent parameter is /quiet/ norestart. The default silent parameters are considered when you use the .msu file. 13 Update the required fields, and click Save. 14 Click Yes to deploy the policy immediately. 15 In the App Policy job, update the description. 16 Click Run > Immediately. 17 Click Preview and then click Schedule. The lock screen is enabled when you push the package from Wyse Management Suite.
