Patch Management Engine (PME) 2.13.14 – Release Candidate

A new Release Candidate (RC) version of the Patch Management Engine is being made available to N-central assets configured to use the RC channel.

This release focuses on improving patch reliability, handling of Microsoft update formats, cache management, and overall resilience of patch detection and installation workflows.

Improvements Included

  • Improved handling of Microsoft patch file types and metadata accuracy: Resolves an issue where incorrect patch file types could be selected when multiple formats (e.g., MSU, CAB, EXE) were available. This improves reliability of patch installation and reduces mismatches in patch delivery. (PMCM-10657)
  • Improved resilience of patch scans under error conditions: Enhancements to error handling improve the stability of patch detection and scanning, particularly in environments where Windows Update or network-related issues occur. (PMCM-11330, PMCM-11357, PMCM-11360)
  • Updated bundled components for improved security: Replaces the version of 7-Zip used by the Third-Party Patch engine with the latest version, addressing known vulnerabilities. (PMCM-11413)
  • Increased cache capacity for large patch downloads: Increases the File Cache Service Agent (FCSA) cache size to better handle larger updates, such as recent Microsoft Cumulative Updates, improving reliability when multiple large patches are required. (PMCM-11497)
  • Improved software signing to reduce security tool interference: PME artifacts are now signed using Extended Validation (EV) certificates, reducing the likelihood of false positives from endpoint protection and application control tools.

Important Notes

Due to improvements in patch file identification, some previously cached patch files may need to be re-downloaded.

  • This may temporarily increase network usage and cache activity.
  • In some cases, patches may be downloaded more than once during the transition period.
  • This behaviour will stabilise once all devices are updated to the latest PME version.

If required, temporarily increasing probe cache size may help mitigate any short-term impact.

Version Details

  • Patch Management Engine: 2.13.14.5669
  • MSP Platform: 2.13.14.5122
  • Diagnostics: 2.13.14.5026
  • Third-Party Patch Engine: 2.13.14.5036

Security & Integrity Information

To assist customers using endpoint protection or application control software, hashes for the PME installer and associated components are provided below.

FileSHA-256 Hash
PMESetup.exe1C1EA431A46308CD564025D053C804E2F44E58D59B75972CEB66F79D4BF8F13A
FileCacheServiceAgentSetup.exeB89F03DC0AF29AF4C19E3A6200DC82F852E20685D5D69D995704663AE6D4B33E
RequestHandlerAgentSetup.exeC8839A5799C5305C51EF71B16736549A86CFC22B67904F9657167602969DA7EF
PME unins000.exe18C5BFA4FBDFC1EDF83A5EC97A9B7851FEF63097E0533381ED2995157545A4A4
RequestHandlerAgent unins000.exe26E52C5805E4B17A6A8ADD9816D712E3B1B32A2418A3B37CA8B2E235CF0456D7
FileCacheServiceAgent unins000.exe50C55A63BBF7AC10BBD52E87ECBA3CE00DD94CFB2533BB6162EBF62F0A7D1176
%TEMP%\is-*\pmesetup.tmpD983651000973D907727FEA71C3C86348964E91C11E11F114CD6A784D74AAF07
%TEMP%\is-*\FileCacheServiceAgentSetup.tmp55FCC971590DFB60FF0294FA07BE1331C8C1B5A0572661F0F1D9EA93BE49B574
%TEMP%\is-*\RequestHandlerAgentSetup.tmp07F590053B3C1504F9E8B412399262CCB43D53BF0C705449CFBC16DE4EB28AFC
ThirdPartyPatch_2.13.14.5036.exe59875F922D08E4C06FDF6C643EE42B04B82A811D3D25EFCCA3FC8B9207335032

RC Channel Reminder

Release Candidate builds provide early access to fixes and improvements. Once validated as stable, RC builds are typically promoted to General Availability (GA).

This entry was posted in N-central. Bookmark the permalink.