A new Release Candidate (RC) version of the Patch Management Engine is being made available to N-central assets configured to use the RC channel.
This release focuses on improving patch reliability, handling of Microsoft update formats, cache management, and overall resilience of patch detection and installation workflows.
Improvements Included
- Improved handling of Microsoft patch file types and metadata accuracy: Resolves an issue where incorrect patch file types could be selected when multiple formats (e.g., MSU, CAB, EXE) were available. This improves reliability of patch installation and reduces mismatches in patch delivery. (PMCM-10657)
- Improved resilience of patch scans under error conditions: Enhancements to error handling improve the stability of patch detection and scanning, particularly in environments where Windows Update or network-related issues occur. (PMCM-11330, PMCM-11357, PMCM-11360)
- Updated bundled components for improved security: Replaces the version of 7-Zip used by the Third-Party Patch engine with the latest version, addressing known vulnerabilities. (PMCM-11413)
- Increased cache capacity for large patch downloads: Increases the File Cache Service Agent (FCSA) cache size to better handle larger updates, such as recent Microsoft Cumulative Updates, improving reliability when multiple large patches are required. (PMCM-11497)
- Improved software signing to reduce security tool interference: PME artifacts are now signed using Extended Validation (EV) certificates, reducing the likelihood of false positives from endpoint protection and application control tools.
Important Notes
Due to improvements in patch file identification, some previously cached patch files may need to be re-downloaded.
- This may temporarily increase network usage and cache activity.
- In some cases, patches may be downloaded more than once during the transition period.
- This behaviour will stabilise once all devices are updated to the latest PME version.
If required, temporarily increasing probe cache size may help mitigate any short-term impact.
Version Details
- Patch Management Engine: 2.13.14.5669
- MSP Platform: 2.13.14.5122
- Diagnostics: 2.13.14.5026
- Third-Party Patch Engine: 2.13.14.5036
Security & Integrity Information
To assist customers using endpoint protection or application control software, hashes for the PME installer and associated components are provided below.
| File | SHA-256 Hash |
|---|---|
| PMESetup.exe | 1C1EA431A46308CD564025D053C804E2F44E58D59B75972CEB66F79D4BF8F13A |
| FileCacheServiceAgentSetup.exe | B89F03DC0AF29AF4C19E3A6200DC82F852E20685D5D69D995704663AE6D4B33E |
| RequestHandlerAgentSetup.exe | C8839A5799C5305C51EF71B16736549A86CFC22B67904F9657167602969DA7EF |
| PME unins000.exe | 18C5BFA4FBDFC1EDF83A5EC97A9B7851FEF63097E0533381ED2995157545A4A4 |
| RequestHandlerAgent unins000.exe | 26E52C5805E4B17A6A8ADD9816D712E3B1B32A2418A3B37CA8B2E235CF0456D7 |
| FileCacheServiceAgent unins000.exe | 50C55A63BBF7AC10BBD52E87ECBA3CE00DD94CFB2533BB6162EBF62F0A7D1176 |
| %TEMP%\is-*\pmesetup.tmp | D983651000973D907727FEA71C3C86348964E91C11E11F114CD6A784D74AAF07 |
| %TEMP%\is-*\FileCacheServiceAgentSetup.tmp | 55FCC971590DFB60FF0294FA07BE1331C8C1B5A0572661F0F1D9EA93BE49B574 |
| %TEMP%\is-*\RequestHandlerAgentSetup.tmp | 07F590053B3C1504F9E8B412399262CCB43D53BF0C705449CFBC16DE4EB28AFC |
| ThirdPartyPatch_2.13.14.5036.exe | 59875F922D08E4C06FDF6C643EE42B04B82A811D3D25EFCCA3FC8B9207335032 |
RC Channel Reminder
Release Candidate builds provide early access to fixes and improvements. Once validated as stable, RC builds are typically promoted to General Availability (GA).