> ## Content Index > Fetch the complete content index at: https://www.techielass.com/llms.txt > Use this file to discover other available public pages before exploring further. # Windows Server 2012 Arc-enabled servers not installing updates - URL: https://www.techielass.com/windows-server-2012-arc-enabled-servers-not-installing-updates/ - Published: 2024-07-25T07:01:13.000Z - Updated: 2024-07-25T07:01:12.000Z - Description: Troubleshoot why updates are failing to apply to a Windows Server 2012 server. - Author: Sarah Lean - Tags: Azure Arc, Windows Server If your Windows Server 2012 servers that are [Arc-enabled](https://www.techielass.com/tags/azure-arc) to receive their Extended Security Updates (ESU) aren’t receiving the updates or if you are receiving updates and they aren't being installed, here are some troubleshooting steps to work through to try and help resolve the issue. This blog post will explore the steps needed to troubleshoot the issue. ### Step 1 - Check the Azure Arc version installed The troubleshooting step to check is what version of the Azure Arc agent is installed. The ESU capability was enabled on version 1.34 of the Azure Arc agent. My recommendation is you have version 1.40 at the least installed on your machine. But you should really be running the latest version. You can find the latest version of the agent listed on the official website: [https://learn.microsoft.com/azure/azure-arc/servers/agent-release-notes](https://learn.microsoft.com/en-gb/azure/azure-arc/servers/agent-release-notes?ref=techielass.com#version-134---september-2023) To check the version of the Arc agent log onto the affected server. Launch a PowerShell command terminal and type in the following command: ```powershell azcmagent version ``` ### Step 2 - Check pre-requisite patches There are several pre-requisite patches that need installs on the server to ensure they can receive the relevant ESU updates. If you’ve been keeping your servers up to these should already be there. However if you have are signing up for ESU updates for Windows Server 2012 and haven't been receiving patches for several months, are there are some patches you might have to manually install first. There are three patches required. The patch numbers are different depending on whether you are using Windows Server 2012 or the R2 version. **Windows Server 2012** - Servicing Stack Update (SSU) [KB5029369](https://support.microsoft.com/help/5029369?ref=techielass.com) - Extended Security Update (ESU) Licensing Preparation Package [KB5017221](https://support.microsoft.com/help/5017221?ref=techielass.com) - Servicing Stack Update (SSU) [KB5037022](https://support.microsoft.com/en-us/topic/kb5037022-servicing-stack-update-for-windows-server-2012-april-9-2024-bc0266a4-e720-47c0-82d5-5dd8913a04b4?ref=techielass.com) **Windows Server 2012 R2** - Servicing Stack Update (SSU) [KB5029368](https://support.microsoft.com/help/5029368?ref=techielass.com) - Extended Security Update (ESU) Licensing Preparation Package [KB5017220](https://support.microsoft.com/help/5017220?ref=techielass.com) - Servicing Stack Update (SSU) [KB5037021](https://support.microsoft.com/en-us/topic/kb5037021-servicing-stack-update-for-windows-server-2012-r2-april-9-2024-69b3059c-0830-41c8-a441-e5a24668a649?ref=techielass.com) 💡 It's worth noting KB5037022 & KB5037021 were released in April 2024\. You might have to manually install them on servers to ensure they can be patched with new ESU updates. ### Step 3 - Check the ESU license within Azure The first step is to check the Azure portal to understand if the server has been assigned an ESU licence. Head to [https://portal.azure.com](https://portal.azure.com/?ref=techielass.com) Launch the Azure Arc blade. Click on **Machines** down the left-hand side. ![Azure Arc blade in the Azure portal](https://lh7-us.googleusercontent.com/xAOBNw9NF59XdP9Z_qrLg87llRWwv5u_l6zfVchnIs2Bq6-yem0coX0-iXNeR7r_s40t5edl4UQQ66JlH5e7Cf2xXceRCv3V21xno82R1ysBJpS8NqN3x9JkkaJ0niMt_T3xjGqmLb8btIw9FA6zXZ8) Azure Arc blade in the Azure portal Find the server that isn’t receiving updates. Click on the server name. When the server information loads, check under capabilities to ensure ESU is **Enabled**. ![Azure Arc machine status](https://lh7-us.googleusercontent.com/M_946o1BhQrKhocwreyu7iOBLVy_7Uyaa7tmIlL91yNA4b9DrSa9_qaXRyH-avUMnCAI6V-bUnqttmOqm8hEmNgvaVsYERg5Y9OHyDuduYzAQTbLj1ds6lS_tWO5_HsRzWq-NnuVDA2doR2SvVR7GYY) Azure Arc machine status If the server states that the ESU capability is **Not Enabled**, assign the correct ESU license to the server to enable it to receive updates. ### Step 4 - Check the ESU license locally The next step is to ensure the Azure Arc agent is connected and the license is being picked up locally. Launch a PowerShell command terminal and type in the following command: ```powershell azcmagent show ``` You are looking for two key pieces of information. The first one is the **Agent status** and **Agent Last Heartbeat.** They should state Connected and list a time or date close to your current time and date. The second piece of information you are looking for is the **Extended Security Updates Status**. That should read as active. ![Azure Arc agent status](https://lh7-us.googleusercontent.com/jI6okcAuZGfIEE0y-1vc7KgCKESIXMbEhepfFW1semcJXVUDpItrAoz-641R39S_3S3YNHQ-ACAOkekZJIjx972XVEfGFoCKNrFrrHDyqiXNDocGQXFxOmZWyy15gsQPiTRYH3hZEBUxJIcSBnNbqYI) Azure Arc agent status ### Step 5 - Recreate the signed license file If you have patches being downloaded but are failing to install then try this. Open a command line prompt and stop the Azure Hybrid Instance Metadata Service (himds) by issuing this command: ```bash Stop-Service himds ``` We want to rename the existing file and generate a new one, so still within your command prompt issue the command: ```powershell Rename-Item C:\ProgramData\AzureConnectedMachineAgent\Certs\license.json C:\ProgramData\AzureConnectedMachineAgent\Certs\license.bak ``` ### Step 6 - Log a Support Ticket If none of the steps above work, then it's time to log a support ticket via the Azure portal. The team there can help support you through the issue and escalate to the relevant Windows support team if needed. ![Azure support ticket](https://storage.ghost.io/c/08/96/08960c71-63a2-449b-91b1-8d4628166dd2/content/images/2024/07/image-3.png) Azure support ticket