End of synchronization for WSUS 3.0 SP2

Published May 20 2021 07:01 AM 12.7K Views
Microsoft

On October 31, 2021, Windows Server Update Services (WSUS) 3.0 Service Pack 2 (SP2) will no longer synchronize and download updates.

WSUS is key to the Windows servicing process for many organizations. Whether being used standalone or as a component of other products, it provides a variety of useful features including automating the download and installation of Windows updates.

Extended support for WSUS 3.0 SP2 ended on January 14, 2020, in alignment with the end of support dates for Windows Server 2008 SP2 and Windows Server 2008 R2. It is, however, still possible to synchronize and download updates from Microsoft using WSUS 3.0 SP2.

WSUS relies on several different components for secure communication. The protocol that is used for a given connection depends on the capabilities of the associated components. If any component is out of date, or not properly configured, the communication might use an older, less secure protocol. Microsoft is transitioning all endpoints to the more secure TLS 1.2 cryptographic protocol. WSUS 3.0 SP2 does not support this newer protocol. As a result, any organizations still using WSUS 3.0 SP2 must migrate to a currently supported version of WSUS by October 31, 2021.

Additional guidance (added July 16, 2021)

WSUS supports a hierarchy of servers. As part of your transition, you can setup a new top level WSUS running on Windows Server 2012 or newer, then use WSUS 3.0 SP2 as a downstream server. WSUS 3.0 SP2 will continue to sync updates with upstream server after October 31, 2021.

To prepare for this date, we will turn off the sws1.update.microsoft.com endpoint at periodic intervals, occurring on:

  • July 20 – 22, 2021
  • August 17 – 19, 2021
  • September 21-23, 2021
  • October 19 – 21, 2021

During the shutdown, if you attempt to sync WSUS 3.0 SP2 it will not succeed, which results in the following error message in your log file:

2021-05-10 23:05:49.230 UTC    Warning               WsusService.33 WebServiceCommunicationHelper.ProcessWebServiceProxyException ProcessWebServiceProxyException found Exception was WebException. Action: Retry. Exception Details: System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host

To verify the version of WSUS you are using in your environment, follow these steps:

  1. Open the WSUS console.
  2. Click on your WSUS server name.
  3. In the center, you will see a section called Overview.
  4. Within that area, you will see Connection.
  5. See Server Version.

Learn more

For more information, see Deploy Windows Server Update Services.

 

2 Comments
Occasional Contributor

How do I know what version of WSUS I'm on?  It says Server version 6.3.9600.18838.  Will that still work after 10/31/2021?  Then if I go Help > About Update Services it says
Update Services

Microsoft Corporation
Version: 10.0.17132.1

 

 

Microsoft

Hi @kjstech 

 

WSUS 3.0 Sp2 was supported on Windows Server 2008 and Windows Server 2008 R2.  That was when WSUS was a separate product.  Starting with Windows Server 2012, WSUS was integrated as a server role.  You can check your version of WSUS by doing the following:

 

  1. Open the WSUS console
  2. Click on your WSUS server name
  3. In the center you will see a section called "Overview."
  4. Within that area you will see "Connection"
  5. See "Server Version." 

Thanks,

Paul

Best Regards,

%3CLINGO-SUB%20id%3D%22lingo-sub-2445892%22%20slang%3D%22en-US%22%3ERe%3A%20End%20of%20synchronization%20for%20WSUS%203.0%20SP2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2445892%22%20slang%3D%22en-US%22%3E%3CP%3EHow%20do%20I%20know%20what%20version%20of%20WSUS%20I'm%20on%3F%26nbsp%3B%20It%20says%20Server%20version%206.3.9600.18838.%26nbsp%3B%20Will%20that%20still%20work%20after%2010%2F31%2F2021%3F%26nbsp%3B%20Then%20if%20I%20go%20Help%20%26gt%3B%20About%20Update%20Services%20it%20says%3CBR%20%2F%3EUpdate%20Services%3C%2FP%3E%3CP%3EMicrosoft%20Corporation%3CBR%20%2F%3EVersion%3A%2010.0.17132.1%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2451329%22%20slang%3D%22en-US%22%3ERe%3A%20End%20of%20synchronization%20for%20WSUS%203.0%20SP2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2451329%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F107589%22%20target%3D%22_blank%22%3E%40kjstech%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWSUS%203.0%20Sp2%20was%20supported%20on%20Windows%20Server%202008%20and%20Windows%20Server%202008%20R2.%26nbsp%3B%20That%20was%20when%20WSUS%20was%20a%20separate%20product.%26nbsp%3B%20Starting%20with%20Windows%20Server%202012%2C%20WSUS%20was%20integrated%20as%20a%20server%20role.%26nbsp%3B%20You%20can%20check%20your%20version%20of%20WSUS%20by%20doing%20the%20following%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EOpen%20the%20WSUS%20console%3C%2FLI%3E%0A%3CLI%3EClick%20on%20your%20WSUS%20server%20name%3C%2FLI%3E%0A%3CLI%3EIn%20the%20center%20you%20will%20see%20a%20section%20called%20%22Overview.%22%3C%2FLI%3E%0A%3CLI%3EWithin%20that%20area%20you%20will%20see%20%22Connection%22%3C%2FLI%3E%0A%3CLI%3ESee%20%22Server%20Version.%22%26nbsp%3B%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3EPaul%3C%2FP%3E%0A%3CP%3EBest%20Regards%2C%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2371993%22%20slang%3D%22en-US%22%3EEnd%20of%20synchronization%20for%20WSUS%203.0%20SP2%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2371993%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EOn%20October%2031%2C%202021%2C%20Windows%20Server%20Update%20Services%20(WSUS)%203.0%20Service%20Pack%202%20(SP2)%20will%20no%20longer%20synchronize%20and%20download%20updates.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWSUS%20is%20key%20to%20the%20Windows%20servicing%20process%20for%20many%20organizations.%20Whether%20being%20used%20standalone%20or%20as%20a%20component%20of%20other%20products%2C%20it%20provides%20a%20variety%20of%20useful%20features%20including%20automating%20the%20download%20and%20installation%20of%20Windows%20updates.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EExtended%20support%20for%20WSUS%203.0%20SP2%20ended%20on%20January%2014%2C%202020%2C%20in%20alignment%20with%20the%20end%20of%20support%20dates%20for%20Windows%20Server%202008%20SP2%20and%20Windows%20Server%202008%20R2.%20It%20is%2C%20however%2C%20still%20possible%20to%20synchronize%20and%20download%20updates%20from%20Microsoft%20using%20WSUS%203.0%20SP2.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWSUS%20relies%20on%20several%20different%20components%20for%20secure%20communication.%20The%20protocol%20that%20is%20used%20for%20a%20given%20connection%20depends%20on%20the%20capabilities%20of%20the%20associated%20components.%20If%20any%20component%20is%20out%20of%20date%2C%20or%20not%20properly%20configured%2C%20the%20communication%20might%20use%20an%20older%2C%20less%20secure%20protocol.%20Microsoft%20is%20transitioning%20all%20endpoints%20to%20the%20more%20secure%20TLS%201.2%20cryptographic%20protocol.%20WSUS%203.0%20SP2%20does%20not%20support%20this%20newer%20protocol.%20As%20a%20result%2C%20any%20organizations%20still%20using%20WSUS%203.0%20SP2%20must%20migrate%20to%20a%20currently%20supported%20version%20of%20WSUS%20by%20October%2031%2C%202021.%3C%2FP%3E%0A%3CH3%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2017px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId-2032814909%22%20id%3D%22toc-hId-2058791695%22%3EAdditional%20guidance%20(added%20July%2016%2C%202021)%3C%2FH3%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWSUS%20supports%20a%20hierarchy%20of%20servers.%20As%20part%20of%20your%20transition%2C%20you%20can%20setup%20a%20new%20top%20level%20WSUS%20running%20on%20Windows%20Server%202012%20or%20newer%2C%20then%20use%20WSUS%203.0%20SP2%20as%20a%20downstream%20server.%20WSUS%203.0%20SP2%20will%20continue%20to%20sync%20updates%20with%20upstream%20server%20after%20October%2031%2C%202021.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3ETo%20prepare%20for%20this%20date%2C%20we%20will%20turn%20off%20the%20sws1.update.microsoft.com%20endpoint%20at%20periodic%20intervals%2C%20occurring%20on%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3EJuly%2020%20%E2%80%93%2022%2C%202021%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EAugust%2017%20%E2%80%93%2019%2C%202021%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ESeptember%2021-23%2C%202021%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EOctober%2019%20%E2%80%93%2021%2C%202021%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EDuring%20the%20shutdown%2C%20if%20you%20attempt%20to%20sync%20WSUS%203.0%20SP2%20it%20will%20not%20succeed%2C%20which%20results%20in%20the%20following%20error%20message%20in%20your%20log%20file%3A%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3E%3CFONT%20size%3D%222%22%3E2021-05-10%2023%3A05%3A49.230%20UTC%E2%80%AF%E2%80%AF%E2%80%AF%20Warning%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%E2%80%AF%20WsusService.33%20WebServiceCommunicationHelper.ProcessWebServiceProxyException%20ProcessWebServiceProxyException%20found%20Exception%20was%20WebException.%20Action%3A%20Retry.%20Exception%20Details%3A%20System.Net.WebException%3A%20The%20underlying%20connection%20was%20closed%3A%20An%20unexpected%20error%20occurred%20on%20a%20send.%20---%26gt%3B%20System.IO.IOException%3A%20Unable%20to%20read%20data%20from%20the%20transport%20connection%3A%20An%20existing%20connection%20was%20forcibly%20closed%20by%20the%20remote%20host.%20---%26gt%3B%20System.Net.Sockets.SocketException%3A%20An%20existing%20connection%20was%20forcibly%20closed%20by%20the%20remote%20host%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3ETo%20verify%20the%20version%20of%20WSUS%20you%20are%20using%20in%20your%20environment%2C%20follow%20these%20steps%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3EOpen%20the%20WSUS%20console.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EClick%20on%20your%20WSUS%20server%20name.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EIn%20the%20center%2C%20you%20will%20see%20a%20section%20called%20%3CSTRONG%3EOverview%3C%2FSTRONG%3E.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3EWithin%20that%20area%2C%20you%20will%20see%20%3CSTRONG%3EConnection%3C%2FSTRONG%3E.%3C%2FLI%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%22%3ESee%20%3CSTRONG%3EServer%20Version%3C%2FSTRONG%3E.%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CH2%20style%3D%22margin-top%3A%2036px%3B%20margin-bottom%3A%2020px%3B%20font-family%3A%20'Segoe%20UI'%2C%20Segoe%2C%20Tahoma%2C%20Geneva%2C%20sans-serif%3B%20font-weight%3A%20600%3B%20font-size%3A%2020px%3B%20color%3A%20%23333333%3B%22%20id%3D%22toc-hId-2022311805%22%20id%3D%22toc-hId-2048288591%22%3ELearn%20more%3C%2FH2%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EFor%20more%20information%2C%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows-server%2Fadministration%2Fwindows-server-update-services%2Fdeploy%2Fdeploy-windows-server-update-services%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDeploy%20Windows%20Server%20Update%20Services%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2371993%22%20slang%3D%22en-US%22%3E%3CP%3EWindows%20Server%20Update%20Services%20(WSUS)%203.0%20SP2%20will%20no%20longer%20synchronize%20and%20download%20updates%20beginning%20October%2031%2C%202021.%20Learn%20why.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Photo%20of%20a%20man%20sitting%20at%20a%20desk%20with%20orange%20headphones%20on%2C%20looking%20at%20his%20computer%20screen%22%20style%3D%22width%3A%20650px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F282178i4C43EDAF4C7CE005%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22man-at-desk.png%22%20alt%3D%22man-at-desk.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20id%3D%22lia-teaserTinyMceEditorPaul_Reed_0%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2371993%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EServicing%20and%20updates%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Jul 16 2021 09:57 AM
Updated by: