.NET Update KB4565636 fails to install on ESU eligible machine

Hello everyone,

I encountered a problem installing the July 2020 .NET 4.8 update KB4565636 on a Windows 7 Professional machine with a valid and activated ESU product key. According to the log (C:\Windows\Temp\KB4565636_[...]-Microsoft .NET Framework 4.8-MSP0.txt) the ESU check seems to misdetect the machine's license as a "FES" license (which I assume is an embedded license?) and does not reach the point where it checks the actual ESU license:

MSI (s) (14:5C) [22:01:45:884]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI4114.tmp, Entrypoint: ValidateESULicense
MSI (s) (14:94) [22:01:45:884]: Generating random cookie.
MSI (s) (14:94) [22:01:45:884]: Created Custom Action Server with PID 4572 (0x11DC).
MSI (s) (14:6C) [22:01:45:899]: Running as a service.
MSI (s) (14:6C) [22:01:45:899]: Hello, I'm your 64bit Elevated Non-remapped custom action server.
Action start 22:01:45: CA2_ESUValidate_amd64.
07/14/20 22:01:45 DDSet_Status: LANGID: 1031
07/14/20 22:01:45 DDSet_Entry: ValidateESULicense Started v1.1.200515.1300 - Verifying a valid and active ESU License exists.
07/14/20 22:01:45 DDSet_Status: OS Detected 'Windows 7 SP1'
07/14/20 22:01:45 DDSet_Status: ProductInfo 48
07/14/20 22:01:45 DDSet_Entry: Entering IsFESProduct
07/14/20 22:01:45 DDSet_Status: Current SKU: 48
07/14/20 22:01:46 DDSet_Status: Current SKU has a valid FES Product Key
07/14/20 22:01:46 DDSet_Exit: Exiting IsFESProduct. HR=0
07/14/20 22:01:46 DDSet_Entry: Entering IsSecurityUpdateAllowed
07/14/20 22:01:46 DDSet_Warning: No ESU License found. Performing IsAzureVM check.
07/14/20 22:01:46 DDSet_Entry: Entering IsAzureVM.
07/14/20 22:01:46 DDSet_Entry: Entering IsAzureAssetTag.
07/14/20 22:01:46 DDSet_Status: SMBIOSAssetTag: No Asset Information
07/14/20 22:01:46 DDSet_Warning: No Azure or Azure Stack Asset Tag found.
07/14/20 22:01:46 DDSet_Exit: Exiting IsAzureAssetTag.
07/14/20 22:01:46 DDSet_Status: Accessing Azure IDMS to verify if VM is hosted in Azure.
07/14/20 22:01:51 DDSet_Error: Failed to send HTTP request. HR=-2147012894
07/14/20 22:01:51 DDSet_Exit: Exiting IsAzureVM. HR=-2147012894
07/14/20 22:01:51 DDSet_Error: Failed to determine if running on an Azure hosted VM.
07/14/20 22:01:51 DDSet_Exit: Exiting IsSecurityUpdateAllowed. HR=-2147012894
07/14/20 22:01:51 DDSet_Exit: ValidateESULicense Ended. HR=-2147012894
CustomAction CA2_ESUValidate_amd64 returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)

Here's the output of slmgr /dlv with the machine's license information (installation IDs redacted):

Softwarelizenzierungsdienst-Version: 6.1.7601.24555

Name: Windows(R) 7, Professional edition
Beschreibung: Windows Operating System - Windows(R) 7, OEM_SLP channel
Aktivierungs-ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764
Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Erweiterte PID: 00371-00178-926-700437-02-1031-7601.0000-0112017
Installations-ID: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
Teil-Product Key: 24367
Lizenzstatus: Lizenziert
Verbleibende Windows Rearm-Anzahl: 3
Vertrauenswürdige Zeit: 14.07.2020 22:41:14


Name: Windows(R) 7, Client-ESU-Year1 add-on for Enterprise,EnterpriseE,EnterpriseN,Professional,ProfessionalE,ProfessionalN,Ultimate,UltimateE,UltimateN
Beschreibung: Windows Operating System - Windows(R) 7, VOLUME_MAK channel
Aktivierungs-ID: 77db037b-95c3-48d7-a3ab-a9c6d41093e0
Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f
Erweiterte PID: 55041-00172-470-008865-03-1031-7601.0000-3622019
Installations-ID: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Prozessorzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88338
Computerzertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88339
Lizenz-URL verwenden: http://go.microsoft.com/fwlink/?LinkID=88341
Product Key-Zertifikat-URL: http://go.microsoft.com/fwlink/?LinkID=88340
Teil-Product Key: 2673Y
Lizenzstatus: Lizenziert
Verbleibende Windows Rearm-Anzahl: 3
Vertrauenswürdige Zeit: 14.07.2020 22:41:14

For reference, the same ESU key (bought for two licenses) works fine on a different machine. Here's the relevant installation log excerpt of that machine:

MSI (s) (58:48) [21:18:51:779]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI3EA.tmp, Entrypoint: ValidateESULicense
MSI (s) (58:A0) [21:18:51:779]: Generating random cookie.
MSI (s) (58:A0) [21:18:51:779]: Created Custom Action Server with PID 4144 (0x1030).
MSI (s) (58:FC) [21:18:51:789]: Running as a service.
MSI (s) (58:FC) [21:18:51:789]: Hello, I'm your 64bit Elevated Non-remapped custom action server.
Action start 21:18:51: CA2_ESUValidate_amd64.
07/14/20 21:18:51 DDSet_Status: LANGID: 1031
07/14/20 21:18:51 DDSet_Entry: ValidateESULicense Started v1.1.200515.1300 - Verifying a valid and active ESU License exists.
07/14/20 21:18:51 DDSet_Status: OS Detected 'Windows 7 SP1'
07/14/20 21:18:51 DDSet_Status: ProductInfo 48
07/14/20 21:18:51 DDSet_Entry: Entering IsFESProduct
07/14/20 21:18:51 DDSet_Status: Current SKU: 48
07/14/20 21:18:51 DDSet_Status: Current SKU don't has a valid FES Product Key
07/14/20 21:18:51 DDSet_Exit: Exiting IsFESProduct. HR=0
07/14/20 21:18:51 DDSet_Entry: Entering IsSecurityUpdateAllowed
07/14/20 21:18:51 DDSet_Status: Policy 'Client-ESU-Year1' found.
07/14/20 21:18:51 DDSet_Status: Policy 'Client-ESU-Year1' is active.
07/14/20 21:18:51 DDSet_Exit: Exiting IsSecurityUpdateAllowed. HR=0
07/14/20 21:18:51 DDSet_Exit: ValidateESULicense Ended. HR=0
MSI (s) (58:04) [21:18:51:969]: Doing action: CA_ESUValidate_amd64
MSI (s) (58:04) [21:18:51:969]: Note: 1: 2205 2:  3: ActionText
Action ended 21:18:51: CA2_ESUValidate_amd64. Return value 1.

Any idea of what the cause might be?

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Sure enough, there's data in the ESU checking DLL embedded in the .NET installer referencing the Windows 7 Pro OEM:SLP activation ID:

which points to a set of product ID ranges:

May i ask what IDA version or what plugin did you used to get that info? :)

thanks

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

May i ask what IDA version or what plugin did you used to get that info? :)

thanks

Sure. This was just a vanilla installation of IDA 7.0, no special plugins. The medium blue names and comments have been added manually during analysis.

Edit: Just for reference: The possible SKU values (at least most of them) are documented as return values of the GetProductInfo function. The activation (GU)IDs and product ID ranges can be cross-checked with the information contained in pkeyconfig.xrm-ms.

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I see, thank you

yes, i'm aware of those SKU values (i got list of 161 SKUs) :)

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

A new version of KB4565636 has been released. After a WU rescan, the update was installed successfully on the previously problematic machine.

(According to the log, the machine still gets detected as having a "FES" license, but at least the installer recognizes the ESU license now.)

1 person was helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Confirmed, thank you!

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated July 24, 2020 Views 904 Applies to: