Unable to see Windows Software Patches in SCCM Console for the Month of Feb 2024

Question

Unable to see Windows Software Patches in SCCM Console for the Month of Feb 2024

RSA111 186

Hello Friends, I am unable to see patches in SCCM console for the month of Feb 2024. This was asked by security auditor. How can I investigate this further?

Sherry Kissinger 5,526 Reputation points

2024-06-20T13:31:39.5133333+00:00

Verify this first: Do you see January, 2024, December 2023, November 2023 Cumulative updates? If so, you may need to open a case.

If not, then likely the issue is that your site is configured for "Months to wait before a superseded software update is expired" is likely 4 months or less (Since February is 4 months ago, if your months to wait is 3 months, those superseded updates from February would have been flagged as expired, and then removed from being listed).

This is a standard configuration, because "history" of when a months-old patch is not saved. CM is NOT a way to look at history of patching. Patching information is about "current state". If this security auditor is attempting to ask a question like "In February, what was your patch state", then you either need a time machine, of you have saved reports from that time with that information.

If this security auditor is asking a question like... "CVE-2024-xx-xx was resolved with the CU from February, what is our patch status for covering this CVE?", well, you can answer that question--because Cumulative Updates are... Cumulative. Look at your patch state for the CU from March, and/or April, and/or May, and/or June. If the CVE was covered by the February 2024 patch, it will also be covered by the March, April, May, June, etc. etc. etc. patch.
RSA111 186 Reputation points

2024-08-16T09:47:47.7166667+00:00

thank you Sherry Kissinger

Accepted answer

0 additional answers

Your answer

Sherry Kissinger 5,526 Reputation points

2024-06-20T13:31:39.5133333+00:00

Verify this first: Do you see January, 2024, December 2023, November 2023 Cumulative updates? If so, you may need to open a case.

If not, then likely the issue is that your site is configured for "Months to wait before a superseded software update is expired" is likely 4 months or less (Since February is 4 months ago, if your months to wait is 3 months, those superseded updates from February would have been flagged as expired, and then removed from being listed).

This is a standard configuration, because "history" of when a months-old patch is not saved. CM is NOT a way to look at history of patching. Patching information is about "current state". If this security auditor is attempting to ask a question like "In February, what was your patch state", then you either need a time machine, of you have saved reports from that time with that information.

If this security auditor is asking a question like... "CVE-2024-xx-xx was resolved with the CU from February, what is our patch status for covering this CVE?", well, you can answer that question--because Cumulative Updates are... Cumulative. Look at your patch state for the CU from March, and/or April, and/or May, and/or June. If the CVE was covered by the February 2024 patch, it will also be covered by the March, April, May, June, etc. etc. etc. patch.
RSA111 186 Reputation points

2024-08-16T09:47:47.7166667+00:00

thank you Sherry Kissinger

Answer 1

AllenLiu-MSFT 49,296 Microsoft External Staff

Hi, @RSA111

Thank you for posting in Microsoft Q&A forum.

It seems the updates of Feb 2024 are superseded and expired after 3 months by default, if a update is marked as expired, it will remove from SCCM console after a week.

You may check if you keep the default setting as 3 months.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

RSA111 186 Reputation points

2024-08-16T09:45:37.0666667+00:00

This is correct, I had supercedence expired update after 1 month. I changed it to the 3 months now. thank you.

Share via

Unable to see Windows Software Patches in SCCM Console for the Month of Feb 2024

0 additional answers

Your answer