WSUS Service stopped – do not install KB3148812 on Configuration Manager or WSUS servers

Last week Microsoft released Patch KB3148812 on Windows update. So this week we installed it on a customer ConfigMgr Sites (1x CAS, 2x Primary) due to an maintenance job.
The KB article says something about enabling ESD encryption for WSUS:

https://support.microsoft.com/en-us/kb/3148812

So here is my advice:

DO NOT INSTALL THIS UPDATE on WSUS or SCCM Servers!!!

At our environment it broke the WSUS Service completely. You can verify this by the following:

In the WSUSCTL.log you will find an “System.IndexOutOfRangeException – Index was outside the bounds of the array…..” error. If you try to open the WSUS console there will be the same error. The WSUS service is stopped and if you try to remotely start the service it will stop after a few seconds.

So if it’s to late don’t worry. The easy fix is to deinstall the Update. Deinstalling needs a reboot and takes a few minutes but everything will be up and running. Phew!

The WSUS Team wrote a blogpost on Technet this week:

http://blogs.technet.com/b/wsus/archive/2016/04/20/known-issues-with-kb3148812.aspx#pi47623=1

We should get a workaround on this soon!