KB Article #102173

Applying Microsoft IIS Security Patches.

Applying Microsoft IIS Security Patches.

Summary:

IIS Security patches should not cause a problem for EMF.

Detailed Information:

Tumbleweed tests with all Microsoft IIS Security patches released up until the latest EMF patch code freeze, which precedes the EMF patch release by about 1 to 2 months. Also, Tumbleweed does not expect any IIS patches released after code freeze to affect EMF operation. EMF is simply an IIS user, just like any other IIS web servers, and Microsoft Security updates should not affect operation.

If you suspect that any particular IIS Security patch may cause operational difficulties, simply perform a SQL backup of the EMFMail database before applying the patch. If there is a problem with the IIS patch:

- remove the patch and restore the EMFMail database from backup

- contact Tumbleweed Support with a problem description, and we will investigate

Please note that application of the Microsoft Lockdown tool does affect EMF, and should be applied with the restrictions discussed in the related article IIS Lockdown tool and EMF on the right.

If the Lockdown tool was incorrectly applied, please see related article IIS Lockdown tool broke Web Administration (how to recover).