show the entry list
WinCC -- Product information -- Checking compatibility
Compatibility Tool for Automation and Drive Technology
Important note on Microsoft Patches KB 943459 and KB 971468
Which licenses do you need to upgrade from WinCC flexible 2008 or WinCC V7 to WinCC V11 and in WinCC V11?
Why should you not install the Microsoft security patches KB2467174, KB2467175, KB2465361 and KB2465367 in WinCC, PCS 7 and WinCC Professional V11?
With what are SIMATIC WinCC V7.x, V 6.x and V5.x compatible?
Which Microsoft Patches ("Security Patches" and "Critical Patches") have been tested for compatibility with SIMATIC WinCC?
How can you find out which Microsoft Patches are installed on the PC?
Further information on the Catalog ST80 with regard to WinCC Communication
Which operating system and software do you require for the SIMATIC WinCC Web Navigator V1.x, V6.x and V7.x?
With which Microsoft Windows operating systems is SIMATIC WinCC/ProAgent compatible?
Which security patch do you need for installing SIMATIC WinCC V6.0?
Drivers on the SIMATIC NET CD 07/2001 and WinCC
Notes on using WinCC V5.1 with "SIMATIC NET 7/2001 SP4"
Microsoft Windows language versions released for SIMATIC WinCC V5.1
WinCC -- Setting up development environments -- Installing and upgrading software
What are the possible causes of an unsuccessful Microsoft SQL Server 2005 Express installation or why is creating or opening a WinCC flexible 2008 project aborted?
Why do I receive errors during the upgrade installation to WinCC version V7.0 SP2?
Why should you not install the Microsoft security patches KB2467174, KB2467175, KB2465361 and KB2465367 in WinCC, PCS 7 and WinCC Professional V11?
Which Microsoft Patches ("Security Patches" and "Critical Patches") have been tested for compatibility with SIMATIC WinCC?
How can you switch the Microsoft SQL Server Management Studio Express to English on the bundle PC IPC 477C with WinCC V7.0 SP1?
Why does the installation of Microsoft SQL Server 2005 abort?
Why can't you install the SQL server from WinCC V6.2 or WinCC V6.2 SP2 after installing WinCC flexible 2008?
How do you install WinCC V7.0 on a MUI operating system if the language set in Windows is not English?
What can you do if installation of Security Patch KB929046 fails in the Windows Server 2003 R2 SP2?
Why is it not possible to activate the subcomponent "Common" while installing the "Microsoft Message Queuing" component?
How can you install WinCC while the computer is logged on to a domain?
Why does installation of the "Microsoft Message Queuing Services" abort with an error message?
What is the difference between an upgrade and an update?
How do you upgrade the WinCC Options V6.1?
How do you upgrade WinCC V6.0 to WinCC V6.0 SP3?
How do you migrate WinCC V4.x projects to WinCC V6.x and WinCC V7.x?
How can you regularly receive updates to the latest versions of WinCC?
Which settings do you have to make to set up a redundant single-user station in Microsoft Windows XP SP2?
How can you analyze errors when installing WinCC?
Why is the Setup of SIMATIC WinCC aborted at the ACE component (Active Communication Environment)?
How should you proceed if installation of the Microsoft SQL server fails?
Missing SQLUNIRL.dll when Installing SIMATIC WinCC V6
Why does the SQL server 2000 SP3 not appear as present during the installation of WinCC V6.0 SP3, even though it is installed?
WinCC -- Setting up development environments -- Installing / setting up operating systems
Why do other WinCC stations not appear in the network environment on the Windows 7 and Windows Server 2008 PCs?
Why should you not install the Microsoft security patches KB2467174, KB2467175, KB2465361 and KB2465367 in WinCC, PCS 7 and WinCC Professional V11?
What should you watch out for when using WinCC in a domain?
Which Microsoft Patches ("Security Patches" and "Critical Patches") have been tested for compatibility with SIMATIC WinCC?
What should you pay attention to when using WinCC with OEM operating systems?
How do you uninstall SP3 of Microsoft Windows XP?
Detailed information via the installed version of Microsoft Windows
Why can the WinCC uniclient not open the project from the server?
What restrictions are there for assigning the computer name for WinCC?
Logging off USB sticks from the operating system
How can you prevent Microsoft Windows Explorer from being opened as soon as you connect a USB stick to the computer or insert a CD/DVD in a drive?
How can you prevent the "Autoplay" function when inserting a CD/DVD or when connecting a USB device?
Which Microsoft Patches ("Security Patches" and "Critical Patches") have been tested for compatibility with SIMATIC WinCC?
Part number:

Instructions
Microsoft regularly rectifies security gaps in its products and makes these fixes available to its customers in the form of official patches. This usually happens every second Tuesday in the month, on so-called "Patch Tuesday". Microsoft divides up the updates into numerous different classifications
(http://support.microsoft.com/kb/824684/EN-US/
and
http://support.microsoft.com/kb/824684/de).

However, you only have to install "Security Patches" and "Critical Patches" to ensure that SIMATIC WinCC operation is secure and stable. For this reason, a WinCC test configuration has been set up in order to test the compatibility of the WinCC software with the above-mentioned patch classifications ("Security Patches" and "Critical Patches"). This system always features the very latest of the released versions of WinCC and Microsoft products released for operating these versions of WinCC. Keeping pace with the updates published by Microsoft, compatibility tests with the latest released versions of WinCC are performed on the test system.
The attached table in xls format provides precise information about the Microsoft "Security Patches" and "Critical Patches" which are tested for compatibility. As far as possible, this is updated within two weeks after publication of the latest updates of the classification designated.
If reflects the Microsoft products installed in the WinCC test configuration. Therefore, a discrepancy between this list and the products installed in the project cannot be excluded. If a system requires more updates than contained in the published list, these updates are requested according to the additional installed products / software components. In this case, it is up to the user to install these updates.
We recommend installing all the available updates of both the named classifications to ensure that the system is protected.
However, we cannot say anything about the compatibility of such updates that we have not tested. Therefore, we recommend installing all the updates in separate project-specific test environment prior to rolling out the updates in the productive environment.

Download
 
Description Download
Excel file Security_Patches.xls ( 737 KB )
Packed XML and model files Security_Patches_XML.zip ( 64 KB )
Table 01

In rare cases an update might have a negative effect on our software in our tests. This is noted in the "Comment" field in the list above. Furthermore, we inform you as fast as possible by newsletter of any indications and the resulting remedies.

Recommended procedure for patch management with the Microsoft Windows Server Update Service (WSUS)
These instructions assume that you have a WSUS installed for your WinCC system. How to proceed with the WSUS is described in Entry ID: 38621083.
 
No. Procedure
1 WSUS configuration:
In the "Products and Classifications" dialog you select the "Products" tab and then all the Microsoft products relevant for the system.
2 WSUS configuration:
In the "Products and Classifications" dialog you select the "Classifications" tab and then "Definition Updates", "Security Updates" and "Critical Updates".


Fig. 01

3 WSUS configuration:
Create the project-specific groups for distribution of the updates in the system.
4 Download the "Security_Patches.xls" Excel table above onto your computer.
5 Open the table and set the filter to "Failed" in the "Test Result" column.
6 Check the "Comments" column to see whether these updates have been replaced.
7 WSUS administration:
Select all the available updates in the "Critical Updates" and "Security Updates" categories and then deselect the non-released patches as in the list above. Release the patches for installation in the groups created.
8 Log in on the clients connected to the WSUS using an administrative account (the clients were configured to receive the updates from the WSUS).
9 Execute the updates offered.
Table 02

You can find more precise information about Industrial Security in connection with WinCC software in the WinCC Security Concept in Entry ID: 60119725.
For more detailed explanations about Microsoft Updates and the WSUS visit the following Microsoft sites.

Notes

  • To find out which Microsoft Patches are installed on the PC, refer to Entry ID: 48844294.
  • This guideline applies only as from WinCC V6.0 SP4.

Warning
The procedure described above does not apply for new Microsoft Service Packs which still require an explicit release for use. If the patches require a higher version of the Microsoft software, then refer to the "WinCC Install Notes" or Entry ID 21927773 to check whether these higher versions of the software or Service Packs are released for SIMATIC WinCC.

Additional Keywords
Windows Update Service, Security Patch
 

 Entry ID:18752994   Date:2014-10-09 
I regard this article....as helpfulas not helpful                                 
mySupport
My Documentation Manager 
Newsletter 
CAx-Download-Manager 
Support Request
To this entry
Print
Create PDF 
Send to a friend
QuickLinks
Compatibility tool 
Topics
Help
Online Help
Guided Tour