A new out-of-band hotfix KB28290310 is released for SCCM 2403 by Microsoft to update the operating system version of cloud management gateway (CMG) virtual machine scale set images.

After the KB28290310 hotfix installation is complete, the new OS build value will be updated to 20348.2402. This prevents the message “Virtual machines or virtual machine scale sets are running on images that will be deprecated soon” from being displayed for customers.

The KB28290310 is the first hotfix released for SCCM version 2403 by ConfigMgr product team to address a critical issue for CMG VMSS customers. Since this is an OOB update, the installation is quick and will not require a computer restart or a site reset after installation.

Read the official documentation by Microsoft on KB 28290310 Cloud management gateway update for Configuration Manager 2403.

About KB28290310

Before installing the SCCM 2403 hotfix KB28290310, please make a note of the following points:

  • To install the KB 28290310 update, you must be running Configuration Manager version 2403.
  • The update will appear in your 2403 console only when CMG is deployed with a virtual machine scale set.
  • The KB28290310 update doesn’t require a computer restart or a site reset after installation.
  • The package GUID of KB 28290310 is 5095FC82-D3E6-4A8D-BE56-AFF92C041FE9.
  • After you install KB28290310 update on a primary site, pre-existing secondary sites must be manually updated.
  • The client agent version will not change after installing this update. Only the console upgrade is required.

Install SCCM 2403 Hotfix KB28290310

  • Launch the Configuration Manager console on the server.
  • Navigate to Administration\Overview\Updates and Servicing.
  • Right-click Configuration Manager 2403 Hotfix KB28290310 and select Install Update Pack.
Install Configuration Manager 2403 Hotfix KB28290310
Install Configuration Manager 2403 Hotfix KB28290310

This OOB hotfix includes the updates for site server and console. No client agent upgrade is required. For prerequisite warnings, you can enable the option “Ignore any prerequisite check warnings and install the update” on your production server running version 2403. Click Next.

Ignore Prerequisite Checks for KB 28290310 hotfix
Ignore Prerequisite Checks for KB 28290310 hotfix

Accept the license terms for installing the update and click Next.

Accept license terms for SCCM 2403 Hotfix KB28290310
Accept license terms for SCCM 2403 Hotfix KB28290310

Review the hotfix installation settings on the Summary page and click Next. Close the Configuration Manager Updates wizard.

Install Configuration Manager 2403 Hotfix KB28290310
Install Configuration Manager 2403 Hotfix KB28290310

The Configuration Manager 2403 hotfix KB 28290310 update required a total of just 30 minutes to install on the server, and there were no errors encountered at any point in the installation process. There won’t be a SCCM site reset after the installation of the hotfix, and it doesn’t require a restart of the computer.

Console Upgrade

The hotfix KB28290310 upgrades the Configuration Manager console version from 5.2403.1171.1000 to 5.2403.1171.1600. A console upgrade prompt will typically appear; click the installation link to continue with the upgrade. The console upgrade window also appears when you close and re-open the SCCM console. Click OK to begin the console upgrade.

During the console upgrade, review the console admin upgrade log files in case you encounter any errors.

Hotfix KB28290310 Console Upgrade
Hotfix KB28290310 Console Upgrade

Secondary Sites

As mentioned earlier, after you install the hotfix KB28290310 on a primary site, pre-existing secondary sites must be manually updated. Read more about secondary site installation in SCCM to get an idea of how to install secondary sites in SCCM.

To update a secondary site in the Configuration Manager console, select Administration > Site Configuration > Sites > Recover Secondary Site, and then select the secondary site. Run the following SQL Server command on the site database to check whether the update version of a secondary site matches that of its parent primary site:

Install and Update Third Party Applications with Patch My PC
Install and Update Third Party Applications with Patch My PC
select dbo.fnGetSecondarySiteCMUpdateStatus ('SiteCode_of_secondary_site')
  • If the value 1 is returned, the site is up-to-date, with all the hotfixes applied on its parent primary site.
  • If the value 0 is returned, the site has not installed all the fixes that are applied to the primary site, and you should use the Recover Secondary Site option to update the secondary site.

Verify the CMG VMSS OS build number

After the KB28290310 hotfix installation is complete, CMG virtual machine scale sets are updated to OS build 20348.2402. From the screenshot below, you can see that the OS build of the SCCM CMG VM is now updated to 20348.2402.240405 after KB28290310 installation.

Verify the CMG VMSS OS build number
Verify the CMG VMSS OS build number

Still Need Help?

If you need further assistance on the above article or want to discuss other technical issues, check out some of these options.

Prajwal Desai

Prajwal Desai is a technology expert and 10 time Dual Microsoft MVP (Most Valuable Professional) with a strong focus on Microsoft Intune, SCCM, Windows 365, Enterprise Mobility, and Windows. He is a renowned author, speaker, & community leader, known for sharing his expertise & knowledge through his blog, YouTube, conferences, webinars etc.