Fix now available as a manual Windows update

Oct 26, 2022 18:09 GMT  ·  By

Microsoft has finally resolved the SSL and TLS issues encountered on Windows after installing a previous update, with the fix to rollout automatically as part of the next Patch Tuesday cycle.

At this point, the fix is only part of the optional updates shipped to the operating system, so users need to manually check for updates in Windows Update to get it.

All Windows versions are struggling with the bug, with Microsoft admitting that the TLS and SSL handshake failures are caused by a previous Windows update.

The bug has already been confirmed in Windows 7 SP1 and later, including Windows 11 2022 Update – keep in mind, however, that Windows 7 is only being serviced as part of the ESU program.

“Microsoft has received reports that after installing KB5018427, some types of SSL (Secure Sockets Layer) and TLS (Transport Layer Security) connections might have handshake failures. Note for developers: Affected connections are likely to be sending multiple frames within a single input buffer, specifically one or more complete records with a partial record that is less than 5 bytes all sent in a single buffer. When this issue is encountered, your app will receive SEC_E_ILLEGAL_MESSAGE when the connection fails,” Microsoft explains.

For Windows 11 2022 Update, the resolution comes as part of update KB5018496, though it’s important to keep in mind the patch is only available as a preview for now. This is because Microsoft is only allowing users who manually trigger the update from Windows Update to get it, with the automatic rollout to begin on the November 2022 Patch Tuesday cycle.

“This issue was resolved in KB5018496. Note: KB5018496 will not install automatically. To apply this update, you can check for updates and select the optional preview to download and install,” the software giant explained.