Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Update fixes issues and adds support to MDM clients in Windows RT 8.1 and Windows 8.1

View products that this article applies to.


This article describes a Mobile Device Manager (MDM) client update for Windows RT 8.1 and Windows 8.1. This update contains the following improvements and fixes the following issues.
Improvement 1
The enrollment provisioning document supports intermediate certificates in addition to the device certificate and the root CA certificate. This update adds a management solution to provision a chain of more than two certificates onto the device.

Note The following document is also updated with the additional "3.6 XML Provisioning Document Schema" section:
Improvement 2
A new ResetUserPassword static method is added to the MDM_Client WMI class. This method is added to support a helpdesk-aided password reset scenario for when the user of the device forgets the password. In this scenario, the administrator can push a known password to the device. The password must be sent to the user out of band of the management channel. When the user receives the known password and logs on to the device, they are forced to change the password.

Note For more information about the ResetUserPassword static method, go to the following Microsoft website:
Improvement 3
The MDM client supports an enrollment-on-behalf-of protocol. This lets a local administrator enroll a standard user into management on the device.

Note For more information about this improvement, go to the following Microsoft websites:
Issue 1
The LockWorkstation static method in the MDM_Client Windows Management Instrumentation (WMI) class fails when it is called to lock a workstation.
Issue 2
The MDM client sends the first request to the management endpoint without providing the device client certificate. Then, the client looks for a specific error code and reissues the request with the device client certificate included. However, certain server-side Secure Sockets Layer (SSL) implementations cannot be configured to return the error code. Additionally, the client does not return the full certificate chain in the SSL handshake.

After you install this update, a Transport Layer Security (TLS) mutual authentication session is negotiated correctly.

↑ Back to the top


Update information

How to obtain this update

Windows Update
This update is available from Windows Update.
Microsoft Download Center
The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows 8.1Download Download the package now.
All supported x64-based versions of Windows 8.1Download Download the package now.
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.


To apply this update, you must be running Windows RT 8.1 or Windows 8.1.

Registry information

To use the update in this package, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.

↑ Back to the top


For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

↑ Back to the top

Keywords: kb, kbexpertiseadvanced, kbsurveynew, atdownload, kbfix

↑ Back to the top

Article Info
Article ID : 2909569
Revision : 2
Created on : 4/9/2020
Published on : 4/9/2020
Exists online : False
Views : 194