Introducing Improvements to the Windows XP Embedded and Windows Embedded Standard 2009 Security Update process for OEMs and Distributors using Microsoft OEM Online (MOO) and the Embedded and Mobile Communications Extranet (ECE)


ASK: The Embedded product group has been asked by customers to reduce the size of the monthly Windows XP Embedded and Windows Embedded Standard 2009 Security Update supplemental releases on MOO and ECE.

HISTORY: The monthly supplement has accumulated every security DQI (runtime update package) that is applicable for each of our embedded platforms. The supplement also includes a cumulative component database update for each platform development environment, which contains all applicable Security updates since the platform released. By accumulating the applicable DQIs for every platform on the download, over time the size of the monthly security supplement has grown quite large. For example, the December 2008 IMG (ISO) download was approximately 507MB. This has grown to approximately 800MB for the December 2009 IMG (ISO) download.

ACTION: Beginning with the January 2010 supplement, we have implemented a new process. The January 2010 supplement provides the DQIs for December 2009 and January 2010 as well as the cumulative component database updates for each platform, which still contain all Security updates since the platform release through December 2009 (the database updates are bi-monthly and current in the even numbered months). DQIs will accumulate for each supported platform throughout the year. At the beginning of 2011, we will do a similar refresh of the supplement.

RESULT: The January 2010 IMG file is significantly reduced in size, to approximately 256MB. The size will increase throughout the year, and be reduced again with the January 2011 update. With this plan in place, we don’t expect that the size of the supplement will grow to the size of the December 2009 supplement again.

  • Customers can still bring their development environment completely up to date with all Security updates applicable to their platform by installing just the component database update for their platform from the latest Windows XP Embedded and Windows Embedded Standard 2009 Security Updates – Product Download.
  • For runtime servicing, our customers only need to apply the DQI runtime updates released after the servicing date of the development environment used to build the runtime. For example, consider servicing a runtime built with Windows Embedded 2009, which had the development environment updated with the September 2009 security update for the component database (servicing date = September 2009). 
    • The December 2009 Windows XP Embedded and Windows Embedded Standard 2009 Security Updates – Product Download  which contains all DQI runtime updates for each platform through December 2009, and the current 2010 Windows XP Embedded and Windows Embedded Standard 2009 Security Update – Product Download which contains all of the 2010 DQI runtime updates are the only two resources you need. 
      • All DQI updates from September 2009 through December 2009 would be applied from the December 2009 Windows XP Embedded and Windows Embedded Standard 2009 Security Updates – Product Download release. 
      • Then all of the DQI updates from January 2010 forward would be applied from the latest 2010 Windows XP Embedded and Windows Embedded Standard 2009 Security Update – Product Download.
    •  Consider servicing the same runtime in 2012. You would install the following DQIs:
      • September 2009 through December 2009 would be applied from the December 2009 Windows XP Embedded and Windows Embedded Standard 2009 Security Updates – Product Download
      • All DQIs from the December 2010 Windows XP Embedded and Windows Embedded Standard 2009 Security Update – Product Download
      • All DQIs from the December 2011 Windows XP Embedded and Windows Embedded Standard 2009 Security Update – Product Download
      • All  DQIs from the current 2012 Windows XP Embedded and Windows Embedded Standard 2009 Security Update – Product Download.

For more information on servicing the development component database and Embedded runtimes, please see the Readme at the root of the monthly security update supplement, and also this previously posted blog article:

What’s New in Security Update Servicing – http://blogs.msdn.com/windows-embedded/archive/2008/12/02/what-s-new-in-security-update-servicing.aspx

Gina

Technorati Tags: ,
Comments (0)