KB5020387 Windows 11 21H2 22000.1100 update to address TLS/SSL

Windows 11 22000.1100 KB5020387 out-of–band update changes, fixes, direct download link, and the ways to install.


Several people have been complaining about problems with TLS and SSL after installing KB5018427. Finally, Windows 11 and 10 have received sets of patches to address these issues. We are here talking about KB5020387 which arrived on 17/10/2022.

KB5020387 is categorically an out-of-band update for Windows 11 21H2 that changes its 22000.1100. Full name of this release is “2022-10 Cumulative Update for Windows 11 for x64-based Systems KB5020387”. Let’s see what is new in this patch –

Out-of-band update KB5020387 changes, fixes and known issues

Here is the changelog –

Improvements and bug fixes

We address an issue that might affect some types of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) connections. These connections might have handshake failures. For developers, the affected connections are likely to receive one or more records followed by a partial record with a size of less than 5 bytes within a single input buffer. If the connection fails, your app will receive the error, “SEC_E_ILLEGAL_MESSAGE”.

Known issues

Up to now, there are no known issues found.

How to download KB5020387 on Windows 11 22H2 and install

Prior to receiving this rollout make sure that SSU or Servicing Stack Update 22000.1035 has been already installed on your computer. Now follow the methods below (either of the 2) –

1] Using Windows update

  1. Click on – Start.
  2. Type – updates.
  3. Hit Enter and let the Windows update settings load.
  4. Click on Check for updates.
  5. In some time the Windows update will be downloaded and the time will depend upon your internet connection speed.
  6. After it is completed, a pop will prompt asking when you want to install it; click on Restart now.
  7. The system will restart a couple of times and the patch will be installed.

2] Through manual method

  1. Go to the KB5020387 direct download link.
  2. Discover the file that can support your computer such as x64 or ARM64.
  3. Click on Download from the right end.
  4. Select the Standalone file link from the separate page that appears on the screen.
  5. Once downloading process is finished, go to the Downloads location and double-click on the .MSU file.
  6. Click Yes on the verification prompt.
  7. Allow the out-of-band update to install.

See – How to Download and Install Update from Microsoft update catalog on Windows 11/10.

Source – Release note.

That’s all!!

Sharing is caring    Share Whatsapp

Topics:  Windows update
About Sunita
Love to play with Windows 11 and 10. Suggestion - Going for Registry change or system files edit then remember to take a backup or create a restore point before Starting.