I was glad to read the news about the new feature of silent auto updates of the Adobe Flash player, but unfortunately this is not working on my machine. Has anyone had the same problems and was able to solve them?
Some information on my setup:
I had previously installed Flash player version 184.108.40.206, both ActiveX and Plugin version (installed through the .msi files, deployed via Active Directory/GPO - no further configuration, just plain original .msi files).
To test the auto update feature, I decided to install the new 220.127.116.11 version, but only the ActiveX version. I installed this via the .exe installer (install_flash_player_11_active_x_32bit.exe) manually, choosing "Install updates automatically when available (recommended)" in the last step of the installation, as seen here:
When I open Control Panel -> Flash Player, under the "Advanced" tab I see:
The file "mms.cfg" under C:\WINDOWS\system32\Macromed\Flash\ contains:
The task "Adobe Flash Player Updater" was created and is scheduled to run every 1 hour. I can see that it is started ("last start time"), the result code is 0x0 which means "no error".
So everything as expected. But the auto update is not working, since the plugin version of flash player never gets updated!
I edited the "mms.cfg" and added:
After manually starting the task, there are some lines added to "FlashInstall.log" in the same directory:
2012-4-4+7-20-48.814 [info] 1614
2012-4-4+7-20-48.829 [info] 1615
2012-4-4+7-20-48.829 [info] 1618
2012-4-4+7-20-48.829 [info] 1619 1063
2012-4-4+7-20-48.876 [info] 1614
2012-4-4+7-20-48.876 [info] 1615
2012-4-4+7-20-48.876 [info] 1618
2012-4-4+7-20-48.876 [info] 1608
2012-4-4+7-20-48.876 [info] 1604
2012-4-4+7-21-10.425 [warning] 1403 12029
2012-4-4+7-21-10.425 [warning] 1407 183
2012-4-4+7-21-10.425 [warning] 1408
2012-4-4+7-21-10.456 [info] 1624
2012-4-4+7-21-10.456 [info] 1612
2012-4-4+7-21-10.456 [info] 1621
What does this mean?
Some more information:
I suppose this is a problem with our proxy server. Does the auto updater not use the proxy information from the Windows Control Panel settings?
I am trying to set up silent auto updating on Windows 7. Currently 11.4.402.287 is installed. I understand 11.5.502.110 is available.
mms.cfg look like this:
I saw the above post and deleted the LastUpdateCheck and UpdateAttempts registry keys.
I ran the updater task and the following entries are added to the log.
2012-11-19+22-20-55.471 [info] 1614
2012-11-19+22-20-55.488 [info] 1615
2012-11-19+22-20-55.491 [info] 1618
2012-11-19+22-20-55.495 [info] 1619 1063
2012-11-19+22-20-55.507 [info] 1614
2012-11-19+22-20-55.513 [info] 1615
2012-11-19+22-20-55.518 [info] 1618
2012-11-19+22-20-55.524 [info] 1604
2012-11-19+22-20-55.524 [info] 1608
2012-11-19+22-20-55.846 [info] 1612
2012-11-19+22-20-55.852 [info] 1620
What else can I check?
@dvcroft1 - After major releases, silent updates from adobe.com will not be available for 30 days (or sooner, if a zero day security update is made available).
@Chris Campbell - But even when using your own update server (SilentAutoUpdateServerDomain parameter) flash won't update to the latest major version. I'm not really understanding this behaviour. For 30 days I have people complaining they get a flash-update-available message when booting their computer. For 30 days we can't use new flash features and we're missing security updates. What's the reason for this 30 day waiting period?
@Bram_ins - If you have specified your own internal server in the SilentAutoUpdateServerDomain parameter (see this post for details) your users should be getting the latest update within 24 hours. Can you post the contents of the mms.cfg on one of these systems along with their flashinstall.log file?
Thanks for the follow up.
We push the following mms.cfg to our users:
I just noticed since the silent 11.4.402.278 update, the mms.cfg on our devices have the SilentAutoUpdateEnable parameter set to 0. The two other parameters are still the same. Now we only pushed our cfg once after the first install. Could a silent update change this specific parameter? I just doublechecked the initial cfg we push and it has SilentAutoUpdateEnable=1. So I have no idea at the moment how all our devices have a value of 0 now.
I'll deploy our config again to all machines and post back soon.
At the end of the install log the following errors are shown:
2012-10-27+9-5-0.750 [error] 1217 -2146881269
2012-10-27+9-5-0.750 [error] 1234 183
2012-10-28+9-5-1.63 [error] 1217 -2146881269
2012-10-28+9-5-1.63 [error] 1234 183
2012-10-29+10-5-1.225 [error] 1217 -2146881269
2012-10-29+10-5-1.226 [error] 1234 183
2012-10-30+11-5-1.537 [error] 1217 -2146881269
2012-10-30+11-5-1.538 [error] 1234 183
2012-10-31+12-5-1.409 [error] 1217 -2146881269
2012-10-31+12-5-1.409 [error] 1234 183
2012-11-1+13-5-1.337 [error] 1217 -2146881269
2012-11-1+13-5-1.339 [error] 1234 183
2012-11-2+14-5-1.469 [error] 1217 -2146881269
2012-11-2+14-5-1.471 [error] 1234 183
2012-11-3+15-5-1.241 [error] 1301
2012-12-3+15-5-1.143 [error] 1301
I checked the log file again today and the following was added:
2012-12-4+13-5-1.104 [info] 1628 flashupdate.ourserver.eu
2012-12-4+13-5-1.106 [info] 1629 flashupdate.ourserver.eu
2012-12-4+13-5-1.107 [info] 1614
2012-12-4+13-5-1.108 [info] 1615
2012-12-4+13-5-1.108 [info] 1618
2012-12-4+13-5-1.110 [info] 1619 1063
2012-12-4+13-5-1.539 [info] 1628 flashupdate.ourserver.eu
2012-12-4+13-5-1.540 [info] 1629 flashupdate.ourserver.eu
2012-12-4+13-5-1.540 [info] 1614
2012-12-4+13-5-1.541 [info] 1615
2012-12-4+13-5-1.541 [info] 1618
2012-12-4+13-5-1.544 [info] 1604
2012-12-4+13-5-1.544 [info] 1608
2012-12-4+13-5-1.594 [info] 1612
2012-12-4+13-5-1.596 [info] 1620
I've then deleted the LastUpdateCheck and UpdateAttempts from the registry and ran the update task again:
2012-12-4+14-34-40.886 [error] 1226 1062
=O====== M/11.5.502.110 2012-12-04+14-34-30.729 ========
0000 00000010 FlashPlayerInstaller.exe -install -iv 9
0001 00000020 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
0002 00000011 1
0003 00000013 C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_110.ocx
0004 00000015 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_110_ActiveX.exe
0005 00000016 C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_110_ActiveX.dll
0006 00000023 C:\Windows\SysWOW64\Macromed\Flash\activex.vch
0007 00000019 C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
0010 00000021 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
=X====== M/11.5.502.110 2012-12-04+14-34-42.000 ========
It seems the activex version has been updated correctly now but the plugin version is still 11.4. This has probably to do with the [error] 1226 1062?
After running the update task again, the plugin version has been updated. It was probably in use by a browser.
I'll now monitor our environment the following days to check if other devices are picking up the update as well. If nothing happens i'll delete those reg keys on all computers.
@Bram_ins - I've forwarded your post to our installer team. Afaik, we don't write to the mms.cfg but I'm confirming. I've also asked for confirmation on the errors.
Here's what I found out from our installer engineer.
This failure was due to failed installer validation. This can happen if the SAU installers he hosted internally were corrupted in some way, or became corrupted in transit from his hosting server to the client. If it’s working now, perhaps the problem sorted itself out.
The other two behaviors he noticed are expected:
- SAU automatically configures the client as a notification client when there are consecutive silent autoupdate failures (such as he had with the ActiveX install failures). This ensures that users with systemic issues that break SAU do not get orphaned and miss out on Flash Player updates altogether.
- The ActiveX Player is updated vi SAU first, then an hour or so later the Plug-in is updated. This is by design.
Good info on the two behaviors. I wasn't aware (or just didn't remember ) that we reset the mms.cfg if the autoupdate failed multiple consecutive times. Good thing to know.
Hope this helps,
Thanks Chris! Very valueable information.
Never worked for me on 2 machines with a fresh clean Windows 7 Home Premium x64 SP1 installation.
For example now 11.7.700.169 is out but I still have 11.6.602.180...
Since Windows installations are fresh and clean I've never touched Sheduled Task or the Service that are set properly at default.
I use UAC at max level, not default.
So you mean it is working as designed? I guess some people may want to vet a new version or have a chance to update internal apps against a new version. That doesn't fit our situation. We would like to have a configuration option that allows us to get all updates immediately.
I have to agree with dvcroft1. In my work enviroment our users dont have admin rights and are not plugged into a power source (always on battery power) so they will never receave updates. We need options develepted to bypass these by-design-road-blocks.
I just discovered this interesting post and i have a question about silent update. We work with Mac OSX 10.6, 10.7 and 10.8 in public schools ans we have silent update ON (with mms.cfg looks like : AutoUpdateDisable=0 SilentAutoUpdateEnable=1). Evrything fine, we have Flash 11.6.x. But now, Flash 11.7 is out ans Safari shows an alert saying that an update is out. So if i understand correctly, silent update isn't working if there is a major update. Right ? Second question, i read in this post what you write (After major releases, silent updates from adobe.com will not be available for 30 days (or sooner, if a zero day security update is made available). So, is it possible to reduce this time ) ?
Thanks in advance
That is correct, for 30 days (or sooner if another update is made available), we do not use the silent auto udpate mechanism. However, admins do have another option and can implement their own internal update server if desired. If you haven't already, please see this blog post for details:
Thanks for the quick answer !
Seems that files at http://fpdownload2.macromedia.com are not updated, cause I still download a version.xml of the 11.6 one and I think the .z files aren't updated as well.
Thanks on advance for updating it,
Where exactly (URL) do you find outdated installers?
But maybe the latest version of FP wasn't put on distribution yet, and my update system from my local server still works . If it's the case, forgot what I've said before.
Sorry to annoy you, but I just don't get why my silent auto update from an internal server don't work anymore.
I didn't modify anything on my GPO, neither on my web-server, the clients have the good mms.cfg on their computers, but Flash prompt them for an update, even if the mms.cfg is like :
It would be great if someone give me some tracks to follow, thanks
May I ask why the version.xml files aren't up-to-date at http://fpdownload2.macromedia.com/pub/flashplayer/update/current/sau/11/xml/version.xml and http://fpdownload.adobe.com/pub/flashplayer/update/current/sau/11/xml/version.xml ?
Don't want to bother, but if someone know they answer, I would be pleased. Thanks on advance
thank you, your post pointed me to the mistake I made. I imported the self-signed SSL certificate into the personal certificate store, not into the local computer certificate store where it belongs.
Now with the certificate in the correct store, the clients finally are performing their Silent Auto Update.
Also thanks to Tyrone and Chris for their support. The thread can be marked as [solved].
Martin (not Hans, but nevermind)
I am trying to get the Windows 7 x64 PCs in my domain to silently update.
I have followed the latest guidance in the admin guide (v15) and set up an IIS 7 web server with HTTPS enabled using a self signed cert. I've imported the cert to the local computers (currently on flash 14)
The directory structure seems fine and I can browse to
without any errors from a client
My MMS file is as follows
The log shows the following warnings
2014-10-15+14-22-2.771 [info] 1628 updates.domain.local
2014-10-15+14-22-2.771 [info] 1629updates.domain.local
2014-10-15+14-22-2.771 [info] 1614
2014-10-15+14-22-2.771 [info] 1615
2014-10-15+14-22-2.771 [info] 1618
2014-10-15+14-22-2.771 [info] 1619 1063
2014-10-15+14-22-2.786 [info] 1628 updates.domain.local
2014-10-15+14-22-2.786 [info] 1629 updates.domain.local
2014-10-15+14-22-2.786 [info] 1614
2014-10-15+14-22-2.786 [info] 1615
2014-10-15+14-22-2.786 [info] 1618
2014-10-15+14-22-2.786 [info] 1608
2014-10-15+14-22-2.786 [info] 1604
2014-10-15+14-22-2.786 [info] 1631 /pub/flashplayer/update/current/sau//currentmajor.xml
2014-10-15+14-22-2.833 [warning] 1470 12175
2014-10-15+14-22-2.833 [warning] 1474 183
2014-10-15+14-22-2.833 [warning] 1475
2014-10-15+14-22-2.849 [info] 1432
2014-10-15+14-22-2.849 [info] 1612
2014-10-15+14-22-2.849 [info] 1620
Can you tell me where I am going wrong?
Why is there no public documentation on what these error codes are? It would save a lot of frustration if a complete list was available.
I have the exact same problem...the exact error codes
any one knows if a list with the error codes exist ?
[warning] 1407 12044
Any idea what these error codes mean?
I had the same issue in IIS.
SSL settings set to "ignore" instead "accept" solved the Problem.