KACE System Deployment Appliance hotfix - 9.3.311 (4381330)

Quest has released a hotfix for the KACE Systems Deployment Appliance (SDA) that addresses two important items:

• Compatibility with recent Microsoft PowerShell changes
• Distribution of newly signed iPXE files to prepare for the 2026 Secure Boot certificate expiration

This hotfix is recommended for all KACE SDA customers to ensure continued smooth operation of scripted deployments and to avoid potential boot failures starting in 2026.

What Issues Does This Hotfix Address?

• K2-7888 - PowerShell Compatibility Recent updates to Microsoft PowerShell have introduced changes that can cause certain SDA deployment scripts to fail or behave unexpectedly. This hotfix updates the SDA's PowerShell components to fully support the latest PowerShell behavior.
  • This situation was mostly observed in Windows 11 24H2 with September 2025 Update and Windows 11 25H2.
• K2-7880 - iPXE Secure Boot Preparation The certificates used to sign iPXE boot files will expire in 2026. Systems with Secure Boot enabled may fail to boot from SDA images after the expiration date. This hotfix replaces the existing iPXE files with newly signed versions using updated certificates, eliminating the risk of boot failures in 2026.
  • This situation was detailed in PXE Boot stuck at "iPXE initializing devices" after BIOS Upgrade (4378222) 
  • Further details about the upcoming changes to the Secure boot certificate can be found here.

Installation Steps:

1. Log in to your KACE SDA web interface
2. Go to Settings > Appliance Maintenance
3. Scroll down to Manual KACE Update section
4. Click Choose File, select the downloaded .kbx file
5. Click Upload KACE Update

Important Notes

• The update process may take up to 15 minutes depending on your appliance workload
• You can monitor progress and confirm success in Settings > Appliance Maintenance > Update Log
• Once the log shows “Update completed successfully” or “Completed Hotfix Patch”, it is strongly recommended to log out and log back in to ensure all new components are fully loaded.
• No appliance reboot is required.

Download the hotfix by clicking here.