Azure Arc Agent 1.54 Stuck? Fixing the WSUS Deadlock and Moving to 1.6x

Is your Azure Arc Agent 1.54 stuck and not updating? If that is the case you are in trouble. Azure Arc enabled servers operate on a strict twelve month support window. Once an agent version reaches its one year anniversary, Microsoft considers it unsupported. This is not just a status label; it affects service connectivity and extension reliability.

Introduction

As of today, April 2026, the following deadlines are critical

  • Version 1.52 was released in May 2025 and becomes unsupported in May 2026
  • Version 1.54 was released in July 2025 and becomes unsupported in July 2026

Failing to move to the 1.6x branch before these dates will result in degraded connectivity and the inability to manage extensions via the Azure portal.

Technical Deep-Dive Architectural Changes in 1.6x

The transition from version 1.5x to 1.6x introduces the automatic extension upgrade model. This logic moves the responsibility of extension management from external deployment tools directly to the agent.

Important: Versions 1.60 and newer require updated packaging and metadata that traditional WSUS configurations cannot process. If you do not update your synchronization settings, your systems will appear compliant in WSUS while they are actually running unsupported and potentially insecure software. If you rely on WSUS for Azure Arc Agent Updates, please make the necessary configuration as shown below

Step-by-step WSUS Configuration for Agent 3

o continue managing updates via WSUS or Configuration Manager, you must enable the specific product category designed for the modern agent branch.

  • Open the WSUS Administration Console
  • Navigate to Options and select Products and Classifications
  • Scroll to the Microsoft Azure section
  • Select the check box for Azure Connected Machine Agent 3
  • Initiate a manual synchronization to fetch the new metadata

Once this is active, version 1.62 and future releases will appear in your console for approval.

WSUS Azure Arc Connected Machine Agent 3 Product Category
WSUS Azure Arc Connected Machine Agent 3 Product Category

Resolving the Azure Arc Agent 1.54 Stuck

Systems running version 1.54 often experience a deadlock where they refuse to recognize or apply 1.6x updates.

The only reliable way to break this deadlock is a one-time manual intervention. Download the version 1.62 MSI and install it directly on the affected servers. This updates the internal orchestration logic, allowing the system to rejoin the automated update stream. If you encounter that issue, you can also deploy that update using MECM or any other software distribution system.

RDCMan og4E7pnf7I
Azure Arc Agent 1.54 Stuck fixing it running a manual Microsoft Update check

My recommendations on Azure Arc Agent 1.54 Stuck

Establish version 1.62 as the absolute minimum baseline for all production servers immediately.

Get your patching strategy straight by verifying your WSUS product categories to ensure Agent 3 is syncing correctly or enable the automatic extension upgrade feature in the Azure portal to remove manual maintenance overhead.

Check my blog articles to help with WSUS and Azure Arc Connected Machine Agent patching or use the Azure Update option or use the new preview option for extension upgrades.

Implement a way to monitor agent versions using Azure Resource Graph or Azure Dashboards to identify systems approaching the 12-month limit before they lose support.

Important: Make sure you implement Auto Updating like explained in my arcticle “Enable Azure Arc Auto Updates using WSUS and GPOs” or “Enable Azure Arc Auto Updates using Azure Portal” once you fixed this issue to make it a permanent and operational fix.

Conclusion

The evolution of the Azure Arc agent toward the 1.6x branch reflects the broader move toward cloud-native lifecycle management. Staying within the supported 12-month window is a technical necessity, not a suggestion. By updating your WSUS configuration and manually clearing the 1.54 deadlock, you ensure your hybrid infrastructure remains secure, stable, and ready for future Azure features.

If you have any questions please don’t hesitate to reach out to me on LinkedIn, Bluesky or check my newly created Adaptive Cloud community on Reddit.

LinkedIn: https://www.linkedin.com/in/andreas-hartig/

Bluesky: https://bsky.app/profile/hartiga.de

Adaptive Cloud community on Reddit: https://www.reddit.com/r/AdaptiveCloud/

Additional Resources

What’s new with Azure Connected Machine agent

Manage and maintain the Connected Machine agent

Automatic extension upgrade for Azure Arc-enabled servers

Avatar for Andreas Hartig
Andreas Hartig - MVP - Cloud and Datacenter Management, Microsoft Azure

Related Posts

Free Guides, Free Azure Content, Free M365 Content by MVPTreff

Free Guides for Azure, M365 and AI Knowledge on MVPTreff.de

Free guides from the German-speaking Microsoft community has completed a fantastic initiative called Hitzefrei on MVPTreff.de. Running through August and September, the project brought together 43 Microsoft MVPs and Community…

Read more
IT operations dragon, that is execited to try something new and does Download and Deploy Windows Server vNext

How to Download and prepare for vNext – Windows Server 2028

Download and prepare for vNext is your first step, to stay ahead in managing your modern infrastructure in the future. With the next generation of Windows Server currently tracking through…

Read more
Windows Server vNext IT Architect dragon reading a book

What Is Windows Server vNext?

For me, managing enterprise infrastructure across hybrid and on-premises environments requires staying ahead of lifecycle milestones and architectural platform shifts. While Windows Server 2025 is actively being rolled out with…

Read more
The LAPS Modernization Maturity Levels

Unifying Local Credential Security – Legacy LAPS, Windows LAPS, and Azure Arc in Practice

Local Credential Security – Managing local administrator credentials across an enterprise fleet has always been a fundamental security control. For years, Microsoft Local Administrator Password Solution (often called Legacy LAPS…

Read more
the IT Operations dragon looking at multiple screens with Group Policies on them and the GPO Policy Analyzer checking them all

How to use the GPO Policy Analyzer

Managing Group Policy Objects across a complex Active Directory environment has always been a challenge. Administrators often inherit hundreds of GPOs with overlapping configurations, stale settings, and hidden conflicts. Finding…

Read more
WAU Happy Dragons crazy about 110 percent security

Schedule Winget Auto Updates for operational usage

Deploying Winget Auto Updates (WAU) gives you a functional update baseline, for full functionality we need to configure more to get ready for production. If servers query the Winget repository…

Read more