Azure Arc Agent 1.54 Stuck? Fixing the WSUS Deadlock and Moving to 1.6x

Is your Azure Arc Agent 1.54 stuck and not updating? If that is the case you are in trouble. Azure Arc enabled servers operate on a strict twelve month support window. Once an agent version reaches its one year anniversary, Microsoft considers it unsupported. This is not just a status label; it affects service connectivity and extension reliability.

Introduction

As of today, April 2026, the following deadlines are critical

  • Version 1.52 was released in May 2025 and becomes unsupported in May 2026
  • Version 1.54 was released in July 2025 and becomes unsupported in July 2026

Failing to move to the 1.6x branch before these dates will result in degraded connectivity and the inability to manage extensions via the Azure portal.

Technical Deep-Dive Architectural Changes in 1.6x

The transition from version 1.5x to 1.6x introduces the automatic extension upgrade model. This logic moves the responsibility of extension management from external deployment tools directly to the agent.

Important: Versions 1.60 and newer require updated packaging and metadata that traditional WSUS configurations cannot process. If you do not update your synchronization settings, your systems will appear compliant in WSUS while they are actually running unsupported and potentially insecure software. If you rely on WSUS for Azure Arc Agent Updates, please make the necessary configuration as shown below

Step-by-step WSUS Configuration for Agent 3

o continue managing updates via WSUS or Configuration Manager, you must enable the specific product category designed for the modern agent branch.

  • Open the WSUS Administration Console
  • Navigate to Options and select Products and Classifications
  • Scroll to the Microsoft Azure section
  • Select the check box for Azure Connected Machine Agent 3
  • Initiate a manual synchronization to fetch the new metadata

Once this is active, version 1.62 and future releases will appear in your console for approval.

WSUS Azure Arc Connected Machine Agent 3 Product Category
WSUS Azure Arc Connected Machine Agent 3 Product Category

Resolving the Azure Arc Agent 1.54 Stuck

Systems running version 1.54 often experience a deadlock where they refuse to recognize or apply 1.6x updates.

The only reliable way to break this deadlock is a one-time manual intervention. Download the version 1.62 MSI and install it directly on the affected servers. This updates the internal orchestration logic, allowing the system to rejoin the automated update stream. If you encounter that issue, you can also deploy that update using MECM or any other software distribution system.

RDCMan og4E7pnf7I
Azure Arc Agent 1.54 Stuck fixing it running a manual Microsoft Update check

My recommendations on Azure Arc Agent 1.54 Stuck

Establish version 1.62 as the absolute minimum baseline for all production servers immediately.

Get your patching strategy straight by verifying your WSUS product categories to ensure Agent 3 is syncing correctly or enable the automatic extension upgrade feature in the Azure portal to remove manual maintenance overhead.

Check my blog articles to help with WSUS and Azure Arc Connected Machine Agent patching or use the Azure Update option or use the new preview option for extension upgrades.

Implement a way to monitor agent versions using Azure Resource Graph or Azure Dashboards to identify systems approaching the 12-month limit before they lose support.

Conclusion

The evolution of the Azure Arc agent toward the 1.6x branch reflects the broader move toward cloud-native lifecycle management. Staying within the supported 12-month window is a technical necessity, not a suggestion. By updating your WSUS configuration and manually clearing the 1.54 deadlock, you ensure your hybrid infrastructure remains secure, stable, and ready for future Azure features.

If you have any questions please don’t hesitate to reach out to me on LinkedIn, Bluesky or check my newly created Adaptive Cloud community on Reddit.

LinkedIn: https://www.linkedin.com/in/andreas-hartig/

Bluesky: https://bsky.app/profile/hartiga.de

Adaptive Cloud community on Reddit: https://www.reddit.com/r/AdaptiveCloud/

Additional Resources

What’s new with Azure Connected Machine agent

Manage and maintain the Connected Machine agent

Automatic extension upgrade for Azure Arc-enabled servers

Spread the knowledge
Avatar for Andreas Hartig
Andreas Hartig - MVP - Cloud and Datacenter Management, Microsoft Azure

Related Posts

IT operations dragon and the IT System Engineer dragon looking at a whiteboard showing Why Windows Server 2025 and WSUS are fine

Azure Arc – Enable Azure Arc Auto Updates using WSUS and GPOs

While our first part focused on the cloud-native way using Azure Portal and Policy, many IT administrators still prefer or require the reliability of on-premises control. In a traditional IT…

Spread the knowledge
Read more
WSUS Data Flow System Engineer with IT Architect and CISO

Windows Server 2025 – Part 9 (WSUS on Windows Server 2025)

WSUS on Windows Server 2025 continues In the previous parts of my Windows Server 2025 series, where I focused heavily on cloud-native management and the new features of Windows Server…

Spread the knowledge
Read more
Azure Arc Enable Azure Arc Auto Updates using Azure Portal

Azure Arc – Enable Azure Arc Auto Updates using Azure Portal

Azure Arc Auto Updates is key, as the foundation of your hybrid cloud strategy and it’s single contral plane in Azure is the Connected Machine Agent. While we often focus…

Spread the knowledge
Read more
CISO dragon and my IT architecture dragon looking at AGPM replacement

AGPM is End of Life on 14 April 2026

AGPM is End of Life on 14 April 2026. Microsoft’s Advanced Group Policy Management (AGPM) reaches its official End of Life (EOL) on April 14, 2026. After this date, the…

Spread the knowledge
Read more
Winget and IaC SystemEngineerDragon

WinGet and IaC – Take Winget to the next level

WinGet and IaC are maybe your next step to automate your environment. In the past, managing third-party applications on Windows meant 3rd party tools or gathering MSI installers on network…

Spread the knowledge
Read more
Gemini Generated Image 3pcu7n3pcu7n3pcu

Azure Bastion Developer SKU: Secure Access Without the “Bastion Tax”

In the past, securing your Azure Virtual Machines (VMs) often felt like a trade-off between security and budget. If you wanted to avoid the risks of exposing RDP or SSH…

Spread the knowledge
Read more