Description of Update Rollup 1 for Exchange Server 2010
http://support.microsoft.com/kb/976573
Download
This process can take an extended period of time to complete, to fix this issue you have to change the process of Certificate Revocation Check or grant the access to the public CRL of Microsoft, you can do it in three diferents ways
The installation of Rollup 1 performs the process of Certificate Revocation Check, if the server does not have internet access to validate the CRL from Microsoft freezes and down the services in DISABLE mode
Workaround:
1. Enable Internet Access while the installation process
2. Disable Certificate Revocation Check Option
Turn off certificate revocation check in Internet Explorer
In Internet Explorer –> Tools –> Internet Options –> Advanced tab
In the Security section, uncheck or clear the box for two options mentioned below:
Check for publisher’s certificate revocation
Check for server certificate revocation
Turn off certificate revocation check in registry
In registry editor browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
Change Value “State” to 146944 Decimal or 0×00023e00 Hexadecimal
Either way, you should not leave these settings intact after installation of Rollup update. Do not forget to revert the changes. I don’t think you will ask me for steps to revert it if you used IE method. If you changed registry, I have listed details below.
Turn on certificate revocation check in registry
In registry editor browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
Change Value “State” to 146432 Decimal or 0×00023c00 Hexadecimal
3. Edit the configuration file on each services
<configuration>
<runtime>
<generatePublisherEvidence enabled="false"/>
</runtime>
</configuration>
http://andreslozada.blogspot.com/2009/03/after-you-install-microsoft-exchange.html
