Normally, the setup of Exchange 2010 Rollup 1 is a no-brainer. However, not all Exchange systems have access to the internet. As with Exchange 2007 Rollups, Exchange 2010 Rollup 1 contains managed code of which the assemblies need to be compiled during setup. This requires an internet connection to verify the certificates. If you have no internet connection the setup is very slow because it needs to wait for certificate revocation checks to timeout.

To prevent this behaviour, you can disable the check as follows:

1. Go to Internet Explorer > Tools > Internet Options or Control Panel > Internet Options
2. Navigate to Advanced > Security
3. Make sure the Check for publisher’s certificate revocation and Check for server certificate revocation options are unchecked

You can re-enable the checks afterwards when required.

Scott Schnoll publiced an blog on the process of installing Rollup 1 on Exchange 2010 servers with DAG members. The process doesn’t really differ from existing Exchange 2007 CCR/SCR scenarios, i.e.

1. Suspend replication;
2. Move active copy/copies;
3. Install the update;
4. Resume replication;
5. Reactivate copies when required.

You can find the blog article here.