Once I have everything working, I never update, never ever. Update just breaks things that were once working.
I have both S500 and S505 deployed on a system that are currently using 3.0.4.88 (November 5, 2017)
TLS provisioning is working on that firmware version.