Radia - General Discussions
Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Windows 7 and Windows Server 2K8 R2 systems that are not currently up to date on security patching through January 2020 may encounter an error during the discover patch scan.
20200925 11:11:36 Info: Running a scan
20200925 11:11:36 Info: Resetting Status for vendor MICROSOFT
20200925 11:11:36 Info: Current version of WUA is 7.5.7601.17514
20200925 11:11:36 Info: Current version of MSI is 5.0.7601.17514
20200925 11:11:36 Info: WUA Scan file is C:\PROGRA~2\PSL\RCA\Agent\Lib\WUA\wsusscn2.cab
20200925 11:11:36 Info: WUA Catalog Size : 974166746 bytes & Date/Time : Tue Sep 08 11:38:39 GMT Daylight Time 2020
20200925 11:11:53 Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
In accordance with our SHA-1 deprecation initiative, the wsusscn2.cab file is no longer dual-signed using both SHA-1 and the SHA-2 suite of hash algorithms (specifically SHA-256). This file is now signed using only SHA-256. Administrators who verify digital signatures on this file should now expect only single SHA-256 signatures.
Install the following kb numbers to bring the system into SHA2 compliance. To obtain the custom XML bundle please open a case with support and request the January 2020 update bundle.
1.> KB4490628 - Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019
2.> KB4474419 - SHA-2 code signing support update Version 3 for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 9, 2019
3.> KB4536952 - Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: January 14, 2020
4.> KB4534310 - January 14, 2020 KB4534310 (Monthly Rollup)
Previous 0 comments
Ask, Discuss, Answer