Community
 
 
 

Radia - General Discussions

1323 seguidores
 
Avatar
Jim Longo

Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider

Windows 7 and Windows Server 2K8 R2 systems that are not currently up to date on security patching through January 2020 may encounter an error during the discover patch scan.

 

20200925 11:11:36 Info: Running a scan
20200925 11:11:36 Info: Resetting Status for vendor MICROSOFT
20200925 11:11:36 Info: Current version of WUA is 7.5.7601.17514
20200925 11:11:36 Info: Current version of MSI is 5.0.7601.17514
20200925 11:11:36 Info: WUA Scan file is C:\PROGRA~2\PSL\RCA\Agent\Lib\WUA\wsusscn2.cab
20200925 11:11:36 Info: WUA Catalog Size : 974166746 bytes & Date/Time : Tue Sep 08 11:38:39 GMT Daylight Time 2020
20200925 11:11:53 Error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

 

Cause:

In accordance with our SHA-1 deprecation initiative, the wsusscn2.cab file is no longer dual-signed using both SHA-1 and the SHA-2 suite of hash algorithms (specifically SHA-256). This file is now signed using only SHA-256. Administrators who verify digital signatures on this file should now expect only single SHA-256 signatures.

 

Resolution:

Install the following kb numbers to bring the system into SHA2 compliance. To obtain the custom XML bundle please open a case with support and request the January 2020 update bundle.

 

1.>          KB4490628 - Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019

2.>          KB4474419 - SHA-2 code signing support update Version 3 for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 9, 2019

3.>          KB4536952 - Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: January 14, 2020

4.>          KB4534310 - January 14, 2020 KB4534310 (Monthly Rollup)

0 comentário
0

Por favor, entrar para comentar.

 
 

Previous 0 comentário

Top Contributors