Windows 7 certificates

[bong.mau]

Hi

Env: Win 7 sp1 + convenience rollup fix.

Prb: keep certificates updated.

 i want to know if the procedure described in this msfn topic is applicable also to Win 7

https://msfn.org/board/topic/175170-root-certificates-and-revoked-certificates-for-windows-xp/

(My win 7 is stable, i want to avoid to install  code with updates that continuosly suggests migrating to win 10)

Thanks in advance

Maurizio

[asdf2345]

That should work, but it's more complex. This just requires it to be launched, and works on even XP, and likely lower too http://media.kaspersky.com/utilities/CorporateUtilities/rootsupd.zip

[bong.mau]

asdf2345
Downloaded, executed, checked certificates , they are updated ..
Thanks !
Maurizio

[Dixel]

On 1/25/2021 at 5:22 PM, asdf2345 said:

That should work, but it's more complex. This just requires it to be launched, and works on even XP, and likely lower too http://media.kaspersky.com/utilities/CorporateUtilities/rootsupd.zip

Any other solutions other than using executables from Kaspersky's website ?

[asdf2345]

27 minutes ago, Dixel said:

Any other solutions other than using executables from Kaspersky's website ?

It's a mirror of a old, taken down Microsoft download

https://web.archive.org/web/20170829230259/http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe

[Dixel]

3 hours ago, asdf2345 said:

It's a mirror of a old, taken down Microsoft download

https://web.archive.org/web/20170829230259/http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe

Thank you for the info ! Pehaps you know where one can compare the hashes ? The original and this one. 

[asdf2345]

Just now, Dixel said:

Thank you for the info ! Pehaps you know where one can compare the hashes ? The original and this one. 

I used 7-zip to compare the hashes, and found that they have the same SHA-256 hash.

[kartel]

https://www.dslreports.com/forum/r30320726-

 

this is the way I been doing it, I hope thats enough

[EliraFriesnan]

Thank you for this topic! Folowed the update advice precisely. Unfortunately, I still have "non-secure" warning with Windows 7, some sites are now shown as safe, some not. A good example would be R3, it's shown as "not safe".

Common Name (CN)    R3
Organization (O)    Let's Encrypt
Organizational Unit (OU)    <Not Part Of Certificate>