Jump to content

SHA-2 Update for Windows Vista SP2


Vistapocalypse
 Share

Recommended Posts

I am not posting to ask a question: Only to repeat information that has been well known to some of us for years. There was recently much discussion (often bordering on hysteria) about Microsoft abandoning SHA-1 in favor of SHA-2, particularly in the Windows XP forum. There was also some discussion of old Windows updates related to SHA-2. I only want to clarify the situation with respect to Windows Vista here.

Microsoft released KB2763674 for Windows Vista SP2 in January 2013. For those who are curious, there is still a Microsoft article about the update at this time. Those running Vista SP2 may want to check Installed Updates to confirm that they have this update (before “upgrading” to Windows build 6.0.6003). If not, then you are in luck because the Download Center links in the above-mentioned article are still good! (Not even the service packs for Windows Vista have Download Center links anymore, although they can of course still be found in the Catalog.) To make it easy for you, here they are:

32-bit     64-bit

The continued existence of those Download Center links could be just an oversight that M$ might correct at any time, so here is a Catalog link for KB2763674. If all else fails, there are also x64 and x86 .cab files in greenhillmaniac’s repository (check the General folder).

I am sure that equivalent updates were released for other versions of Windows, but there would be no point in discussing those here.

Of course updates for Windows Server 2008 SP2 can generally be installed on Vista SP2. The main thread about that has long been Server 2008 Updates on Windows Vista. While the update mentioned above should be sufficient to run third-party applications with SHA-2 signatures, Server 2008 received updates to allow installation of Microsoft updates with SHA-2 signatures in 2019. I answered a question about which updates to install for that purpose in a July 2020 post. You would need to do that if you wish to install all possible security updates for Server 2008 SP2, since they have been signed with sha256 exclusively since the summer of 2019, or if you wish to install antispyware definitions for Windows Defender.

  • Upvote 1
Link to comment
Share on other sites


2 hours ago, jumper said:

SHA-2 support includes sha256?

Yes. I posted a screenshot comparing the digital signatures of two servicing stack updates for Windows 6.0 in this September 2019 post. The April 2019 SSU was dual-signed, whereas the September 2019 SSU was signed with sha256 exclusively. SHA-2 support is required to install the second update. Here’s another Microsoft article for inquiring minds.

Link to comment
Share on other sites

here are the direct download links to the KB2763674 update for Windows Vista from both MS Download Center and MS Catalog (why didn't the OP think of that?)
so let's cut to the chase!

MS download center msu links - (32bit)  (64bit)

MS catalog msu links for both Vista & Server 2008 - (32bit)  (64bit)

 

Edited by erpdude8
Link to comment
Share on other sites

On 5/17/2021 at 9:49 PM, erpdude8 said:

here are the direct download links to the KB2763674 update for Windows Vista from both MS Download Center and MS Catalog (why didn't the OP think of that?)
so let's cut to the chase!

The OP does not trust direct download links, and the Microsoft pages include relevant information. I doubt that very many are lacking this update anyway, which was really the point.

Thread ends here

___________________

 

 

Edited by Vistapocalypse
Link to comment
Share on other sites

  • 1 year later...

hi guys, how do i know if i installed the sha-2 correctly ?

 

i ask that because the update KB4493730 said: "not applicable" for my windows vista ultimate x64 and the one that makes Build 6.0.6003 worked

Link to comment
Share on other sites

First of all, KB4493730 was a servicing stack update released in April 2019. “Microsoft strongly recommends you always install the latest servicing stack update (SSU) for your operating before installing” later updates. My guess is that you did not follow Microsoft’s recommendation and have already installed KB4474419 (SHA-2) and perhaps others. Have you installed KB4517134? That was another servicing stack update released in September 2019 that replaced KB4493730, however it was signed with SHA-2 exclusively. If you have it, or are able to install it, then you are probably OK (I’m not really sure).

Link to comment
Share on other sites

13 minutes ago, winvispixp said:

I always install kb4474419 first just because it's the one above in the folder so that's not the problem

And that does not prevent you from installing KB4493730, or do you not bother with the SSU at all? Assuming he downloaded the x64 version, I think he has already installed a subsequent SSU.

Link to comment
Share on other sites

9 hours ago, Vistapocalypse said:

And that does not prevent you from installing KB4493730, or do you not bother with the SSU at all?

no, i install kb4493730 right after, not even after a restart and it works every time 

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...