Before Root Certificates update: After installing: You can also check in the Certificates manager within Windows.
Burdus77: I am not familiar at all with that VM app. What does it have to do with the comment I made in post #1160? If I am missing something, please enlighten me.
Without the root certificates updated, you get the warning that it is about to install unsafe drivers. The last screenshot is to show that the root certificates have been updated (Oracle Corporation has been added to the trusted list of certs, so can install without warning), even though the roots installer shows no confirmation they have been updated. The VM software has nothing to do with it, it's just an example, as you said you can't confirm that the roots are being updated, so won't update the OP. I was just showing you they are being updated using the installers I created in the earlier post.
Thanks, MilkChan. I've downloaded that 699 KB size file and have copied the URL link to it. I'll test it within the next few days and see if it installs in my Windows Vista SP2 64-bit test machine. If all goes well, I'll update my guide.
Finally still work SCEP 4.4.304 (MSE don't update definitions anymore). Was seriously hard to find that SCEP for Vista. He update automatically all. Only don't update to higher version that application. As next still after updates Net 4 Esu still need install patched or by scripts Net. Don't work via Windows Update. And IE by scripts. I generally wanted turn off IE from Vista but any magic turn off, how have 7/8. It is my two cents. + Sha-wuc as server 2008 + full install Bypass v8 LH windows update normally find updates Server 2008. But for SCEP turn other products Microsoft update for work to update definitions.
Your Root Certificate Update is too old. When using your's, update 16 (KB5056457) fails to install because of cert error. Using the Root Certificate Update from MilkChan, found on MDL, update can be installed.
The root certificate shouldn't have anything to do with windows updates. I haven't updated the root certificates in my VMs for ages without any problems. Most likely you tried to install the later Servicing Stack without restarting the system after installing SHA2 updates and the first servicing stack. A restart is needed between #15 and #16 since KB5056457 is SHA2 signed and the SHA2 update is still pending until you restart.
Oh, but they have. If WU can't verify the signature of an update, and is unable to fetch it from MS, that update will fail.
Well I did assume offline installation here since anyone following Captain's guide doesn't have a working windows update yet but you are right of course. The certificate that I am using in my installations is the one you uploaded on the 'Restore windows update' topic few years ago and is from 2016. So far no problems there
I haven't uploaded anything, to my knowledge. All Rootsupd packages are from user AstroSkipper on MSFN forums, we merely post them. As long as there is a continuous flow of updates, the critical certificates stay current. MS devs aren't stupid either and some updates update critical certificates offline, too.
As I have previously stated in my guide, a restart is done after completing each step, regardless of whether you are prompted to restart or not. All those restarts make the entire start-to-finish process take longer to complete, but a restart refreshes each step and prevents certain problems. I was planning to test the February 2025 root certificate this week, but I decided to wait until after the upcoming May 2025 "patch Tuesday". I plan to do an entire start-to-finish test of my guide at that time and use the February 2025 root certificate. I will post any issues that I encounter.
There was a root certificate linked by alvaro_ag here. Somehow I mixed you for Alvaro (both Spanish sounding names maybe..). Also while I trust M$'s developers I don't trust the intentions of their bosses xD (generally speaking and nothing to do with the root certificates of course).
The KB5058449 SMQR appears to be the only May 2025 update for Windows Vista SP2 64-bit aka Windows Server 2008 64-bit. There doesn't appear to be any updates for MNF 4.6.2 or IE9 or SSU or ESU. I plan to do a complete start-to-finish test of my guide within the next few days. I'll be using the February 2025 root certificate instead of the May 2024 root certificate. If everything goes well and the entire process is successful, I'll update my guide accordingly. If I encounter any problems, I'll make note of it and report it here.
When I went to the Microsoft catalog to view the details of KB5058449, it says under the Package Details tab of the Update Details that the KB5058449 SMQR has been replaced by the following update: 2025-05 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB5061198) I can't seem to find any additional information on KB5061198 but perhaps someone here might know something about it.
KB5058449 is dated May 13, 2025. KB5061198 is dated May 14, 2025. The new SMQR is about 479 MB larger. The webpage link that Carlos provided explains the reason for the "day after" update.