If this problem occurs, press Ctrl+Alt+Del to log on to Windows. After you have installed the SSU together with other updates, a restart may be required to complete the installation.ĭuring this reboot, the system may hang when the message "Level 2 of 2" or "Level 3 of 3" appears. Update KB4490628 comes with a known issue during its installation, which Microsoft lists here. But that seems not true – because on my systems this update had been offered only after installing Update KB4474419 first. Microsoft states that the SSU need to be installed before installing the March 2019 updates to avoid subsequent errors and installation problems. When installing the updates mentioned above to support SHA-2 only update packages, various errors and issues may occur. I already pointed this out in the blog post Patchday: Updates for Windows 7/8.1/Server (March 12, 2019). This update fixes a problem with the Servicing Stack when installing updates that were signed using only the SHA-2 hash algorithm. In addition, the Servicing Stack Update (SSUs) KB4490628 was released for Windows 7 SP1 and Windows Server 2008 R2 SP1. The update is also linked to the Microsoft Update Catalog on the ADV90009 advisory page. The update is also available via Windows Server Update Services (WSUS) or for manual download via Microsoft Update Catalog. The update is automatically downloaded and installed via Windows Update. Update KB4474419 (SHA-2 code signing support update for Windows Server 2008 R2 and Windows 7: March 12, 2019) adds support for SHA-2 signature evaluation for Windows 7 SP1 and its server pendants. Updates KB4474419 and KB4490628Įffective March 12, 2019, Microsoft has extended the support article 4472027 titled 2019 SHA-2 Code Signing Support requirement for Windows and WSUS with the details and named the required updates. As of March 12, 2019, Microsoft has provided the required updates as part of the patchday. In the blog post SHA-2 patch for Windows 7 arrives on March 2019 I had announced an update for this month, but I had to leave some details to it. Without this update, these machines will not be able to process new updates in the future. Users of Windows 7 SP1 (as well as its server counterparts) and WSUS will therefore need a special update from April 2019, which will enable the machine for SHA-2 code signatures. I've had published the article Windows 7: From April 2019 'SHA-2-Support' is about that. Microsoft had announced in 2018 that it would only add SHA-2 signatures to its Windows updates from mid-2019 onwards – signing with SHA-1 would then no longer be necessary for security reasons. You can add missing information to the comments.
The blog post is an attempt to pick up some loose ends and bring them together to an article describing the odds and evens.
0 kommentar(er)
