Windows 7 SHA-2 requirement

Windows 7 SHA-2 requirement

Postby aker » 20.11.2018, 19:03

As Microsoft plans to require SHA-2 support for Windows 7/Server 2008 R2 systems for installing updates in 03-2019, we should implement the required patches as "wupre" updates.

MS documentation:
:arrow: https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

KB3033929 (SHA2-support for Windows 7)
Code: Select all
http://download.windowsupdate.com/d/msdownload/update/software/secu/2015/02/windows6.1-kb3033929-x86_927e018113fe51250c57029635d46b89bf235920.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2015/02/windows6.1-kb3033929-x64_5c56222b0caf43030addc9ad262633fcbddfcd41.msu
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to sell it.
aker
aker
 
Posts: 3162
Joined: 02.03.2011, 15:32
Location: %SystemRoot%\System32\Boot\winload.efi

Re: Windows 7 SHA-2 requirement

Postby boco » 14.02.2019, 11:59

There might be a new patch in February, for the SHA2-only signed updates. Without that patch, you won't get any updates starting with the April ones. I guess that to-be-released will have to be added also.

Note that March CU and SecOnly patches will have it integrated, according to MS.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2092
Joined: 24.11.2009, 17:00
Location: Germany

Re: Windows 7 SHA-2 requirement

Postby aker » 14.02.2019, 23:05

Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to sell it.
aker
aker
 
Posts: 3162
Joined: 02.03.2011, 15:32
Location: %SystemRoot%\System32\Boot\winload.efi

Re: Windows 7 SHA-2 requirement

Postby boco » 15.02.2019, 01:14

There was one to introduce double-signing. They say there's still one to come for SHA2-only signatures and SHA2 code signing.

https://support.microsoft.com/en-us/hel ... s-and-wsus
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2092
Joined: 24.11.2009, 17:00
Location: Germany

Re: Windows 7 SHA-2 requirement

Postby WSUSUpdateAdmin » 21.02.2019, 14:51

Time line given there promises a new SHA-2 update for March...
WSUSUpdateAdmin
Administrator
 
Posts: 2170
Joined: 07.07.2009, 14:38

Re: Windows 7 SHA-2 requirement

Postby aker » 13.03.2019, 06:14

Erforderlich scheinen unter Windows 7 folgende Updates zu sein/werden:

KB4490628 (Servicing Stack)
KB4474419 (Windows 7 SHA2-Update)

Viele Grüße
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to sell it.
aker
aker
 
Posts: 3162
Joined: 02.03.2011, 15:32
Location: %SystemRoot%\System32\Boot\winload.efi

Re: Windows 7 SHA-2 requirement

Postby WSUSUpdateAdmin » 13.03.2019, 11:50

Moin!

Dankeschön, die hab' ich jetzt drin.

Gruß
Torsten
WSUSUpdateAdmin
Administrator
 
Posts: 2170
Joined: 07.07.2009, 14:38


Return to Fehlende Updates / Missing updates

Who is online

Users browsing this forum: No registered users and 3 guests