Windows 7 SHA-2 requirement

Windows 7 SHA-2 requirement

Postby aker » 20.11.2018, 19:03

As Microsoft plans to require SHA-2 support for Windows 7/Server 2008 R2 systems for installing updates in 03-2019, we should implement the required patches as "wupre" updates.

MS documentation:
:arrow: https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

KB3033929 (SHA2-support for Windows 7)
Code: Select all
http://download.windowsupdate.com/d/msdownload/update/software/secu/2015/02/windows6.1-kb3033929-x86_927e018113fe51250c57029635d46b89bf235920.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2015/02/windows6.1-kb3033929-x64_5c56222b0caf43030addc9ad262633fcbddfcd41.msu
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows 7 SHA-2 requirement

Postby boco » 14.02.2019, 11:59

There might be a new patch in February, for the SHA2-only signed updates. Without that patch, you won't get any updates starting with the April ones. I guess that to-be-released will have to be added also.

Note that March CU and SecOnly patches will have it integrated, according to MS.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2391
Joined: 24.11.2009, 17:00
Location: Germany

Re: Windows 7 SHA-2 requirement

Postby aker » 14.02.2019, 23:05

Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows 7 SHA-2 requirement

Postby boco » 15.02.2019, 01:14

There was one to introduce double-signing. They say there's still one to come for SHA2-only signatures and SHA2 code signing.

https://support.microsoft.com/en-us/hel ... s-and-wsus
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2391
Joined: 24.11.2009, 17:00
Location: Germany

Re: Windows 7 SHA-2 requirement

Postby WSUSUpdateAdmin » 21.02.2019, 14:51

Time line given there promises a new SHA-2 update for March...
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38

Re: Windows 7 SHA-2 requirement

Postby aker » 13.03.2019, 06:14

Erforderlich scheinen unter Windows 7 folgende Updates zu sein/werden:

KB4490628 (Servicing Stack)
KB4474419 (Windows 7 SHA2-Update)

Viele Grüße
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows 7 SHA-2 requirement

Postby WSUSUpdateAdmin » 13.03.2019, 11:50

Moin!

Dankeschön, die hab' ich jetzt drin.

Gruß
Torsten
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38

Re: Windows 7 SHA-2 requirement

Postby aker » 15.05.2019, 00:34

Für Server 2008 kam folgendes Update hinzu:

KB4474419
Code: Select all
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/04/windows6.0-kb4474419-x86_b6386523ad39f0a0b604f02baefdb2d41cc1ff69.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/04/windows6.0-kb4474419-x64_e7cafbdba97c54a2187196ac726f71d1cc64f716.msu


Viele Grüße
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Windows 7 SHA-2 requirement

Postby WSUSUpdateAdmin » 21.05.2019, 17:10

Jo, danke, ist drin. :)
VGT
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38

Re: Windows 7 SHA-2 requirement

Postby aker » 11.06.2019, 22:55

Neue URL für Server 2008
Code: Select all
http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/06/windows6.0-kb4474419-v2-x86_914e25a12e63693909f39cb49a7f8333df88018d.msu
http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/06/windows6.0-kb4474419-v2-x64_4561b14fd6025061b687d8ab222499af13f62521.msu


Viele Grüße
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32


Return to Fehlende Updates / Missing updates

Who is online

Users browsing this forum: No registered users and 39 guests