Page 1 of 1

Windows 7 SHA-2 requirement

PostPosted: 20.11.2018, 19:03
by aker
As Microsoft plans to require SHA-2 support for Windows 7/Server 2008 R2 systems for installing updates in 03-2019, we should implement the required patches as "wupre" updates.

MS documentation:
:arrow: https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

KB3033929 (SHA2-support for Windows 7)
Code: Select all
http://download.windowsupdate.com/d/msdownload/update/software/secu/2015/02/windows6.1-kb3033929-x86_927e018113fe51250c57029635d46b89bf235920.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2015/02/windows6.1-kb3033929-x64_5c56222b0caf43030addc9ad262633fcbddfcd41.msu

Re: Windows 7 SHA-2 requirement

PostPosted: 14.02.2019, 11:59
by boco
There might be a new patch in February, for the SHA2-only signed updates. Without that patch, you won't get any updates starting with the April ones. I guess that to-be-released will have to be added also.

Note that March CU and SecOnly patches will have it integrated, according to MS.

Re: Windows 7 SHA-2 requirement

PostPosted: 14.02.2019, 23:05
by aker

Re: Windows 7 SHA-2 requirement

PostPosted: 15.02.2019, 01:14
by boco
There was one to introduce double-signing. They say there's still one to come for SHA2-only signatures and SHA2 code signing.

https://support.microsoft.com/en-us/hel ... s-and-wsus

Re: Windows 7 SHA-2 requirement

PostPosted: 21.02.2019, 14:51
by WSUSUpdateAdmin
Time line given there promises a new SHA-2 update for March...

Re: Windows 7 SHA-2 requirement

PostPosted: 13.03.2019, 06:14
by aker
Erforderlich scheinen unter Windows 7 folgende Updates zu sein/werden:

KB4490628 (Servicing Stack)
KB4474419 (Windows 7 SHA2-Update)

Viele Grüße

Re: Windows 7 SHA-2 requirement

PostPosted: 13.03.2019, 11:50
by WSUSUpdateAdmin
Moin!

Dankeschön, die hab' ich jetzt drin.

Gruß
Torsten

Re: Windows 7 SHA-2 requirement

PostPosted: 15.05.2019, 00:34
by aker
Für Server 2008 kam folgendes Update hinzu:

KB4474419
Code: Select all
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/04/windows6.0-kb4474419-x86_b6386523ad39f0a0b604f02baefdb2d41cc1ff69.msu
http://download.windowsupdate.com/c/msdownload/update/software/secu/2019/04/windows6.0-kb4474419-x64_e7cafbdba97c54a2187196ac726f71d1cc64f716.msu


Viele Grüße

Re: Windows 7 SHA-2 requirement

PostPosted: 21.05.2019, 17:10
by WSUSUpdateAdmin
Jo, danke, ist drin. :)
VGT

Re: Windows 7 SHA-2 requirement

PostPosted: 11.06.2019, 22:55
by aker
Neue URL für Server 2008
Code: Select all
http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/06/windows6.0-kb4474419-v2-x86_914e25a12e63693909f39cb49a7f8333df88018d.msu
http://download.windowsupdate.com/d/msdownload/update/software/secu/2019/06/windows6.0-kb4474419-v2-x64_4561b14fd6025061b687d8ab222499af13f62521.msu


Viele Grüße