KB4474419 SHA-2 Code Signing Support Update for Windows 7 - Aug. 13

Page 1 of 3 123 LastLast

    KB4474419 SHA-2 Code Signing Support Update for Windows 7 - Aug. 13


    Last Updated: 16 Aug 2019 at 23:56
    SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: August 13, 2019

    Applies to: Windows Server 2008 R2, Windows 7, Windows Server 2008

    Notice

    • This security update was released March 12, 2019 for Windows 7 SP1 and Windows Server 2008 R2 SP1.
    • This security update was updated May 14, 2019 to add support for Windows Server 2008 SP2.
    • This security update was updated June 11, 2019 for Windows Server 2008 SP2 to correct an issue with the SHA-2 support for MSI files.
    • This security update was updated August 13, 2019 to include the bootmgfw.efi file to avoid startup failures on IA64 versions Windows 7 SP1 and Windows Server 2008 R2 SP1.

    Summary

    This update introduces SHA-2 code sign support for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.

    For more information, see the following articles:2019 SHA-2 Code Signing Support requirement for Windows and WSUS

    ADV190009

    How to get this update

    Method 1: Windows Update

    This update will be downloaded and installed automatically.

    Note This update is also available through Windows Server Update Services (WSUS).

    Method 2: Microsoft Update Catalog

    To get the standalone package for this update, see the Microsoft Update Catalog website.

    More information

    Prerequisites

    There are no prerequisites for installing this update.

    Restart information

    You have to restart the computer after you apply this update.

    Update replacement information

    This update doesn't replace a previously released update.

    Improvements

    This update also includes the following improvements:

    • Further hardening of infrastructure files that are used by the Windows Update and Microsoft Update client.
    • A more secure communication channel between the service and the Windows Update and Microsoft Update client has been added.


    Source: https://support.microsoft.com/en-us/...support-update


    Direct download links for KB4474419 MSU file from Microsoft Update Catalog:

    Download KB4474419 MSU for Windows 7 32-bit (x86) - 34.1 MB

    Download KB4474419 MSU for Windows 7 64-bit (x64) - 52.9 MB
    Brink's Avatar Posted By: Brink
    18 Feb 2019



  1. Posts : 5,605
    Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
       #1

    Shawn, does this support requirement relate to this article I saw?

    Still Using Windows 7? Microsoft's Next Update Is Critical

    If you want to continue receiving Windows updates, then the next Windows 7 and Windows Server 2008 update is critical as it adds support for SHA-2 encryption. Without it, future updates can't be downloaded.

    Support for Windows 7 is set to end on Jan 14. 2020, but access to Windows updates may end in March if you don't allow your Windows 7 machines to download and install Microsoft's next patch.
    Source: PCMag
      My Computer


  2. Posts : 72,045
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Hello @Anak,

    Correct, it's related to that article.
      My Computer


  3. Posts : 0
    Windows 7 Ultimate x64
       #3

    Can someone post the exact KB for this when it comes out?
      My Computer


  4. Posts : 5,605
    Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
       #4

    Brink said:
    Hello @Anak,

    Correct, it's related to that article.
    Thanks Shawn,

    Your News posting does say it in its own way:
    Customers running legacy OS versions (Windows 7 SP1, Windows Server 2008 R2 SP1 and Windows Server 2008 SP2) will be required to have SHA-2 code signing support installed on their devices by July 2019. Any devices without SHA-2 support will not be offered Windows updates after July 2019.
    Do you know if 'stand alone updates' are delivered through Windows Updates or will we have to 'go get it' say, in the update catalog?
      My Computer


  5. Posts : 7,107
    W7 home premium 32bit/W7HP 64bit/w10 tp insider ring
       #5

    Hi

    According to the MS blog, its due to be released this Tuesday.


    Roy
      My Computer


  6. Posts : 1,797
    Win 7 Ultimate, Win 8.1 Pro, Linux Mint 19 Cinnamon (All 64-Bit)
       #6

    Anak said:
    Do you know if 'stand alone updates' are delivered through Windows Updates or will we have to 'go get it' say, in the update catalog?
    I'm guessing it will be pushed through Windows Update. Usually when MS pushes an update which affects future WU functionality, they get pushed through WU. They did that recently with the v2 Oct 2018 Servicing Stack update which stated if it wasn't installed then future rollups wouldn't install properly. They made it a mandatory update through WU, so I'm guessing this will be the same.
      My Computer


  7. Posts : 5,605
    Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
       #7

    Thanks TW and Brds
      My Computer


  8. Posts : 72,045
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #8

    Update:

    KB4474419 SHA-2 Code Signing Support Update for Windows 7 - Aug. 13-kb4472027.jpg
      My Computer


  9. Posts : 5,605
    Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
       #9

    Thanks Shawn,

    I see this was started way back in 2015:
    Microsoft security advisory: Availability of SHA-2 code signing support for Windows 7 and Windows Server 2008 R2: March 10, 2015

    Microsoft Security Advisory 3033929

    3033929 has been on my win 7 box since 03 / 10 / 2015. I haven't seen any updates for today on the microsoft update catalog but there are the ones for 3033929.

       Information
    My mention of KB3033929 does not mean to imply that what we are all waiting for will have that same number. And, the ones linked to above are not the ones we need, I only linked to them for reference.
      My Computer


 
Page 1 of 3 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:23.
Find Us