Re: Downloading and Installing microsoft secureity patches.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Wesley Vogel (123WVogel955_at_comcast.net)
Date: 07/29/04 

Date: Thu, 29 Jul 2004 13:38:51 GMT

First, Mr. Vogel is my Dad, I'm Wes. ;-)

Make sure this is turned on, even if you delete a needed certificate, it
will be re-downloaded automatically. Some expired certificates really are
needed.

To turn on automatic updating of trusted root authority certificates
[[In Control Panel, open Add or Remove Programs.
Click Add/Remove Windows Components.
Select the Update Root Certificates check box.
Click Next, and then click Finish.
  Note
To open Add/Remove Windows Components, click Start, point to Settings, click
Control Panel, double-click Add or Remove Programs, and then click
Add/Remove Windows Components.]]
=====

Certificates That Are Required By Windows

NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. NO LIABILITY ACCEPTED, (c)97
VeriSign, Inc. 1/7/2004 Time Stamping VeriSign Time Stamping CA R

[[As you may have noticed in the provided information, some of the
certificates have expired. However, these certificates are necessary for
backwards compatibility. Even if there is an expired trusted root
certificate, anything that was signed with that certificate prior to the
expiration date needs that trusted root certificate to be validated. As long
as expired certificates are not revoked, it can be used to validate anything
that was signed prior to its expiration.]]

Trusted Root Certificates That Are Required By Windows 2000, Windows XP, and
Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;293781&Product=winxp 

-- 
Hope this helps.  Let us know.
Wes
In news:2E916781-99C1-46F7-8C1E-632FFAE5A43C@microsoft.com,
Fl gatorz <Flgatorz@discussions.microsoft.com>  hunted and pecked:
> Mr. Vogel,
> thanks for the help, but it still gives me the same message.  I
> noticed that all of my Mocrisoft Certificates are exired.  How do I
> validate them?  I tried to change the expiration date, but I
> couldn't.
>
> "Fl gatorz" wrote:
>
>> Every time I try and dowload and install a security patch or
>> suggested patch I get a message that says: "The software you are
>> installing has not passed Windows Logo testing to verify it's
>> compatibility with Windows XP".  Does anyone have any idea why and
>> what to do to fix it?  I am way behind on installing security
>> patches for XP.  Thanks in advance, Fl. Gator.

Relevant Pages

  • [NT] Windows File Protection Arbitrary Certificate Chain Vulnerability
    ... Beyond Security would like to welcome Tiscali World Online ... Windows File Protection will trust any digital signature whose certificate ... chain is rooted at any one of the Trusted Root Certification Authorities. ... chains but also as valid Root CA's for code signing certificates. ...
    (Securiteam)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.windowsupdate)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.security)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.win2000.security)
  • Re: How to fix broken security in Windows 2000?
    ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
    (microsoft.public.win2000.windows_update)