Support for urgent Trusted Root updates for Windows Root Certificate Program in Windows

Applies To
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 for Itanium-Based Systems Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter

This article describes an update that enables urgent updates for the Windows Root Certificate Program in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 8, Windows RT, Windows Server 2012, Windows 7, and Windows Server 2008 R2. Before you apply this update, see more about this update and check out the prerequisites in this article.

About this update

The Windows Root Certificate Program enables trusted root certificates to be distributed automatically in Windows. Usually, a client computer polls root certificate updates one time a week. After you apply this update, the client computer can receive urgent root certificate updates within 24 hours.

Known issue

After you apply this update, you may encounter error 0x800706f7 when you run Windows Update.

Resolution
To resolve this issue, install update 3024777.

How to obtain this update

Method 1: Windows Update

This update is available from Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center.

Operating system Update
All supported x86-based versions of Windows 8.1 Download Download the package now.
All supported x64-based versions of Windows 8.1 Download Download the package now.
All supported x64-based versions of Windows Server 2012 R2 Download Download the package now.
All supported x86-based versions of Windows 8 Download Download the package now.
All supported x64-based versions of Windows 8 Download Download the package now.
All supported x64-based versions of Windows Server 2012 Download Download the package now.
All supported x86-based versions of Windows 7 Download Download the package now.
All supported x64-based versions of Windows 7 Download Download the package now.
All supported x64-based versions of Windows Server 2008 R2 Download Download the package now.
All supported IA-64-based versions of Windows Server 2008 R2 Download Download the package now.

Notes

  • The update installer should be run from an elevated command prompt.
  • The update for Windows RT 8.1 or Windows RT can be obtained only from Windows Update.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Method 3: Update rollup for Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 8, Windows RT, or Windows Server 2012

Install one of the following update rollup packages that are dated December 2014:

Note The update rollup fixes many other issues in addition to the issue that the stand-alone update fixes. The update rollup is larger than the stand-alone update. Therefore, the update rollup takes longer to download.

Update information

Prerequisites

To install this update, you must install update 2919355 in Windows 8.1 or Windows Server 2012 R2. Or, install Service Pack 1 for Windows 7 or Windows Server 2008 R2.

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.

More Information

For more information, see the following articles in the Microsoft Knowledge Base:

KB 2677070 An automatic updater of revoked certificates is available for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

KB 2813430 An update that enables administrators to update trusted and disallowed CTLs in disconnected environments in Windows

File information

The global version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 8.1 and Windows Server 2012 R2 file information and notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version Product Milestone Service branch
    6.3.960 0.17 xxx Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 RTM GDR

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are not listed.

For all supported x86-based versions of Windows 8.1

File name File version File size Date Time Platform
Crypt32.dll 6.3.9600.17475 1,612,992 30-Oct-2014 23:38 x86

For all supported x64-based versions of Windows 8.1 or Windows Server 2012 R2

File name File version File size Date Time Platform
Crypt32.dll 6.3.9600.17475 1,970,432 30-Oct-2014 23:39 x64
Crypt32.dll 6.3.9600.17475 1,612,992 30-Oct-2014 23:38 x86

For all supported ARM-based versions of Windows 8.1

File name File version File size Date Time Platform
Crypt32.dll 6.3.9600.17475 1,499,336 30-Oct-2014 23:32 Not applicable

Windows 8 and Windows Server 2012 file information and notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version Product Milestone Service branch
    6.2.920 0.17xxx Windows 8, Windows RT, or Windows Server 2012 RTM GDR
    6.2.920 0.21xxx Windows 8, Windows RT, or Windows Server 2012 RTM LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are not listed.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Crypt32.dll 6.2.9200.17164 1,569,792 30-Oct-2014 05:22 x86
Crypt32.dll 6.2.9200.21279 1,591,808 30-Oct-2014 00:46 x86

For all supported x64-based versions of Windows 8 or Windows Server 2012

File name File version File size Date Time Platform
Crypt32.dll 6.2.9200.17164 1,890,816 30-Oct-2014 07:20 x64
Crypt32.dll 6.2.9200.21279 1,919,488 30-Oct-2014 00:51 x64
Crypt32.dll 6.2.9200.17164 1,569,792 30-Oct-2014 05:22 x86
Crypt32.dll 6.2.9200.21279 1,591,808 30-Oct-2014 00:46 x86

For all supported ARM-based versions of Windows 8

File name File version File size Date Time Platform
Crypt32.dll 6.2.9200.17164 1,403,392 30-Oct-2014 05:45 Not applicable

      

Windows 7 and Windows Server 2008 R2 file information and notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are not listed.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Crypt32.dll 6.1.7601.18700 1,174,528 12-Dec-2014 05:07 x86
Crypt32.dll 6.1.7601.22908 1,175,040 12-Dec-2014 05:38 x86
Cryptnet.dll 6.1.7601.18205 103,936 09-Jul-2013 04:46 x86
Cryptnet.dll 6.1.7601.22780 106,496 19-Aug-2014 02:47 x86
Cryptsvc.dll 6.1.7601.18526 143,872 07-Jul-2014 01:40 x86
Cryptsvc.dll 6.1.7601.22856 145,920 30-Oct-2014 02:14 x86
Wintrust.dll 6.1.7601.18526 179,200 07-Jul-2014 01:40 x86
Wintrust.dll 6.1.7601.22736 179,200 07-Jul-2014 01:41 x86

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name File version File size Date Time Platform
Crypt32.dll 6.1.7601.18700 1,480,192 12-Dec-2014 05:31 x64
Crypt32.dll 6.1.7601.22908 1,480,704 12-Dec-2014 06:02 x64
Cryptnet.dll 6.1.7601.18205 139,776 09-Jul-2013 05:46 x64
Cryptnet.dll 6.1.7601.22780 142,336 19-Aug-2014 03:05 x64
Cryptsvc.dll 6.1.7601.18526 187,904 07-Jul-2014 02:06 x64
Cryptsvc.dll 6.1.7601.22736 190,976 07-Jul-2014 02:06 x64
Wintrust.dll 6.1.7601.18526 229,376 07-Jul-2014 02:07 x64
Wintrust.dll 6.1.7601.22736 229,376 07-Jul-2014 02:06 x64
Crypt32.dll 6.1.7601.18700 1,174,528 12-Dec-2014 05:07 x86
Crypt32.dll 6.1.7601.22908 1,175,040 12-Dec-2014 05:38 x86
Cryptnet.dll 6.1.7601.18205 103,936 09-Jul-2013 04:46 x86
Cryptnet.dll 6.1.7601.22780 106,496 19-Aug-2014 02:47 x86
Cryptsvc.dll 6.1.7601.18526 143,872 07-Jul-2014 01:40 x86
Cryptsvc.dll 6.1.7601.22856 145,920 30-Oct-2014 02:14 x86
Wintrust.dll 6.1.7601.18526 179,200 07-Jul-2014 01:40 x86
Wintrust.dll 6.1.7601.22736 179,200 07-Jul-2014 01:41 x86

        
      

For all supported IA-64-based versions of Windows Server 2008 R2

File name File version File size Date Time Platform
Crypt32.dll 6.1.7601.18700 2,690,048 12-Dec-2014 04:45 IA-64
Crypt32.dll 6.1.7601.22908 2,691,072 12-Dec-2014 04:45 IA-64
Cryptnet.dll 6.1.7601.18205 267,264 09-Jul-2013 04:27 IA-64
Cryptnet.dll 6.1.7601.22780 272,896 19-Aug-2014 02:13 IA-64
Cryptsvc.dll 6.1.7601.18526 388,608 07-Jul-2014 01:22 IA-64
Cryptsvc.dll 6.1.7601.22736 392,704 07-Jul-2014 01:25 IA-64
Wintrust.dll 6.1.7601.18526 514,048 07-Jul-2014 01:22 IA-64
Wintrust.dll 6.1.7601.22736 514,048 07-Jul-2014 01:25 IA-64
Crypt32.dll 6.1.7601.18700 1,174,528 12-Dec-2014 05:07 x86
Crypt32.dll 6.1.7601.22908 1,175,040 12-Dec-2014 05:38 x86
Cryptnet.dll 6.1.7601.18205 103,936 09-Jul-2013 04:46 x86
Cryptnet.dll 6.1.7601.22780 106,496 19-Aug-2014 02:47 x86
Cryptsvc.dll 6.1.7601.18526 143,872 07-Jul-2014 01:40 x86
Cryptsvc.dll 6.1.7601.22856 145,920 30-Oct-2014 02:14 x86
Wintrust.dll 6.1.7601.18526 179,200 07-Jul-2014 01:40 x86
Wintrust.dll 6.1.7601.22736 179,200 07-Jul-2014 01:41 x86

      

References

See the terminology that Microsoft uses to describe software updates.