You cannot run an application that is signed with a SHA-256 certificate on a computer that is running Windows Vista SP2 or Windows Server 2008 SP2

Symptoms

Assume that you download an application from the Internet on a computer that is running Windows Vista Service Pack 2 (SP2) or Windows Server 2008 SP2. The application is signed with a Secure Hash Algorithm (SHA)-256 certificate or a certificate with a larger hash value. In this situation, you cannot run the application.

Cause

This issue occurs because the buffer that is provided by the GetCertHash() function is not big enough to store a hash value that is 256-bits (32-bytes) or larger.

Resolution

To resolve this issue, install the following update on the computer. After you install the update, the GetCertHash() function can store hash values that are 512-bits (64-bytes) or smaller.

Update information

How to obtain this update

Windows Update

This update is available from Windows Update.


Microsoft Download Center

The following files are available for download from the Microsoft Download Center:

Operating system

Update

All supported x86-based versions of Windows Vista

Download Download the update package now.

All supported x64-based versions of Windows Vista

Download Download the update package now.

All supported x86-based versions of Windows Server 2008

Download Download the update package now.

All supported x64-based versions of Windows Server 2008

Download Download the update package now.

All supported IA-64-based versions of Windows Server 2008

Download Download the update package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

To apply this update, you must be running Windows Vista SP2 or Windows Server 2008 SP2.

For more information about how to obtain a Windows Vista service pack, click the following article number to view the article in the Microsoft Knowledge Base:

935791How to obtain the latest Windows Vista service pack

For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

968849How to obtain the latest service pack for Windows Server 2008

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.

The global version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information notesImportant Windows Vista updates and Windows Server 2008 updates are included in the same packages. However, only "Windows Vista" is listed on the Update Request page. To request the update package that applies to one or both operating systems, select the update that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each update applies to.

  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version

    Product

    SR_Level

    Service branch

    6.0.600
    2.
    22xxx

    Windows Vista and Windows Server 2008

    SP2

    LDR

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Vista and for Windows Server 2008" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Vista and of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Shlwapi.dll

6.0.6002.18738

353,280

22-Nov-2012

03:54

x86

Shlwapi.dll

6.0.6002.22983

353,280

22-Nov-2012

05:44

x86

For all supported x64-based versions of Windows Vista and of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Shlwapi.dll

6.0.6002.18738

456,192

22-Nov-2012

04:22

x64

Shlwapi.dll

6.0.6002.22983

456,192

22-Nov-2012

06:34

x64

Shlwapi.dll

6.0.6002.18738

353,280

22-Nov-2012

03:54

x86

Shlwapi.dll

6.0.6002.22983

353,280

22-Nov-2012

05:44

x86

For all supported IA-64-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Shlwapi.dll

6.0.6002.18738

863,744

22-Nov-2012

03:24

IA-64

Shlwapi.dll

6.0.6002.22983

863,232

22-Nov-2012

02:21

IA-64

Shlwapi.dll

6.0.6002.18738

353,280

22-Nov-2012

03:54

x86

Shlwapi.dll

6.0.6002.22983

353,280

22-Nov-2012

05:44

x86


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Any additional feedback? (Optional)

Thank you for your feedback!

×