Certain HTTPS sites cannot be opened in Firefox after you install update 2965142 in Windows 8.1 or Windows RT 8.1

Applies to: Windows 8.1 EnterpriseWindows 8.1 ProWindows 8.1

This article describes an update for Microsoft Family Safety. Prior to installing this update, Windows Update will verify that mandatory update 2919355 has been installed on your Windows 8.1 or Windows RT 8.1-based computer.


Consider the following scenario:
  • You turn on Family Safety for a child's account on a computer that is running Windows 8.1 or Windows RT 8.1.
  • You turn on web filtering or activity reporting for this child.
  • You install update 2965142 on the computer.
  • You import the Family Safety certificate into Mozilla Firefox, as described in article 2965142.
  • The child tries to go to HTTPS sites that use a specific kind of certificate for site identification. Known examples of these sites include https://www.youtube.com, https://www.google.fr, and https://www.google.ca.
In this scenario, you receive the following warning message in Firefox:
This connection is untrusted.
More details: sec_error_inadequate_key_usage


To resolve this issue, we have released an update for Windows 8.1. 

Note After you install this update, you may see a different Firefox warning message for sites that you have previously visited before you installed the update. This is because caching is performed by the Firefox browser. The warning message resembles the following:
Secure Connection Failed
Error code: sec_error_reused_issuer_and_serial.

To eliminate this warning, open the Firefox browser, browse to the Show All History dialog box, right-click the site that is causing the error, and then select Forget this Site. This specific step is required as it differs from clearing browser history. After you have done this, the warning message should no longer appear when you go to the site.

Update information

How to obtain this update

Windows Update
This update is available from Windows Update.
Microsoft Download Center
The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows 8.1Download Download the package now.
All supported x64-based versions of Windows 8.1Download Download the package now.
Note The update for Windows RT 8.1 can be obtained only from Windows Update.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.


To install this update, you must first install the update 2919355 on Windows 8.1 or Windows RT 8.1. 

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update replaces the files in previously released update 2965142.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about how to set up Family Safety, go to the following Microsoft website: For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates