Known issue for security update 3136000 for the .NET Framework 4.6.1/4.6 and security update 3135996 for the .NET Framework 4.5.2 in Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1

Introduction

Customers who operate in environments that are disconnected from the Internet or who have not deployed the most up-to-date Microsoft certificates from the Trusted Root Program may encounter update installation failures. This behavior occurs because of recent changes to Microsoft Windows Enforcement of Authenticode Code Signing and Timestamping.

Note This known issue affects only Windows Server 2008 R2 Service Pack 1 (SP1), Windows Server 2008 Service Pack (SP2), Windows 7 Service Pack 1 (SP1), and Windows Vista Service Pack 2 (SP2). It does not affect any newer Windows operating systems.

Symptoms

When you try to install update 3135996 or 3136000 , the installation process fails. Additionally, you receive the following error message:

A certificate chain could not be built to a trusted root authority.

Cause

This issue occurs when you operate in an environment that's disconnected from the Internet or that has a firewall that blocks content from the following URL:

Resolution

To resolve this known issue, download and install the latest Microsoft certificates by using one of the following methods:

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Properties

Article ID: 3149737 - Last Review: Mar 25, 2016 - Revision: 1

Windows Server 2008 R2 Service Pack 1, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, Windows Vista Service Pack 2

Feedback