Known issue for security update 3136000 for the .NET Framework 4.6.1/4.6 and security update 3135996 for the .NET Framework 4.5.2 in Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1

Vrijedi za: Windows Server 2008 R2 Service Pack 1Windows Server 2008 Service Pack 2Windows 7 Service Pack 1


Customers who operate in environments that are disconnected from the Internet or who have not deployed the most up-to-date Microsoft certificates from the Trusted Root Program may encounter update installation failures. This behavior occurs because of recent changes to Microsoft Windows Enforcement of Authenticode Code Signing and Timestamping.

Note This known issue affects only Windows Server 2008 R2 Service Pack 1 (SP1), Windows Server 2008 Service Pack (SP2), Windows 7 Service Pack 1 (SP1), and Windows Vista Service Pack 2 (SP2). It does not affect any newer Windows operating systems.


When you try to install update 3135996 or 3136000 , the installation process fails. Additionally, you receive the following error message:

A certificate chain could not be built to a trusted root authority.


This issue occurs when you operate in an environment that's disconnected from the Internet or that has a firewall that blocks content from the following URL:


To resolve this known issue, download and install the latest Microsoft certificates by using one of the following methods:


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.