Known issue for security update 3136000 for the .NET Framework 4.6.1/4.6 and security update 3135996 for the .NET Framework 4.5.2 in Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1
Note This known issue affects only Windows Server 2008 R2 Service Pack 1 (SP1), Windows Server 2008 Service Pack (SP2), Windows 7 Service Pack 1 (SP1), and Windows Vista Service Pack 2 (SP2). It does not affect any newer Windows operating systems.
When you try to install update 3135996 or 3136000, the installation process fails. Additionally, you receive the following error message:
A certificate chain could not be built to a trusted root authority.
This issue occurs when you operate in an environment that's disconnected from the Internet or that has a firewall that blocks content from the following URL:
Thumbprint: 8f 43 28 8a d2 72 f3 10 3b 6f b1 42 84 85 ea 30 14 c0 bc fe
Method 4: System administrators and customers can use the UI provided by the certmgr.msc MMC snap-in to add certificates to the trusted root store. Right-click the Trusted Root Certification Authorities option to display the All Tasks options. The Import option should be used to display the Certificate Import Wizard, which will help you install the root certificate.