Should I update my root certificates?

I was wondering if the root certificates must be updated on my computer?

Yes. Install the update of the current root certificates to enjoy added security of IE7 and IE8.

Assuming WinXP & IE7 or IE8: go to http://windowsupdate.microsoft.com . Select CUSTOM and scan | Install all security critical updates available (e.g. KB976325).  If an update of root certificates is listed in the category of the optional software updates on the left, the install to enjoy enhanced Internet Explorer security.

Root certificate updates are usually released every 2 or 3 months. (The last update was published 24 Nov-09.) While Windows Update automatically installs updates certificates root in Vista and Win7, WinXP users will need to install them manually by the foregoing. ~ Robear Dyer (PA Bear) ~ MS MVP (that is to say, mail, security, Windows & Update Services) since 2002 ~ WARNING: MS MVPs represent or work for Microsoft

Tags: Windows

Similar Questions

  • Update for root certificates for Windows XP, recalled the 25/03/2014?

    Hello.

    I just checked my two/2 XP SP3 machines Windows Updates and noticed "root certificates update for Windows XP [November 2013] (KB931125).

    According to the stories of the two machines, I took ' root certificates update for Windows XP [March 2014] (KB931125) "11/03/2014.

    What is going on? MS recalled March 2014 root certificates? :/

    Thank you in advance. :)

    MS recalled March 2014 root certificates?

    No - but you are not alone-online http://answers.microsoft.com/thread/43e9d7eb-7113-4f29-b7fa-b9c4282e399a

  • Update of root certificate does not (error CAPI2 event ID 60)

    Hello

    I recently did a clean install of Windows 7 SP1 on a new system.
    I noticed that there are sites including https / SSL certificates do not seem valid where I don't expect it (for example BBC laboratories), using the two Chrome and IE.
    After some searching on the forum of other messages, I followed it down to a problem with Windows 7, do not automatically update root certificates installed. Specifically, using MMC event logging, CAPI2 event ID 60 (store) returns 5 "access denied." This causes then event ID 11 and 30 to not like the certificate chain fails to build and check.
    Other points to note:
    • Normal Windows updates work fine
    • Most of the sites using https / SSL works fine (i.e. a root certificates are installed with success - if those provided with Windows or have been updated since the installation I don't know)
    • I tried to disable all my firewall / antivirus programs where they prevented updates, no effect
    Anyone know a fix for this - I don't really want to having to perform a complete reinstallation :(
    Thank you!

    Thanks sirot,.

    Unfortunately, this does not work.
    In the end I just did a re-complete installation of Windows which seems to have solved the problem.
  • Root certificate update XP

    I have spoken too soon about the repair of my previous to the detection of KB931125.  This time I didn't notice the new detection of the update previously installed only after the detected update Office Live Add - In.  After I installed it, updated detected as a high priority update, I ran Windows Update again, and it has detected again for the root certificate.  My previous thread, where I thought that this problem has been solved, was titled "Windows Update keeps detect two updates previously installed several times, KB931125 and KB2632503" then I uninstalled the Office Live Add-In and represented the update.  It always detects the update of root certificate.  If the failure of the feature update to recognize the root certificate as it has already installed is connected to an Office component?  I don't think that I had installed Office Live; so I do not understand why it has detected Live Add-In as criticism.

    Hello

    Hide the Windows Update and see if it helps.

    r: right click on Windows Update and select hide

  • Update KB931125 guard installation root certificate. __

    I installed this update, but it keeps wanting to be installed again & again & again...

    Hello William,.

    you have a WSUS server on your network?

    In my case, there was an identified need and installable old obsolete root certificate update in my WSUS Config.
    When I disable this old "Update" ist, the latest being (from September), installed without a problem on my machines.

    Kind regards
    GoopherNo1

  • How can I determine that trusted root certificates in the Certification authorities are all valid

    I was looking in the Lenovo Superfish Adware (I have her, much less a Lenovo) and I read an article in PC world who said Superfish installs a root certificate self-produced in the Windows certificate store for trusted root Certification authorities, and then quit all SSL certificates, presented by the HTTPS sites with its own certificate :

    http://www.PCWorld.com/article/2886278/how-to-remove-the-dangerous-SUPERFISH-adware-presintalled-on-Lenovo-PCs.html

    This led me to run certmgr.msc (Certificate Manager) on my PC to see what certificates were in CAs roots of trust and to my surprise there are 321 certificates listed. How can I determine that all these certificates are all valid?

    I use Kaspersky Internet Security 2015 and Windows Defender and update the definitions and conduct analyses regularly, with negative results. I have no problem at all with my PC, I'm just worried.

    Hello Josagan,

    Thanks for posting your question on the Microsoft community.

    I understand your concern.

    This request fits better to the MSDN forums since it is linked to the development of Windows.

    I suggest you post your question on the following MSDN forum.
    https://social.msdn.Microsoft.com/forums/IE/en-us/home?Forum=iewebdevelopment

    Thank you

  • Update the SSL certificate on a security server?

    Good afternoon everyone,

    I'm trying to update the SSL certificate on the server of our security, but I'm running into some problems.

    DigiCert (we get our certs of), not like the VMWare KB article order to request a 2048-bit crt, so we used their tool to generate our a commandsfor us:

    keytool - genkey-server alias - keyalg RSA - keysize 2048, FULL domain name -.jks keystore - dname 'CN = CNNAME, OR = OUNAME, O = ONAME, L = NAME, ST = STNAME, C = CNAME'

    keytool-certreq alias server-file FQDN.csr - FULL.jks domain name

    (I did not show the exact details of the CN name, etc.)

    It makes the keystore a .jks instead of a .p12

    Should this cause problems?


    Because after I imported the cert in the keystore, change the config locked file to reference the key file and restart the Server Security Service, it does not restart properly. (Defining the locked towards the old works fine keystore file, then restarting the service works find though.)

    This documented error in Event Viewer:

    Not able to create the com.vmware.vdi.ice.server.JMXServer.main(SourceFile:211) MBean server
    javax.management.MBeanException: Exception thrown in the startServer operation
    at com.sun.jmx.mbeanserver.StandardMetaDataImpl.invoke(StandardMetaDataImpl.java:435)
    at com.sun.jmx.mbeanserver.MetaDataImpl.invoke(MetaDataImpl.java:220)
    at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:815)
    at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:784)
    at com.vmware.vdi.ice.server.JMXServer.main(SourceFile:209)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at net.propero.workspace.windowsinfrastructure.tunnelservice.TunnelService.run(SourceFile:34)
    at java.lang.Thread.run(Thread.java:595)
    Caused by: java.lang.Exception: ice beginning: null
    at com.vmware.vdi.ice.server.Ice.startServer(SourceFile:695)
    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at com.sun.jmx.mbeanserver.StandardMetaDataImpl.invoke(StandardMetaDataImpl.java:414)

    Should I request/pay for a new cert so my base keystore is .p12 instead of .jks?

    Hello

    I think that the command you mentioned creating a CSR only. You get a digicert certificate after sending this rea and create a keystore with whom?

    Please follow the steps in this KB to complete the whole process.

    http://KB.VMware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalID=1008705

    -noble

  • Should I update my Macbook 2009 end of El captain?

    My Macbook is an end of 2009 one, with an Intel Core 2 Duo 2.26 GHz processor, a chip of 8 GB 1067 MHz DDR3 memory and an NVIDIA GeForce 9400 M 256 MB graphics card. There are currently about OS X 10.9.5, and I've seen articles recently talk of a huge hole being patched in OSX recently. I know not if my Macbook update is worth the risk, because it works very well at the moment and I need for classes, but I don't want it to be dangerous. Should I update to El Captain, wait for macOS Sierra to do this, or keep on Mavericks?

    Thank you

    I can only say that the latest security updates are installed when you upgrade to the latest version of Mac OS X. Now El Capitan. If you wait or not depends on if Apple releases always updates to security for the Mavericks, and if you install these updates.

  • ISP says "update of digital certificates expired" now no outgoing doesn't email - HELP

    That's what the ISP told me: "it seems that things worked until the moment when we updated our.
    digital certificates expire this morning. You may need to accept the new
    certificate (that I had to do on my iPhone/iPad). All e-mail applications
    differ in the way they treat the SSL certificates. Please see your
    Help files request for more information on how to import or accept a car
    signed digital certificate.

    I looked in 'view certificates' and 'validation', but I don't see anything to change or do... So, how can I accept this "new" certificate

    Thanks in advance!

    Craig

    If your ISP uses self-signed certificates ask them when they intend to become a professional store. Free self-signed certificates are basically something that exists to allow analysis of configurations without fees to pay for certificates. This leaves a loophole for tight companies, generally jobs of MOM and dad, or firms, who are simply stretched to use the correct string of voting trust and pay for their certificates.

    Not properly issued SSL certificates requires no acceptance, that the issuer or someone higher in the chain of trust is pre approved by Mozilla. It is extremely poor security to allow users wont accept SSL certificates and they are not experts in these things and could easily appove a certificate that makes their raw text of communication to third parties.
    You are done better with unsecured connections, you're free of those signed. At least you know your vulnerable.

    However, if you go to the menu Tools > options > advanced > certificates and Tower of the verify option you could do better. They are not probably set up as they sign free. Other than the view certificates and remove all those that you already have for them.

  • Should I update my MacBook 2010?

    Should I update my MacBook 2010? I am a novice and mainly to store photos, e-mail and internet. Thanks in advance.

    Mac OS X 10.6.8

    The specifications are: MacBook7, 1

    Processor: Intel Core 2 Duo 2.4 GHz

    L2Cache: 3MB

    Memory: 4 GB

    Bus speed: 1.07 GHz

    In General, you should always pass to the last possible system like you meet the specs for, as long as you do not have "must have" applications that do not meet specifications. Upgrades and updates contain important security as well as additional functionality enhancements.

    Although Apple has 2 GB of RAM 4-6 GB is really a minimum. Your using be expandable to 16 GB. You can check that the CrucialAdvisory tool, or OWC. After adding RAM, I'd update to El Capitan.

  • Should I update iMac 21.5 mid 2011?

    When I got my new iMac iRetina my old iMac was put in mothballs. By this, I mean that he sat at a desk not used for more than a year. My wife wants to start using it and I just turned it on and a miracle happened, it works. I thought I had left it in a State ready to be configured for a new user, but it is apparently already configured to connect to my apple id because I see an option to close your session with my name on it. Two questions: 1) how that it is configured to check? Since we went with the iOS devices, we used the same ID apple so if we buy apps, they are working on one of the devices. (2) it is a 21.5 "mid-2011 with an Intel Core i5 to 2.7 ghz and 1333 mhz 24 GB DDR memory. He is currently in OS X Lion 10.7.5. What OS should I update 1) this iMac can deal with good performance and 2) is free? Did someone using Open Office for the iMac? If yes it you please?

    1. System Preferences > users and groups > Admin account

    System Preferences > iCloud > sign in

    If it is not configured as you wish, the easiest would be to wipe the drive with disk utility and reformat. Then, in the wizard configuration, make your choice.

    2. you can upgrade directly to El Capitan 10.11.5

    In General, you should always pass to the last possible system like you meet the specs for, as long as you do not have "must have" applications that do not meet specifications. https://support.Apple.com/kb/SP728?locale=en_US

    Several things you should do before moving...

    1. If you have questions on your current system don't their compound by installing above them. Solve them first, and then upgrade.

    2. check HARD drive for free space. At least 8.8 GB of available storage. Preferably more.

    3. check your applications for compatibility here... http://roaringapps.com/apps

    4 make a bootable clone SuperDuper! or clone double or use TimeMachine.

    5. unplug all devices, including USB hubs.

    6. After downloading the installer, it will be in the folder/Applications. Copy and then drag it to a different places like downloads.

    7 be patient, the download takes a long time, and the installation may appear as sometimes it is dead. Ignore it.

  • 750-103D wanted: should I update to the latest drivers listed on 14 August 2016

    I bought my office on 15 August and just noticed that the HP customer online support shows most, if not all latest drivers appear on 14 August.

    My office is currently superbly and I wonder if it is really necessary to update the latest drivers that I remembered some experts counsel that "if it ain't broke, don't fix it."

    So I should or should not update the drivers?

    Expert IT advice are welcome. Thank you.

    Vincemy82

    The date of the driver that you see on the site of HP is probably wrong.  That is the date that the web page was last updated by HP, not the date, that the drivers have been released.

    To view the date of the driver, you must click on the Details tab for each of the drivers.  You will see then probably much more ANCIENT date of actual output for each driver.

    Good luck

  • Should I update my Bios?

    I have an old DV6707us.  I bought a new computer and when it failed, I took my old laptop and replace the hard drive has failed. The original system is Windows Vista.  A couple of months he has reformatted the new hard drive and installed Win7.

    My question is: there was an old BIOS upgrade, I the way back a couple of years ago, when the computer was using Win Vista: should I update the BIOS again since I installed Win 7?  He has not rejected since that time that I updated the BIOS with vista on it.

    Hi imaspacewoman and welcome to the HP Forum!

    I understand you're wondering if you need to update the BIOS. I suggest do you the BIOS update and am including this document to update the BIOS. Make sure you get the right Windows 7 update for 'your' computer.

    I hope that this information help, please let me know how it goes.

    Good luck and have a great day!

  • Should I update all the files from the Toshiba site after using the recovery CD

    I just used my recovery CD and update the Windows Update System.

    The question is: should I update all files in the files on this site download section as well?

    Usually after using the Toshiba Recovery CD everything should works and works correctly
    To my knowledge from time to time Toshiba has released new version of some tools or drivers. For example the BT stack will be developed all the time.
    But I think that if you have any problems with your system and peripherals, then you don't need t to update anything.
    Small is my opinion...

  • HP 15-af131dx: should I update windows 10 birthday?

    Should I update to windows 10 birthday? Someone had problems with the update?

    To install the updated Windows 10 anniversary choice you completely. Yes, people have had problems with the update. If you need the use of the computer and can not afford to face questions, you can wait on the installation of the update. If problems occur during or after installation, and you can manage it, you can install the update. I suggest creating a Windows repair disc and do a Windows system image backup before installing the update.

    If you have any other questions, feel free to ask.

    Please click the White Star of KUDOS to show your appreciation

Maybe you are looking for

  • I want to cancel the order of the cloud photomyne

    I want to cancel the order of the cloud photomyne... because I just upgraded.now I don, t like it.

  • How can I get rid of old archives?

    I added an old Gmail account to my Thunderbird application on my Mac (newish MacBook Pro with the Mavericks). I checked "Keep messages for this account on this computer" in the "Synchronization & storage" section of the account settings.I finished wi

  • AutoComplete history shows only the favicon: URL is not displayed

    FFox 26 on Win7 Pro (Dell)All of a sudden (with new FFox?), we do not see the URL displayed in the history of the auto-coimplete. We get a drop down menu, but only the sites favicon is displayed: space to the right of the favorite icon where you shou

  • Upgrade my CPU in my Toshiba laptop

    I want to improve my CPU in my Toshiba laptop. How can I do that.

  • Leave a consumer while loop

    Hello I've included a little VI which is purley two while loops is a producer and the other a loop of consumer. This example is to show someone this method. What I want to do is produce it at a faster pace than the rate of consumption, and when the l