SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008

SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019

Applies to: Windows Server 2008 R2Windows 7Windows Server 2008

---

Notice

---

• This security update was released March 12, 2019 for Windows 7 SP1 and Windows Server 2008 R2 SP1.
• This security update was updated May 14, 2019 to add support for Windows Server 2008 SP2.
• This security update was updated June 11, 2019 for Windows Server 2008 SP2 to correct an issue with the SHA-2 support for MSI files.
• This security update was updated August 13, 2019 to include the bootmgfw.efi file to avoid startup failures on IA64-based versions of Windows 7 SP1 and Windows Server 2008 R2 SP1.
• This security update was updated September 10, 2019 to include boot manager files to avoid startup failures on x64-based versions of Windows 7 SP1, Windows Server 2008 R2 SP1 and Windows Server 2008 SP2.
• This security update was updated September 23, 2019 to correct an issue in the Windows Update Agent that has the ZH-HK language pack installed.

Summary

---

This update introduces SHA-2 code sign support for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2.

For more information, see the following articles:

2019 SHA-2 Code Signing Support requirement for Windows and WSUS

ADV190009

How to get this update

---

Method 1: Windows Update

This update will be downloaded and installed automatically.

Note This update is also available through Windows Server Update Services (WSUS).

Method 2: Microsoft Update Catalog

To get the standalone package for this update, see the Microsoft Update Catalog website.

More information

---

Prerequisites

There are no prerequisites for installing this update.

Restart information

You have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.

Improvements

This update also includes the following improvements:

• Further hardening of infrastructure files that are used by the Windows Update and Microsoft Update client.
• A more secure communication channel between the service and the Windows Update and Microsoft Update client has been added.

Windows 7 and Windows Server 2008 R2 file information

---

File verification

File hash information

File attributes

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows 7 and Windows Server 2008 R2 file information

Notes

The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported ia64-based versions

For all supported x86-based versions

For all supported x64-based versions

Windows Server 2008 file information

---

File verification

File hash information

File attributes

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Server 2008 file information

Notes

The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported ia64-based versions

For all supported x86-based versions

For all supported x64-based versions

References

---

Learn about the terminology that Microsoft uses to describe software updates.

---

Last Updated: Sep 24, 2019