News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • October KB then apply a WIM = No more certificates

    Home Forums Code Red – Security/Privacy advisories October KB then apply a WIM = No more certificates

    Viewing 2 reply threads
    • Author
      Posts
      • #2308138 Reply
        anonymous
        Guest

        For information,

        If you install the October KB (cumulative) and then you upgrade your windows 10 version with a Wim that not includes the October KB, you will lose all your Certificates (because of a Capi version upgrade).

         

        https://docs.microsoft.com/en-us/answers/questions/135614/windows-10-feature-update-to-1909-certificates-mis.html

         

        So dont forget to upgrade your WIM if you don’t want bad surprises with VPN users

        1 user thanked author for this post.
      • #2308148 Reply
        Paul T
        AskWoody MVP

        This post in the above thread has a nice post problem fix.
        https://docs.microsoft.com/answers/comments/140038/view.html

        cheers, Paul

      • #2308496 Reply
        EP
        AskWoody_MVP

        certificates problem noted in MS articles 4577671 and 4579311 which were updated Fri. 10/30:

        https://support.microsoft.com/help/4577671/

        https://support.microsoft.com/help/4579311/

        Symptom

        System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

        Note Devices using Windows Update for Business or that connect directly to Windows Update are not impacted. Any device connecting to Windows Update should always receive the latest versions of the feature update, including the latest LCU, without any extra steps.

        Workaround

        If you have already encountered this issue on your device, you can mitigate it within the uninstall window by going back to your previous version of Windows using the instructions here. The uninstall window might be 10 or 30 days depending on the configuration of your environment and the version you’re updating to. You will then need to update to the later version of Windows 10 after the issue is resolved in your environment. Note Within the uninstall window, you can increase the number of days you have to go back to your previous version of Windows 10 by using the DISM command /Set-OSUninstallWindow. You must make this change before the default uninstall window has lapsed. For more information, see DISM operating system uninstall command-line options.

        We are working on a resolution and will provide updated bundles and refreshed media in the coming weeks.

        fortunately I don’t have these kinds of certificate problems because I use the updated 1909/2004/20H2 install media that MSDN/MVS subscribers have been recently getting

        • This reply was modified 3 weeks, 4 days ago by EP.
        • This reply was modified 3 weeks, 4 days ago by EP.
    Viewing 2 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: October KB then apply a WIM = No more certificates

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.