Hey All,
I was hoping you may be able to assist me in updating the root certificates for my Windows 2008 R2 servers.
I was looking to update the root certificates for all our server estate and it appears that I can do this using WSUS/windows update for Windows 2008 via a windows update cab file from this url,http://catalog.update.microsoft.com/v7/site/Search.aspx?q=931125.
However this site only lists Windows 2008 and not Windows 2008R2. The following url describes updates for Windows 2008 R2http://support.microsoft.com/kb/931125
“Windows Server 2003, Windows Server 2008, Windows Server 2008 R2The automatic root update mechanism is enabled on Windows Server 2008 and later, but not on Windows Server 2003. Windows Server 2003 supports the automatic root update mechanism only partially, equivalent to the support on Windows XP.”
I’d prefer to use WSUS to deploy as opposed to the method for disconnected networks downloading CAB files and using Group Policy, as WSUS would automate future updates, whereas the method for disconnected networks would require regular maintenance.
We have disabled access to Windows Update through group policy, so devices can’t automatically update their root certificates directly from the internet.
Any suggestions, please let me know,
Cheers
Andrew