For Everyone's information: It looks like Microsoft forgot to make this update available https://support.microsoft.com/en-us...ning-support-requirement-for-windows-and-wsus for Windows 7 Embedded OS which installs the ability to use SHA-2 code signing. As soon as the Aug 2019 security rollup update is installed, " KB4512506 " upon reboot, the OS indicates " Windows cannot verify the digital signature for this file " which of course is caused by the lack of the SHA-2 code sign support. https://support.microsoft.com/en-ca/help/4512506/windows-7-update-kb4512506 I've had two NVR's go down due to this issue. Exact error that appears on the screen after OS reboots: File: \Windows\system32\winload.efi Status: 0xc0000428 Info: Windows cannot verify the digital signature for this file. The work around for now is to to edit BCD using the switch nointergritychecks 1. See this youtube video for further instructions.
Here you go x64 https://www.catalog.update.microsof...updateid=d8772246-54b5-43e9-8562-3e521b307473 https://www.catalog.update.microsof...updateid=723af072-336d-4e96-90c6-ae166a4e7cc4 x86 https://www.catalog.update.microsof...updateid=fbbea51d-a628-49fe-a2c2-cde8ca0267e8 https://www.catalog.update.microsof...updateid=9511095a-074b-40ee-9212-6d2c4309cf92 Servicing stack applies first.
First, Thank You for looking up the download locations and documentations. Appreciate it. Second, The problem original stems from the fact that the Windows update server is not issuing this update before applying the Aug security patch. Regards
Further troubleshooting has revealed that the 2019-03 Servicing Stack Update for Windows Embedded Standard 7 for x64-based Systems (KB4490628) had already been been installed on the Windows 7 Standard Embedded device. I do not know if it's only Windows 7 Standard Embedded devices that are having this issue or certain configuration of Windows 7 computers? If anyone else is running into this, would you post a comment on this thread. Will update as I learn more about this issue. Regards
I have a windows 7 computer but its not affected as i don't use UEFI on there. perhaps Microsoft failed to update the efi module with the required signatures? just checking, but there does not appear to be a KB3133977 for Windows 7 embedded, this might be the problem
