Windows >
Windows Forums
>
Windows 7 Forums
>
Windows Update
>
Root Certificate update KB931125 keeps installing.__
Root Certificate update KB931125 keeps installing.__
- I have installed this update but it keeps wanting to be installed again & again & again.....5 people got this answerI do too
Answers
- Hello William,
do you have an WSUS Server in your Network?
In my case, there was an old outdated Root-Certificate update flagged as needed and installable in my WSUS-Config.
When I deactivate this old "Update" the latest one (from September) ist installed flawlessly on my machines.
Regards,
GoopherNo1
- Proposed As Answer bycace72 Tuesday, November 24, 2009 11:00 AM
- Marked As Answer byWilliam at Arrow Tuesday, November 24, 2009 1:10 PM
All Replies
- Hello William,
do you have an WSUS Server in your Network?
In my case, there was an old outdated Root-Certificate update flagged as needed and installable in my WSUS-Config.
When I deactivate this old "Update" the latest one (from September) ist installed flawlessly on my machines.
Regards,
GoopherNo1
- Proposed As Answer bycace72 Tuesday, November 24, 2009 11:00 AM
- Marked As Answer byWilliam at Arrow Tuesday, November 24, 2009 1:10 PM
Hello William,
do you have an WSUS Server in your Network?
In my case, there was an old outdated Root-Certificate update flagged as needed and installable in my WSUS-Config.
When I deactivate this old "Update" the latest one (from September) ist installed flawlessly on my machines.
Regards,
GoopherNo1
I had even an older from February, I think, which was approved. Declining both the old ones, the new one installs correctly and stops reinstalling between the old and new root certificates.
We have the root as "automatic approval", so perhaps not in the future, as the old must be declined.- Thanks GoopherNo1.
Yes we have a SBS 2003 which is running WSUS. It normally ticks along correctly controlled from the Server Admin.
WSUS did indeed have an old update which I have now declined, and the problem appears to have been resolved.
Regards
William - Its an old update (KB931125). Decline the older update for all and then wait 24hrs and run server cleanup.
WSUS/SCCM Admin
JOB - Yeah I got the same thing too. I'm gonna try to decline the update and then run a server cleanup.
- Proposed As Answer byKevin Krasie Tuesday, November 24, 2009 5:02 PM
- I have WSUS in network...I did deny the older ones so end users are not looped into continuing to install the same two updates...but what I noticed is I removed one PC from the OU and GPO for WSUS updates and went directly to the MS site to do updates...it finds the root update and installs and then find the update root cert sept 2009 and installs and loops back to find the original root cert update??? I dont think this is strictly a WSUS issue...it is for the prompting but even without WSUS these two updates are continously found using windows update using IE??
- Proposed As Answer byJakeLinebaugh Tuesday, November 24, 2009 5:52 PM
- How can I check if I have a WSUS Server in my Network? I'm running a Windows XP 32-bit machine and I don't think I'm connected to a network.
- I have a WSUS with the same issue. Will try to "Decline the older update for all and then wait 24hrs and run server cleanup. "
- Proposed As Answer bydogsnharleys Tuesday, November 24, 2009 5:39 PM
- Good morning, We are using WSUS as well and experiencing the problem with almost all my 600 users. I have declined the updates, ran server cleanup and still it reappears as not installed. I went to Windows update and manually installed the patch, and voila no more yellow icon stating updates are ready for your computer.
Microsoft has to know about this bug and will hopefully be releasing a fix.
This has to do with the expired update from WSUS Update for root certificates [May2009] [KB931125] that was pushed to WSUS yesterday.- Edited bydogsnharleys Tuesday, November 24, 2009 5:49 PMneeded more info
I have WSUS in network...I did deny the older ones so end users are not looped into continuing to install the same two updates...but what I noticed is I removed one PC from the OU and GPO for WSUS updates and went directly to the MS site to do updates...it finds the root update and installs and then find the update root cert sept 2009 and installs and loops back to find the original root cert update??? I dont think this is strictly a WSUS issue...it is for the prompting but even without WSUS these two updates are continously found using windows update using IE??
One you remove the PC from the OU that has the policy applied to it, the server no longer manages what updates are installed/to-be installed. If the update is still published on MS's public update site and the agent detects that the update is not installed it will try to install it and potentially run into the same issues. My advice would be to decline it on your server and if you decide to run WU manually hide the update from further notification.Good morning, We are using WSUS as well and experiencing the problem with almost all my 600 users. I have declined the updates, ran server cleanup and still it reappears as not installed. I went to Windows update and manually installed the patch, and voila no more yellow icon stating updates are ready for your computer.
Microsoft has to know about this bug and will hopefully be releasing a fix.
This has to do with the expired update from WSUS Update for root certificates [May2009] [KB931125] that was pushed to WSUS yesterday.
After declining an update it can take some time for the wu agent to check back in with the server and re-list required updates. We had the same issue on over 1500 users machines. I simply declined the update and then forced the WU agent to re-detect the advertised and required updates. Glad the offline installer worked at remediating the issue, but you dont want to have to do that on over 600 users. Do you run SCCM or GFI by chance?- The update is also looping on Windows updates, you install one and then run updates again and it installs, then the next time you run Windows update it wants to install the other. It is really looking like a bad patch.
The update is also looping on Windows updates, you install one and then run updates again and it installs, then the next time you run Windows update it wants to install the other. It is really looking like a bad patch.
It's because it's a superceded update and no longer valid for install- Looks like microsoft just released 21 new updates including a November patch for root updates.
- Microsoft Expired the Update for Root Certificates [May 2009] patch. This patch was designated as Superceding the original patch. The Update for Root Certificate [September 2009] patch is not designated as a Superceding patch for the original patch (it Supercedes ONLY the May Update).
So, the origianl patch, which was suppressed because it was superceded by the May patch, is no longer superceded by anything (the May patch is now declined and marked as expired).
Both the original patch and the September patch are trying to install because they are not linked in a supercedence chain. Declining the original patch will resolve the issue (over time). Mircosoft will hopefully review and either link the updates, or expire the original patch (released 2/24/09).- Proposed As Answer byCharles Osward Tuesday, November 24, 2009 8:36 PM
- Went to Microsoft Update where it said it had already been downloaded, clicked install updates and no more updates icon. Microsoft does know I same ramblings on microsoft.com this morning from them but wanted to try my solution 1st.
- Folks Microsoft just released today a superseding update for it, "Update for Root Certificate [November 2009] (KB931125). You'll want to 'Decline' the previous two [May 2009] and [September 2009] and release the latest from today. Once installed the problem will be corrected. Keep in mind that it may take several hrs before systems on your network get the changes made on your WSUS server. Also, you clients will continue to get prompted for the September update until the latest is successfully installed.
Don't we all love our friends at Microsoft? - I've reviewed the new patch, and it will supersede the September update when you approve it(ie the September Update will know it has been replaced). However, you will need to decline the original Update for Root Cetificates (KB931125) that was released 2/24/2009 or you will continue to have this issue.
The second time the update shield appears (after the first install) I tried the Custom Installation (Advanced), then unchecked the box next to the update name, then hit the close button, then check the box to say don't notify me of this update again. Worked for me.
Hello All,
We expired the Update for Root Certificates [September 2009] (KB931125). Hence the Hence the supercedence chain is now correct.
Regards,
-kim
