I work for a company that uses Windows 7 for end user computing. The Windows 7 computers are updated via a WSUS installation, and access to Microsoft Update is blocked.
We have a problem with a number of websites, who's certificates appears to be invalid, though they are perfectly ok. The problem is, that Windows 7 apparently does an on-demand update of root certificates through Windows Update, rather than rolling out a monthly update, as with Windows XP.
Now that Windows Update is blocked, how should root certificates be updated? It appears that WSUS is not handling this feature.
Thanks in advance.
Best Answer
Try to manually update the root certificates.
http://support.microsoft.com/kb/931125