asheroto / root-certificate-updater

Update root certificates (and disallowed certificates) on Windows. No changes to settings.

Root Certificate Updater

Update root certificates (and disallowed certificates) on Windows.

This repo contains two options to update root certificates. Each option performs the same procedure.

If you're not sure which option to choose, use the GUI (the first option) as it's the easiest.

No changes are made to any settings, this only updates the root certificates. Windows Update is NOT required for this to work.

Option 1: GUI

GUI application for updating root certificates. One click, done.

Screenshot

Option 2: PowerShell Script

Update root certificates using a PowerShell script.

Installation

You can either download the PS1 script from here, or install using...

Install-Script UpdateRootCertificates

This script is published on PowerShell Gallery.

The code is signed, so if you want to change it, just removed the # SIG # Begin signature block line and everything beneath it.

Usage

Command	Description
UpdateRootCertificates	Normal run
UpdateRootCertificates -Force	Skip the 10 second wait before continuing execution

Screenshot

Downloads

Download the latest version from the releases page or from asher.tools.

Password to the zip file is password.

Password enabled due to false positive detections by AV.

Other Notes

The CMD version has been replaced by the PowerShell script.

root-certificate-updater's Issues

Can I run this on Win7?

I have a few programs that won't work with https on my win7 box. I have always used firefox for web browsing so I have never needed the OS certificates. Firefox has it's own I've read. So...I have a download manager (aria2c) that won't work. Installing these may help but I thought I should try at least. Spending days reading about tls, certificates, keys, still I can't seem to determine the procedure to fix all this. Sometimes I thought it was the certificates, then the cipher suite, then....?? Any tips?

Here is the best website I found to explain to add the current certificates. I think your app here does the same.

http://woshub.com/updating-trusted-root-certificates-in-windows-10/

Don't have the latest version of disallowedcertstl.cab file?.

Is it already the latest version... or is it an old file?.
If it's not the latest version... I wonder if there is a newer version.

#9
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab 2019?
I applied it normally.
thank you.

if not old.
is there a similar.. block list?.
thank you.

It doesn't work!

I am not sure what Microsoft has done, but the used endpoints do not work anymore.
You get timeouts.

My Windows is broken, it cannot update itself, there is no working fix ANYWHERE, and stupid Microsoft has no correct documentation on how to update the trusted roots anywhere.

need .NET framework 4.0

can you build one without .NET framework 4.0