KB4014984 doesn't install on Vista (standalone either)

Anonymous
2020-04-03T13:51:17+00:00

Hello there,

once again I have installed my beloved Vista Business (x86), everything goes fine except one of the last updates.

The system finds and suggests me to install the one which is exactly called

"April, 2017 Security and Quality Rollup for NET. Framework 2.0, 3.0, 4.5.2, 4.6 on Windows Vista SP2 and Server 2008 SP2 (KB4014984)".

Installing via Windows Update Center throws out the 800B0109 error.

What I have already tried: I do have NET. Framework 4.6 installed and there is an appropriate (?) update for it (KB4014553) as well as its standalone installer.

After successful file extracting this installer shows the same message with explanation in which it is said that

"A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider (error 800B0109)".

I also tried to download a standard Microsoft certificate file (found somewhere over the internet) and to import it to MMC (Run/mmc/etc.) - DOES NOT WORK.

But this rollup update (KB4014984) DID work during the last year, what could have happened?

Please help. Appreciated in advance.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2020-04-12T16:01:54+00:00

Hi Great White North, (COMPLETE SOLUTION TO PROBLEM)

Happy Easter.

I tried the method you suggested posted by Greenhillmaniac by downloading his Microsoftrootcertificate2011.cer file and installed it by the command line method he suggested.  Like Mikey said, this method "worked like a charm", and windows update installed the April 2017 rollup perfectly.  The "meticulous scientist" in me (you can probably tell by the way I post) was curious as to why this method worked so much better than the solution I posted yesterday, so I ended up restoring the Windows Vista partition several times and running several trials to answer this question.   It turns out that his certificate file is identical to the one I exported from a Windows 7 computer; however, the "command line" method of installing this certificate is a superior method of installing it that the method I was using, which was to import the certificate into the Trusted Root Certification Authorities tab by using the import button.

To anyone else who may encounter this problem, my recommended solution is outlined below:

Obtain a copy of the Microsoft Root Certificate Authority 2011 certificate either by downloading it (see previous posts in this thread) or exporting it from a more modern up to date computer (I used a Windows 7 computer.)  I would recommend also obtaining the Microsoft Root Certificate Authority 2010 certificate, but for the purposes of this solution the 2011 certificate alone works fine.  Copy this root certificate file (or files) to your C: drive by clicking the My Computer button, then the C: hard drive icon, and move or copy the file(s) to this window (for simplicity, do not put the file inside any folder on the C drive.)  Click the start button, then move the cursor to programs, then the accessories folder, then RIGHT CLICK the command prompt icon and choose "Run as administrator" from the pop up menu that appears.  Type cd\ and hit enter.  Then type certutil -addstore "Root" "c:\XX.cer" and hit enter. Type this command exactly as written including the quotation marks except substitute the name you chose for the certificate file for the XX.  You should get a confirmation message telling you that the command action was successful.  Run this command twice if you are installing both the 2010 and 2011 certificates.   Close the command prompt window and restart the computer.  You should now be able to install the Security and Quality Rollup April 2017 now either by running Windows update (easiest way) or by using the stand alone installers that I discussed yesterday (earlier in this thread.)  You can now delete the Microsoft Root certificates from your C: drive, or move them to a storage folder, or just leave them where they are (they won't hurt anything.)  My thanks to GREAT WHITE NORTH and GREENHILLMANIAC for their contributions to this solution.

Was this answer helpful?

4 people found this answer helpful.
0 comments

56 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2020-04-15T15:59:53+00:00

    Hi Great White North,

    Thanks for the update and sorry to take so long to get back to you, duty calls.  I did take a look at the articles you suggested on "Slow or stuck Windows updating."  I was already aware of the issue and the need to install the 4 stand alone updates before running Windows update (the 5th stand alone after updating to IE9), but I was not aware of the 5 stand alone updates that Microsoft released in June of 2017 that do not show up in Windows update, so thanks for that.

    It looks like you are right about Norton continuing to support Windows XP and Vista with versions v22.15.2.22 and up (v22.15.2.37 and hopefully today's release of 22.15.3.20 with the new Norton 360 accounts.)  This whole problem with the computer started in early March.  I got home from vacation the second week of march and suddenly found that my installed Norton (version 22.15.0.88) would not run, scan, or (most problematic) uninstall.  I placed 3 calls to Norton support that day.  The first call the tech took me through an online uninstall process, which worked but I started getting all kinds of error messages with the computer.  So I decided to reinstall Vista and start over.  When I attempted to reinstall Norton (I have a stand alone installer for version 22.15.0.88) the same thing happened.  I reinstalled vista again and made my second call to Norton.  This time the tech sent me a link to the same stand alone installer of 22.15.0.88.  I informed the tech that this was the same version I was having trouble with, but agreed to try the download he sent.  Of course I got the same result (definition of insanity.)  So I made my third call to Norton.  This time the tech informed me that the new Norton 360 accounts were not compatible with Windows Vista.  I asked to speak to a supervising technician, who said the same thing.  I assumed this was true until I saw your response, and yesterday I chatted online with a Norton tech (phone call wait time currently to long) to ask why an article on THEIR OWN WEBSITE stated that Norton versions 22.15.x were still compatible with the new 360 accounts.  All he did was send me the same link to the same 22.15.0.88 download.  This version REFUSES to connect to the Norton server to activate (probably incompatible with the new 360 accounts), and then after a system reboot it refuses to work at all.  

    Last night I tried another Vista computer with version 22.15.2.37 installed and it worked perfectly.  I was able to log in to my account on the server, update it, run scans, etc.  My working theory is that version 22.15.0.88 is the problem.  I am going to try get a copy of 22.15.3.20 tonight and see if that works.

    It is a crying shame that Norton tech support is so spotty.  However, I happen to like the Norton product better than any other antivirus that I have tried.  After this problem with the Norton, I tried Bullguard, but I did not like it.  Yesterday I took Peter Starling's suggestion and tried AVG.  It initially looked promising, but I did not like this one either because it 1.) Slowed my boot up time from 90 seconds to almost 5 minutes and 2.) Was constantly trying to sell me other AVG products (even the paid version.)  Hopefully this new version of Norton will work out.  Thanks for all your help.

    Was this answer helpful?

    0 comments
  2. lmacri 2,505 Reputation points
    2020-04-15T22:06:00+00:00

    ...I got home from vacation the second week of march and suddenly found that my installed Norton (version 22.15.0.88) would not run, scan, or (most problematic) uninstall.  I placed 3 calls to Norton support that day.  The first call the tech took me through an online uninstall process, which worked but I started getting all kinds of error messages with the computer.  So I decided to reinstall Vista and start over.  When I attempted to reinstall Norton (I have a stand alone installer for version 22.15.0.88) the same thing happened. ...So I made my third call to Norton.  This time the tech informed me that the new Norton 360 accounts were not compatible with Windows Vista.

    Hi Frederick Risener:

    I posted today in Angus94's Norton Security.......Automatically Uninstalled and asked Norton employee Gayathri_R if a full offline installer was available for the new v22.15.3.20, so you might want to monitor that thread and see if they ever respond.  l only have a v22.15.0.88 installer for my Norton Security Deluxe (Norton customer support provided the download link in 2018 and I'm not even sure they have a newer v22.15.x installer), but according to my notes I performed a clean reinstall of v22.15.1.8 on 19-Jan-2019 using that old v22.15.0.88 installer and everything worked fine once I had run a few cycles of re-booting and manual LiveUpdates to ensure I was patched back to v22.15.1.8.  My current v22.15.2.22 product update was delivered later via an Automatic LiveUpdate on 03-Apr-2019.  If you want to try a clean reinstall instructions are posted in freespace77's thread Windows Defender Still Active in the Norton forum that should work, but when you reach Step # 4 just reinstall by running the offline (standalone) v22.15.0.88 installer. Just note the warning that those clean reinstall instructions will remove other Norton products like Norton Utilities, Norton Ghost, etc.

    I've never received a v22.15.2.37 update, and after a bit of searching today in the Norton community I suspect that patch was only pushed out in January 2020 to users with non-English Norton products.  If you have a non-English version of Norton perhaps that's why the forced upgrade described in the 08-Mar-2020 announcement Active Customers in Legacy Versions Are Being Upgraded corrupted your v22.15.0.88 installation.

    To make everything more confusing, Norton still supports two entirely different products called Norton 360, and only one is compatible with Win XP and Vista .  The "old" Norton 360 Premium was first released several years ago (back in the era of Norton Antivirus and Norton Internet Security) and some of these products are still in use . Then came Norton Security Standard/Deluxe/Premium in 2014 - I switched from Norton Internet Security to Norton Security Deluxe in April 2017, and the "old" Norton 360 Premium (with Norton Backup) is now equivalent to Norton Security Premium (also called Norton Security with Backup or NSBU). Just last year they introduced a "new" Norton 360 (with additional features like Secure VPN, SafeCam for PC, etc.) that requires Win 7 SP1 and higher.  You would think they could have come up with a better name for the "new" Norton 360 without using the same name as an older product.

    32-bit Vista Home Premium SP2 * Firefox ESR v52.9.0 * Norton Security Deluxe v22.15.2.22

    HP Pavilion dv6835ca, Intel Core2Duo T5550 @ 1.83 GHz, 3 GB RAM, NVIDIA GeForce 8400M GS

    Was this answer helpful?

    0 comments
  3. Anonymous
    2020-04-16T06:25:51+00:00

    Hi Great White North,

    The Nomenclature is actually even more confusing than you mentioned above.  When I talk about a Norton 360 account, I am talking about the subscription that you pay Norton for every year.  As of early March 2020, Norton forcibly "upgraded" all subscriptions to Norton 360.  If you go on Norton's website and sign in, all of your subscriptions will now read Norton 360 Deluxe or something similar, depending on which subscription you currently purchase.  It was when Norton made this change to the subscriptions that I started having problems with my Norton Security Deluxe (software.)  It cannot find the Norton server to "activate" (or reactivate.)  It is my theory that what is happening is that when the computer restarts, the Norton Security software finds whatever hidden key Norton puts in the registry that tells it I have used Norton for 20+ years, then realizes that it can't activate with the Norton server and assumes that the software isn't being paid for anymore.  I think that it then activates whatever "anti-theft" embedded software that stops you and me from using Norton security without paying Norton and locks it up.  It won't run, scan, or most problematic uninstall.  I have previously used the downloaded uninstaller which removed the software but caused some other problems.  It is much easier to get rid of it by restoring an image to the C: partition.

    I was chatting with a Norton tech support rep today and he again told me that Norton 360 was not compatible with Windows Vista.  Apparently he was talking about the software while I was talking about the subscription.  This is probably what happened in March when they led me to believe that Norton was no longer compatible at all with Windows Vista, so maybe I was a little rough on them in my earlier post.  Then again, I don't think it is asking too much to expect a senior level support rep to conclude "Oh, you are using Windows Vista.  This is the Norton product you need, and this is what you need to do to get it and install it."

    Norton version 22.15.2.37 came out around January or February of 2020.  To go from version 22.15.0.88 to version 22.15.2.22 took 2 incremental updates by Norton Live update.  Going from 22.15.0.88 to 22.15.2.37 only took a single Live update.  I live in the southern US (just outside of New Orleans) and use the US versions.  I am going to get on the phone (again) with Tech support tomorrow (it may take a couple of hours with the Coronavirus lockdown) and see if they have a stand alone installer for one of these later versions.  I will let you know.  Thanks

    Was this answer helpful?

    0 comments
  4. Anonymous
    2020-04-17T18:39:22+00:00

    Hey Peter Starling,

    I don't know if you are still following this post, but I think you might have been on to something with that rootsupd.exe tool.  I was trying to install something else, and had a certificate error.  I looked at the the Trusted Root Certification Authority certificates on another Vista computer that was up to date and it had 28 pages of certificates (by pages, I mean the small window that appears when you open the certificates button on the content tab under internet properties of the control panel.)  The one I am currently having trouble with only had a little over 3 pages of trusted certificates.  I am going to experiment with the rootsupd.exe utility today.

    Was this answer helpful?

    0 comments