The update is automatically downloaded and installed via Windows Update. Update KB4474419 (SHA-2 code signing support update for Windows Server 2008 R2 and Windows 7: March 12, 2019) adds support for SHA-2 signature evaluation for Windows 7 SP1 and its server pendants.

Updates KB4474419 and KB4490628Įffective March 12, 2019, Microsoft has extended the support article 4472027 titled 2019 SHA-2 Code Signing Support requirement for Windows and WSUS with the details and named the required updates.

As of March 12, 2019, Microsoft has provided the required updates as part of the patchday. In the blog post SHA-2 patch for Windows 7 arrives on March 2019 I had announced an update for this month, but I had to leave some details to it. Without this update, these machines will not be able to process new updates in the future. Users of Windows 7 SP1 (as well as its server counterparts) and WSUS will therefore need a special update from April 2019, which will enable the machine for SHA-2 code signatures. I've had published the article Windows 7: From April 2019 'SHA-2-Support' is about that.

Microsoft had announced in 2018 that it would only add SHA-2 signatures to its Windows updates from mid-2019 onwards – signing with SHA-1 would then no longer be necessary for security reasons. You can add missing information to the comments. The blog post is an attempt to pick up some loose ends and bring them together to an article describing the odds and evens.

Kb4474419 download windows 7