Strange error (almost) disables my fresh Win7 installation.

[Garlic Bread]

Hi.

I have been fixing up an X220 in the last couple of days, but now that I am installing Win7 I have encountered a new problem that I haven't seen before; Whenever I try to do anything I am met with an error message that says 'A certificate chain processed, but terminated in a root certificate not trusted by the trust provider'. I can't surf the web, and most of the programs I want to install including .NET 4.8 and by extension anything that relies on it gets denied. I tried running Windows Update but it times out (Error 8024001F), and manually installing the update that I think is supposed to fix the issue does nothing.

Have any of you guys encountered this issue? For the record I am installing Win7 Pro from the .ISO that Microsoft currently has available for download on their webpage, which is version 6.1 build 7601.

[theterminator93]

Sounds to me like the unpatched RTM ISO uses the now expired Let's Encrypt certificate.

https://www.zdnet.com/article/fortinet- ... t-expires/

Possible resolution here: https://community.letsencrypt.org/t/fix ... s/161162/3

[mikemex]

Oh yes. Root certificate expiration was a headache some time ago.

If you have such issues with W7 -which is not particularly dependent on external things- I can't imagine the nightmare W10 is going to be when it goes offline. Half of the parametric / dynamic UI is going to vanish.

[RealBlackStuff]

Check this out: viewtopic.php?f=11&t=128170
It includes W7-Pro for X220.

[Garlic Bread]

I solved it!

Updates KB4474419 and KB4490628 from the Microsoft Update Catalog (https://www.catalog.update.microsoft.com/Home.aspx) enabled Win7SP1 Pro to utilize the SHA-2 certificate, which in turn allowed me to install .Net 4.8 and Lenovo System Update. At the time I am writing this, Lenovo System Update is temporarily unavailable, but that will probably get resolved sometime soon without me having to do anything.

I sure hope that they make similar updates available for Win10 when it reaches its EOL and some update breaks compatibility, but I am not holding my breath!

[dr_st]

I sure hope that they make similar updates available for Win10 when it reaches its EOL and some update breaks compatibility, but I am not holding my breath

That will depend on the active user base at that time. Given the current user base, I think chances are good.

Both of the updates you mentioned are from 2019, before Win7 EOL, BTW.