Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account


rootsupd & disallowedcert

- - - - -

  • Please log in to reply
3 replies to this topic

Bugs Bunny

Bugs Bunny


  • Member
  • Pip
  • 66 posts
  • Joined 07-December 05

I've always been using rootsupd.exe in the HF folder as there is a distinct code part in hfslip that handles rootsupd.exe

Now Microsoft seems to have changed the rootsupdate no longer supporting disallowedcert.
I've extracted an older version of rootsupd.exe and a newer one and compared the options available.
Old version:
New version:

The –u option (add to disallowed root store) is no longer available.
The extracted rootsupd.exe does not contain a disallowedcert.sst file any more.

But still hfslip gets a disallowedcert.sst from somewhere else (but I do not know where-from).
During setup therefore an error shows up, because hfslip wants to run updroots.exe for disallowedcert.sst with the options –l –u and the –u option is no longer available.

So as Microsoft removed the –u option from updroots.exe, is it safe to remove the codepart from hfslip that handles disallowedcert.sst specifically? (this should resolve the error during setup)

        IF EXIST WORK\I386E\disallowedcert.sst ( 
                REN WORK\I386E\disallowedcert.sst rvkcert.sst 
                ECHO>>SOURCESS\I386\TXTSETUP.SIF rvkcert.sst = 1,,,,,,,998,0,0&ECHO>>SOURCESS\I386\DOSNET.INF d1,rvkcert.sst 
                ECHO>>WORK\HFSLIPCMDP1.TXT %%SYSTEMROOT%%\HFSLIP\updroots.exe -l -u %%SYSTEMROOT%%\HFSLIP\rvkcert.sst 

Anyone knows where the disallowedcert.sst comes from (as it no longer comes from rootsupd.exe itself)?

How to remove advertisement from MSFN



    Update Packrat

  • Member
  • PipPipPipPipPipPip
  • 1,347 posts
  • Joined 04-July 05
  • OS:XP Pro x64
  • Country: Country Flag


Well, the latest current disallowedcert.sst is located in rvkroots.exe (KB2917500). I don't know where HFSLIP expects to find it...

Edited by 5eraph, 21 December 2013 - 04:32 AM.



    Friend of MSFN

  • Member
  • PipPipPipPipPip
  • 970 posts
  • Joined 28-June 04
  • OS:XP Pro x86
  • Country: Country Flag

I have a workaround included in HFSLIP 1.7.10 beta K



Say no to bloatware. Download Nero Lite!

Bugs Bunny

Bugs Bunny


  • Member
  • Pip
  • 66 posts
  • Joined 07-December 05

Thanks for the replies!


With HFSLIP 1.7.10 beta K it now worked perfectly!

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users