Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 



Sign in to follow this  
Bugs Bunny

rootsupd & disallowedcert

Recommended Posts

I've always been using rootsupd.exe in the HF folder as there is a distinct code part in hfslip that handles rootsupd.exe

Now Microsoft seems to have changed the rootsupdate no longer supporting disallowedcert.
I've extracted an older version of rootsupd.exe and a newer one and compared the options available.
Old version:
wk6f.png
New version:
8jik.png

The –u option (add to disallowed root store) is no longer available.
The extracted rootsupd.exe does not contain a disallowedcert.sst file any more.

But still hfslip gets a disallowedcert.sst from somewhere else (but I do not know where-from).
During setup therefore an error shows up, because hfslip wants to run updroots.exe for disallowedcert.sst with the options –l –u and the –u option is no longer available.

So as Microsoft removed the –u option from updroots.exe, is it safe to remove the codepart from hfslip that handles disallowedcert.sst specifically? (this should resolve the error during setup)

        IF EXIST WORK\I386E\disallowedcert.sst (                 REN WORK\I386E\disallowedcert.sst rvkcert.sst                 ECHO>>SOURCESS\I386\TXTSETUP.SIF rvkcert.sst = 1,,,,,,,998,0,0&ECHO>>SOURCESS\I386\DOSNET.INF d1,rvkcert.sst                 ECHO>>WORK\HFSLIPCMDP1.TXT %%SYSTEMROOT%%\HFSLIP\updroots.exe -l -u %%SYSTEMROOT%%\HFSLIP\rvkcert.sst         ) 

Anyone knows where the disallowedcert.sst comes from (as it no longer comes from rootsupd.exe itself)?

Share this post


Link to post
Share on other sites

Guest

Well, the latest current disallowedcert.sst is located in rvkroots.exe (KB2917500). I don't know where HFSLIP expects to find it...

Edited by 5eraph

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×