To learn more, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.īut that's not the root cause this time. Your devices must be updated to support SHA-2 in order to run MSRT. Note: Starting November 2019, MSRT will be SHA-2 signed exclusively. The support article for update KB890830 says: But the certificate chain used to verify the trustworthiness of the digital signature ends with a root certificate that is not considered trustworthy.Īd-hoc I would have suspected a missing Servicing Stack Update (SSU) or a SHA-2 update as the cause for Windows 7 SP1 and Windows Server 2008/R2. A digital signature is included in the update package. This simply means that the certificate used to verify the signed update file cannot be trusted. The error code 0x800B0109 stands for CERT_E_UNTRUSTEDROOT, and the message is in plain text:Ī certificate chain was processed, but ended with a root certificate that is not trusted by the trust provider. Woody Leonhard also mentioned this installation error in an article at ComputerWorld. I have also received reports that the tool is being installed on a recurring basis. The German comment here also shows the installation error with the 64-bit version. With KB890830 all my installation attempts fail.įurther comments indicate that there are install issues with the 32-bit version of Windows 7 SP1. Already on the patchday there were (German) comments like this: The MSRT version that was released on Novemas update KB890830 causes problems under Windows 7 SP1 and Windows Server 2008/R2.

You should therefore use an antivirus product to help protect your computer. This tool cannot replace an antivirus product. Those who want to run the tool manually can download it from the Microsoft Download Center or run an online version of. Windows needs to be restarted to take effect after installation.

The tool is available for all versions of Windows and is rolled out cyclically on patchday as an update to clean the systems from malicious software (certain common threats such as Trickbot). Update KB890830 is the 'Windows Malicious Software Removal Tool' (MSRT).

Update kb890830