I have a feeling Microsoft use different TRA (Trusted Root Authority) updates for each language and country and their all signed using an invalid certificate ID
Microsoft uses a hard-coded Certificate embedded in Windows for updating this list, I assume a recent update is using either the wrong certificate or they removed their embedded certificate by mistake
I also noticed after installing the 11/24/2008 Manual Root Certificate update for XP (
https://www.microsoft.com/downloads/...DisplayLang=en) on my Vista system it fixed the hundreds of missing Certificate Trust List entries from that certificate update offered on Windows Update but it didn't fix the "The certificate that signed this List not valid" error
Im thinking their entire batch of TRA list`s was corrupted globally somehow and my system probably got the first silent update that succeeded in installing the Invalid list before realizing too late it`s Invalid and was trying to redownload a new list but cant since its signature is also invalid hence the Eventlog reports
Heres the MSDN Info for the Event Error Im receiving:
EventID 11 Automatic Root Certificates
I have tried both options but each time a new event-log error pops up with
Quote:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
.