![](\"https:\/\/images.idgesg.net\/images\/article\/2018\/07\/windows-7-logo-on-mirrors_man-with-derby-hat-on-dock-100764718-large.3x2.jpg\"\/){kind=logo}
<\/p>\n
Credit to Author: Woody Leonhard| Date: Mon, 19 Aug 2019 09:33:00 -0700<\/strong><\/p>\n No doubt you recall the <\/span>warning back in February<\/span><\/a> that Windows 7, Server 2008 and Server 2008 R2 patches starting in July would use the SHA-2 encryption protocol. If you want to install Win7 patches issued after July, you have to get the SHA-2 translator installed.<\/span><\/p>\n A few days ago, Microsoft tossed a zinger into the FAQs down at the bottom of its SHA-2 post, <\/span>2019 SHA-2 Code Signing Support requirement for Windows and WSUS<\/span><\/a>. That post now says that you have to install a seemingly unrelated patch,\u00a0<\/span>KB 3133977, entitled,\u00a0BitLocker can’t encrypt drives because of service crashes in svchost.exe process in Windows 7 or Windows Server 2008 R2<\/a>.\u00a0\u00a0<\/span><\/p>\n That should immediately raise your eyebrows. It\u2019s a BitLocker fix, fer heaven\u2019s sake, and Microsoft now says you better install that fix before you try to run a new instance of Win7 \u2013 whether you have BitLocker or not.<\/span><\/p>\n Specifically, the SHA-2 post was updated on Aug. 16 to say you can run into trouble in any of these scenarios:<\/span><\/p>\n The remedies in each of those situations is a little bit different, but in general it includes installing the BitLocker fix KB 3133977 (even if you\u2019ve hidden it!) and running the bcdboot.exe program to refresh your boot files.<\/span><\/p>\n This, buried at the bottom of a FAQ in an old KB article.<\/span><\/p>\n And you thought Win10 users got all the new bizarre bugs.<\/span><\/p>\n Thx @abbodi86, @PKCano<\/span><\/i><\/p>\n Stay up on the latest — Win7, too — on <\/span><\/i>AskWoody.com.<\/span><\/i><\/a><\/p>\n http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" Credit to Author: Woody Leonhard| Date: Mon, 19 Aug 2019 09:33:00 -0700<\/strong><\/p>\n No doubt you recall the <\/span>warning back in February<\/span><\/a> that Windows 7, Server 2008 and Server 2008 R2 patches starting in July would use the SHA-2 encryption protocol. If you want to install Win7 patches issued after July, you have to get the SHA-2 translator installed.<\/span><\/p>\n<\/p>\n