Do you use Windows 7 SP1 or Windows Server 2008 R2 SP1? This article is for you.
The Windows Update KB4474419 released in 2019 corrects an issue with SHA-2 code sign-in and is critical to continue to use the above two versions of the Windows operating system. So, if you haven’t downloaded and installed this update, do so right away.
If you’re wondering why you should install the KB4474419 update, read on as I talk about the changes this update makes, where you can download it, and even possible errors (and solutions) that can come with this installation.
What Changes Does Windows KB4474419 Make?
The biggest feature of Windows Update KB4474419 is the introduction of SHA-2 code sign-in support for Windows 7 SP1 and Windows 2008 R2 SP1.
This SHA-2 code sign-in enhances the security of the Windows operating system. Prior to this update, Microsoft used SHA-1 and SHA-2 hash algorithms to sign its patches and updates. The receiving computers used both these hash algorithms to ascertain that Microsoft is the sender of these updates.
However, many vulnerabilities were detected in SHA-1, and this opened the possibility for cybercriminals to pose as Microsoft and send malicious updates. To avoid this possibility, Microsoft has switched completely to SHA-2, which is far more secure and tamper-proof.
As a result, your computers get an additional security layer with the KB4474419 update. Since this is a critical update, you must install it at the earliest, if you haven’t done so already.
Why Should You Install Windows KB4474419?
Besides the additional security and authentication mentioned above, note that Microsoft will not allow you to install any patches or updates released after July 2019 until you have installed the KB4474419 update.
Though this update was first released in March 2019, Microsoft has made incremental updates to add missing MSI files and EFI boot managers.
Now you may wonder how to download this update. That’s exactly what we’ll talk about next.
How To Download Windows Update KB4474419?
Here’s a step-by-step guide on how to download Windows update KB4474419.
- Go to Control Panel -> Windows Update
- Click the “Check for Updates” button
- Windows will automatically check for the available updates and will download them. This is true for the KB4474419 update too.
- Windows will also install the update.
- Once the installation is done, Windows will prompt for a restart.
- Restart your computer. Note that this can take a few minutes.
That’s it. This is the easiest way to download and install update KB4474419 to protect your computer from malicious patches and updates.
You can also choose to manually download and install this update. To do this,
- Go to Windows Catalog
- In the search box on the top right-hand corner, type “KB4474419” and hit the search button.
- From this list, choose your operating system and click the “Download” button.
- Run the patch on your device and follow the instructions.
In the end, restart your device to update the patch.
Errors Caused By KB4474419 Update and How To Fix Them
Finally, let’s talk about the possible errors that can occur due to Windows update KB4474419, and how you can fix them.
A common error is the update failing to install. This happens due to many reasons, such as the following.
While this may seem a no-brainer, sometimes, we may miss the simplest of causes. Check your Internet and its speed. Restart the router or contact your Internet Service Provider to fix the internet-related issues before downloading or installing the patch.
If you’re downloading update KB4474419 from the Internet, there is a chance that one or more files may miss getting downloaded. Sometimes, the downloaded files may also be corrupted.
To fix this, delete the downloaded file. Check your Internet and download the update again. Try installing the update now, and if the issue persists, you can move on to the next option.
Problems with Window Update Service (WSUS)
WSUS is the service that’s responsible for installing updates, so naturally, you can’t install update KB4474419 when there’s a problem with WSUS. To fix this problem, clear the temporary cache.
- Go to Windows Run (Windows button + R) and type “services/msc”
- In the new window that opens, search for “Windows Update”, right-click on it, and select Stop.
- Open Windows Run and type %windir%\SoftwareDistribution\DataStore
- In the Windows explorer, delete all the files in this folder.
- Go back to your Windows Update, right-click, and select Start.
Now, the update should work, if the problem was with WSUS.
Thus, these are some ways to fix the update errors.