Problem with Update for Root Certificates [August 2010] (KB931125)

[speckytecky]

We are running a Windows Server 2008 Domain with a mix of XP Pro and Windows 7 Pro Clients. Windows update service pushes out the updates to the clients.

 

Recently I have noticed that even though KB931125 displays in the updates history on client machines it persistently shows up on the XP machines on the Yellow coloured shield as needing installing. Doing so it pops up again a few minutes later, despite, as said earlier showing in History as correctly installed?

 

Googling this it looks like it's something to do with Root Certificate Trusts. As I haven't ever been there I wondered if anyone has a current update knowledge to sort this small but irritating issue please.

[speckytecky]

Think I might have cracked this one with trial and error - it seems the client needs a restart for each certificate.

[ZeroHour]

Is that not the root cert update that changes the certs for windows update? It could be different from normal cert updates. Also make sure your wsus/servers have that update otherwise windows update will stop I believe.