Downloading root certificates from Microsoft RRS feed

  • Question

  • My team produces a driver for an internal tool.  This driver is signed to in order to make the Windows machines happy.  On some machines, the authenticity of the signature is not completing.  It appears to be that some certificates were missing in the expected chain.  The expected chain for the "Cross Certificate Chain" is:

    Microsoft Code Verification Root ->
            DigiCert High Assurance EV Root CA ->
                    DigiCert SHA 2 High Assurance Code Signing Ca ->

    Now, our certificate is not in the store yet because this box was missing the, "Microsoft Code Verification Root" and the "DigiCert SHA 2 High Assurance Code Signing Ca" certificates.  I was able to, in minutes, download the certificate from digicert and import it in my test system.  However, I have not found where to get the first root certificate in this chain from Microsoft.  Every google search I try brings me many hits for KB or Technet articles, but none seem to know where to get the cert.  I ran Windows Update (this was a fresh install of Windows 7 Professional SP 1) hoping that would bring in the new cert, but no joy.

    Where do I find it?

    Tuesday, June 14, 2016 7:20 PM