Hi all,
I have KB2813430 installed on my company's Server 2008R2 machines and have followed the instructions in the document linked below, but still am unable to get the Untrusted Certificate store to update:
https://gallery.technet.microsoft.com/Configuring-Trusted-Roots-281be43a
I have ensured that permissions are set correctly for the FILE:// location that HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate\RootDirURL points to.
The HKLM\SOFTWARE\Policies\Microsoft\SystemCertificate\AutoRoot\EnableDisallowedCertAutoUpdate value is set to 1, which as documented in the above-linked URL, should be all that is needed to update the untrusted cert store.
Lastly, the following command was run with successful results:
certutil -syncWithWU -f -f c:\certshare
Thank you.