Author Topic: Invalid Certificate / Windows Upgrade (Read 3489 times)

telemarv · « **on:** April 09, 2021, 10:48:14 AM »

Ok this is long so bare with me.

I have a desktop PC that I use for all my TV streaming. I woke up one morning, went to turn on the news and it won't boot. Nothing I could do to get it working. It sat for 3 days trying to "repair windows".

So I decided to rebuild the hard drive. I have a corporate disk of win7 ultimate. It took a few tries to get it to install, but when it finally did it ran really slowly. Keep in mind this is a very fast Dell server quality PC, I 7 Xeon processor 8GB of RAM with 1 TB HDD.

I had a spare new never used 500GB HHD so I swapped the drives and loaded Win7 smoothly. I had to find and load all the drivers etc. It is now running at lightning speed. Conclusion; the old drive was toast.

Now that you've got the story, I'll get to my issue. Most web pages now give the unsafe screen because the browser determines the certificate is invalid and therefore unsafe. You have to accept the warning to continue to the page. I've tried multiple browsers all with the same result. Normally I'd accept that issue and move on, but my main streaming service, Bell Fibe, would not load at all. I have other Win7 machines that have no issues with any of streaming websites, so it's not the fact that I'm using Win7.

After doing some research, the most common reason for invalid certificates is an out of sync clock, but mine shows the correct time and date for my time zone. Of course being Win7, the only answer I get from any tech support is Win7 is no longer supported and you must upgrade.

So I decided to bite the bullet and upgrade Win10. After downloading and running the installer tool, it said I needed to activate Win7 first. Running through the activation (I have a valid corporate key) I get an error from Microsoft. Error code 0x80072F8F. Which upon research comes up with the same; out of sync clock. The windows clock is correct and I checked the bios clock as well. It too is bang on.

If anyone has any insight I would appreciate it. I'm beginning to wonder if something happened overnight and damaged not only the HDD, but also the motherboard.

MacGyver · « **Reply #1 on:** April 09, 2021, 11:37:31 AM »

I'm not sure where to start because on the one hand, you're pretty far up the food chain on this stuff, Marv, so anything I suggest you have probably already tried. On the other hand, I know that sometimes we get tunnel vision and just need a fresh set of eyes. If the browser error you were getting was one that basically said, your current security settings put your computer at risk, there is a registry fix for that, but it sounds like you're past that and now dealing with Satan Incarnate 10.

Yes, out of sync clock can cause that error, and sometimes if setting it to the correct time doesn't work, oddly enough, you can go back in time and set it to a previous time and it will work.

More commonly, I believe that error points to a TLS issue. I think it happens when TLS 1.0 is disabled, but don't quote me on that.

We also lock our Sonicwalls down pretty tight, so often I will see something like this when our Geo-IP blocking is getting in the way because it's trying to hit a server in India or some other restricted place.

Resetting the TCP Stack may be needed along the way. Also I suppose you could activate by phone, but I would rather do a packet capture then talk to Pakistan.

BTW, it sounds like you have all the necessary corporate editions, etc., but if not, let me know.

The one thing that doesn't make sense, is why were you having issues with two different versions? I don't believe in coincidences. What at the hardware level could be doing this? I hate to use the U word, but have you updated BIOS and/or run the Intel Driver & Support Assistant?

Added:

I just found what I was looking for on the TLS:

https://docs.microsoft.com/en-US/troubleshoot/windows-client/windows-7-eos-faq/troubleshoot-extended-security-updates-issues

telemarv · « **Reply #2 on:** April 09, 2021, 12:02:58 PM »

Thanks Trace.
I tried the automated phone activation where they send you link via text to enter the code. It seemed to work but windows still reports not activated. i read through the TLS part of the link. I'll give that a shot and see. Will report back.

The other I never did was run updates on the new install. I hope i can still get them.

MacGyver · « **Reply #3 on:** April 09, 2021, 12:09:23 PM »

I would think BIOS and Intel should be out there. Good luck. Will wait to hear back.

telemarv · « **Reply #4 on:** April 11, 2021, 10:39:32 AM »

Well it looks like I'm SOL

Trace making those changes outlined in the link had no affect.

Nothing I try will let me activate Win7.

I suspect the issue of out of sync clock error was addressed in an update, but updates are no longer available. When i try to run updates I get an error code and checking on the Microsoft site not only is Win7 no longer supported, all updates have been removed.

i was hoping to be able to get a free upgrade to Win10 once Win7 was active, but no such luck. It looks like the only recourse is to buy a Win10 licence.

You can't upgrade an inactive Win7 and you can't activate it.

The box works but I can't go to some websites correctly because of the invalid Certificates.

Maybe I'll experiment with Linux first before shelling out $200.00 for a Win10 licence.

tonyburkhart · « **Reply #5 on:** April 11, 2021, 11:53:39 AM »

Well, there is always tried and true Linux install for $0.00 and you’d be able to get the most up to date version that your hardware supports and with the new long term releases they are doing it should last you for a good long time. Check out details here https://ubuntu.com/download

If you really have to stay on Windows for whatever reason then the 7 to 10 upgrades are still a no cost option per this article https://lifehacker.com/quickly-upgrade-windows-7-to-windows-10-for-free-with-t-1840843214

If all else fails, we can send you a drive with Windows 10 on it and it will be plug and play. We decommission so many machines that don’t always need the license transferred that it would be no problem.

MacGyver · « **Reply #6 on:** April 11, 2021, 05:35:19 PM »

Have you already installed the Service Packs?

Don't shell out. If you have already tried the SPs I've got your back.

telemarv · « **Reply #7 on:** April 12, 2021, 09:21:13 AM »

Latest update;
I spent yesterday afternoon installing Linux Ubuntu. It is smooth install, answer a few questions and away it goes. It checks hardware and installs Linux drivers for them. It works well, and although it has a GUI there is a steep learning curve. I still can't figure out how to install a bit torrent program I use called Popcorn Time. I downloaded its Linux version, but I can't make heads or tales out of the install process.

The only other major issue I'm having now is with the wireless connection. it keeps dropping even though I am litterly only 10ft from the router. If I run a patch cord to the router the connection is stable. A minor annoyance is having to use a log in password. Even though I have it logging in automatically on boot up, if the machine goes to sleep the password is required to wake it up.

It comes with Firefox and i can access all of my streaming services without the dreaded Invalid Certificate error. So that's a plus. It has it's own email client and a compatible program for MS Office. Linux is definitely better suited for other uses than what I want it for.

For my purposes I prefer Windows. I'm not the only only one using this machine (read wife with little or no love for tech).

Trace, I did try to get SP1 for Win7 which, I think, would have solved my problem of certificates as I think the invalid clock error was addressed in an update. No longer available from Microsoft.

Tony, what I found with trying to upgrade, is that without Win7 being activated the free upgrade doesn't work because there is no valid key and it appears MS won't activate Win7 anymore. The only option given is to buy a Win10 key. So as i said above i went the Linux root with mixed success.

Tony, I would be grateful for a Win10 disk and key. USB is not an option as for some reason the machine does not have a USB boot option.

MacGyver · « **Reply #8 on:** April 12, 2021, 08:38:28 PM »

A Win7 Enterprise might load as it doesn't actually go through the authentication servers.

telemarv · « **Reply #9 on:** April 12, 2021, 09:00:39 PM »

The disk I have is an Ultimate.

MacGyver · « **Reply #10 on:** April 12, 2021, 09:22:31 PM »

Sorry. My brain is toast after today. I said Enterprise, but I was thinking Select Pack. Check your PMs.

tonyburkhart · « **Reply #11 on:** April 13, 2021, 01:20:29 PM »

Marv, did you still want that disc or did Trace get you taken care of via PM?

MacGyver · « **Reply #12 on:** April 13, 2021, 01:29:44 PM »

I haven't heard back from him, Tony. If you have a disk that will get him back online, feel free to send it.

telemarv · « **Reply #13 on:** April 13, 2021, 04:11:07 PM »

Trace just replied to your PM. I'll PM Tony if that's the best easiest for everyone.

As I said a disk with win10 and an activation code.

tonyburkhart · « **Reply #14 on:** April 13, 2021, 04:30:16 PM »

Marv, I can have Bob give you a call. He is our most trusted Windows brain in all of Ohio! If you want to shoot me a PM with your cell number he can give you a call this evening or schedule it for sometime tomorrow etc. He may be able to help with the key and/or the reload or even if we have to ship you a physical desk we can do that as well

telemarv · « **Reply #15 on:** April 14, 2021, 07:56:04 AM »

Thanks Tony, please standby I'll have to reload windows on the box as it right now is running Linux. Meanwhile, Trace is making some stuff available to me on his FTP Server.

tonyburkhart · « **Reply #16 on:** April 14, 2021, 08:03:19 AM »

Cool, let me know! We can toss a Windows 7 or 10 ISO up on our file sharing server too and we have multiple licenses if need be. Here when you need! Thanks.

telemarv · « **Reply #17 on:** April 16, 2021, 07:52:19 AM »

SUCCESS!!

I now have a working machine running Win10. Turns out I'm an idiot and was able to get it to boot from a USB drive. In the BIOS it didn't specifically say USB as an option. It did say "Other", so I tried that option while waiting for Amazon to deliver the dual layer DVDs I ordered and it worked. I also had to download a USB creator program on my laptop as windows 7 doesn't have a native burn disk image to USB. Now to configure all my streaming apps and we have a TV again.

Thanks Trace for your all help.

And to you Tony for standing in the wings waiting to jump in to aid if needed.

tonyburkhart · « **Reply #18 on:** April 16, 2021, 08:36:37 AM »

Fantastic, thanks for the feedback! I’m glad you got it working. Good job team 👊

MacGyver · « **Reply #19 on:** April 16, 2021, 08:57:44 PM »

Awesome!

One thing I love about this small group/family is that we always have each other's backs. Tony you can bet when I hit the wall on one you're right at the top of my list to ask for help.